yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] Ch4t4r:
No idea where that comes from - maybe it's a permission the system grants automatically to all apps or it's used by the system to circumvent a certain problem. Either way, it's not a permission I declare in the app's manifest (https://git.frostnerd.com/PublicAnd...ob/master/app/src/main/AndroidManifest.xml#L6 -- alternativly decompile the app and look at the manifest file).

The benefit of OpenSource (FLOSS in thise case) is that anyone can check on what the app is actually doing. If you try to search for "clip" in the source code you are only going to find irrelevant files (https://git.frostnerd.com/search?ut...id=395&search_code=true&repository_ref=master). If you don't trust that the uploaded source code is in fact the one distributed in the binary feel free to decompile the .apk, you can find the deobfuscation file here: https://git.frostnerd.com/PublicAnd.../build/outputs/mapping/r8/release/mapping.txt (yes, I explicitly grant you permission to do so, normally that's forbidden because of IP I believe)

So to reiterate, no idea why it shows that, the app doesn't access the clipboard. You can check that yourself.

Edit:

I can't even tell you why it shows "Modify settings" and "Read external storage" as well -- the app doesn't request those permissions, too. As far as I remember the modify settings permission isn't even granted to non-system apps.
[Android Software/Hacking General [Developers Only]] Jaruamana:
Unable to use keweondns's DOH in Firefox .

I made a video about the problem of keweonDNS not working in firefox at all.

Watch it with full screen.

https://www.youtube.com/watch?v=xdZf6owEM3E
[Android Software/Hacking General [Developers Only]] MrT69:
Note

How to use DoH at Firefox:

[MENTION=9651868]Jaruamana[/MENTION]

If you want to use TRR mode 1-3, then you have to disable the validation of SSL certificates via OCSP server. Firefox wants to check the SSL certificate of the DNS over HTTPS server and needs the IP address of the OCSP server from the DNS over HTTPS server.

Solution:

security.OCSP.enabled - 0 (Imporant for ANY DoH Server)

The DoH (and Fallback) settings:

network.trr.custom_uri - 159.69.49.250

(Set here the DoH Server IP Address - keweon DoH

159.69.49.250 or 116.203.126.207 or 95.216.165.29)

network.trr.mode - 2

network.trr.uri - https://doh.asecdns.com/nebulo
[Android Software/Hacking General [Developers Only]] cahdawe:
i did your steps, however my firefox still showed "Server not Found"

Edit:

I found out that in firefox the only working ip for network.trr.bootstrapAddress are

159.69.49.250

116.203.126.207

95.216.165.29
[Android Software/Hacking General [Developers Only]] MrT69:
Cool... Thanks a lot for this feedback!
[Android Software/Hacking General [Developers Only]] murali3127:
Is it safe to use keweon dns using the private dns option in pie with out using any app?
[Android Software/Hacking General [Developers Only]] Jaruamana:
These three ips "159.69.49.250, 116.203.126.207 , 95.216.165.29 work. Thanks .

Don't need to set security.ocsp.enabled to 0.

But have to set trr.mode to 3 ( forcing dns over https only) .

---------- Post added at 04:01 PM ---------- Previous post was at 03:54 PM ----------

I have installed the keweon root certificate. The two ips "213.239.207.143 " and " 107.191.55.215 " for root certificates don't work in firefox. I want to use the certificate and the recommend ips for them. Also the Indian server doesn't work.

---------- Post added at 04:02 PM ---------- Previous post was at 04:01 PM ----------

I have installed the keweon root certificate. The two ips "213.239.207.143 " and " 107.191.55.215 " for root certificates don't work in firefox. I want to use the certificate and the recommend ips for them. Also the Indian server doesn't work.
[Android Software/Hacking General [Developers Only]] MrT69:
The Indian Server is working again. Just only on IPv4. The IPv6 Address will not work for some reasons.

:(
[Android Software/Hacking General [Developers Only]] MrT69:
Sure ;) But I guess for this answer I'm the wrong person. *gg*
[Android Software/Hacking General [Developers Only]] :
[MENTION=304818]MrT69[/MENTION]

Aliexpress qndroid app's image doesn't properly load..

Colud you please fix this?

https://play.google.com/store/apps/details?id=com.alibaba.aliexpresshd
[Android Software/Hacking General [Developers Only]] methuselah:
Because networks still don't support ip6 protocols I guess. Even the network ping from that country's network shows data transfer on ip4, ip6 always gives error. Maybe that's the reason
[Android Software/Hacking General [Developers Only]] murali3127:
Does keweon include energize ultimate list? And which other popular list it includes I want to know so to avoid redundancy?
[Android Software/Hacking General [Developers Only]] kusakhan:
magisk module still not update
[Android Software/Hacking General [Developers Only]] MrT69:
Is it working now?
[Android Software/Hacking General [Developers Only]] :
Oh! Yes It's working now! Thank you!
[Android Software/Hacking General [Developers Only]] MrT69:
Yep. But I removed all porn and other censorship entries. In addition I use the hpserver list and someonewhocares.

The rest is done by my own.
[Android Software/Hacking General [Developers Only]] MrT69:
Keweon Update Info

1. Google Maps

A few things are disabled at Google Maps because I want to disable the Google tracking. Test it an let me know what you think about this.

2. AdStacking

https://www.androidauthority.com/android-battery-drain-ad-scam-968224

This is nothing new for me and it's already blocked since 2017 at the keweonDNS Servers. I just wasn't aware about the name of this crap.
[Android Software/Hacking General [Developers Only]] MrT69:
Sorry... Some updates was required.

Playstore and some others Google problems are fixed now.
[Android Software/Hacking General [Developers Only]] DenyDarko:
Hey [MENTION=304818]MrT69[/MENTION]

Keweon blocks support chat for hostinger (maybe others too):

I've detected the above but there might be others blocked.

Intercom related entries should be removed.

https://www.intercom.com/
[Android Software/Hacking General [Developers Only]] MrT69:
Send this URL within a TXT file to my whitelist address. Today I'm on the road with family but I will open it tomorrow.

Million time thanks for this!!!!
[Android Software/Hacking General [Developers Only]] DenyDarko:
Done ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Also done. Check it please ?
[Android Software/Hacking General [Developers Only]] babalizm:
Great module but break wifi :(

please kindly fix? Many Thanks

MiA1 PE Rom 9.0
[Android Software/Hacking General [Developers Only]] methuselah:
What module? I am using it on pie A1 and it is working as expected . did you configured the app and server properly?
[Android Software/Hacking General [Developers Only]] babalizm:
Via Magisk module

I just configured as told,

#su

keweon

Set dns to primary & secondary keweon's recomend

That's it bro, but after restart my wifi break :(

There's no internet

Where's Any mistakes possibilities?

Thanks for the reply
[Android Software/Hacking General [Developers Only]] methuselah:
Well there maybe issues with the magisk. Why don't you use this app https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen and import the file by searching op for the downloadable configuration file
[Android Software/Hacking General [Developers Only]] babalizm:
Ok i will try it.

Many thanks bro
[Android Software/Hacking General [Developers Only]] MrT69:
Warning Notice: UC Browser User

https://thehackernews.com/2019/03/uc-browser-android-hacking.html?m=1
[Android Software/Hacking General [Developers Only]] DenyDarko:
You know what they say..

When you're not the customer, you're the product.

Dolphin Browser Case No2 ?

Also, Chinese software with backdoors? What a surprise. ?
[Android Software/Hacking General [Developers Only]] O l l i X:
I think it's more like: "if it's free, then you are the product".

-Unless it's open source, of course!
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
*deleted*
[Android Software/Hacking General [Developers Only]] pxrave:
hey dns over https or tls works fine in firefox or android 9.

i know you use some technique to unlock youtube is this possible for netflix too? i want to watch some content who is available everywhere in europe but not in germany (series is in german too :confused:) any chance?
[Android Software/Hacking General [Developers Only]] MrT69:
From the technology point of view it would not be a problem but I can't do it because then the Servers within ASIA will be blocked by chinese Government.

On the other hand it would be required to use a proxy based solution. At the moment I can't cover this because of financial limitation.
[Android Software/Hacking General [Developers Only]] pxrave:
I thought so already.

i have some questions about firefox dns

today i try'd this server mode here:

network.trr.custom_uri;2a01:4f8:c2c:e25::207

network.trr.mode;3

network.trr.uri;https://doh.asecdns.com/nebulo

oder can i use doh.asecdns.com by custom url and your system use a best available ip adress?

in your guide you advise to use the ipv4 ip. i have a native ipv6 connection and use ipv4 over ds-lite to have full compatibility with some websites and other things.

is this config valid?

i did a dns leak test and its successful and show HETTNER ....

thanks for your great project, we already talked about some demo at telegram maybe you can show us sth more in a few months :) br

//edit

i get some Fehlercode: SEC_ERROR_REUSED_ISSUER_AND_SERIAL errors (some of them are affiliate sites) any chance to fix?

bugged too https://support.mozilla.org/de/kb/verbindung-ist-nicht-sicher-fehlermeldung

i will report to your mail adress if you confirm this (or its because of ipv6 server url)

certificate is installed since day one
[Android Software/Hacking General [Developers Only]] MrT69:
Here are my DoH settings:
[Android Software/Hacking General [Developers Only]] pxrave:
what about ipv6 address?
[Android Software/Hacking General [Developers Only]] koukise:
Hi

Please sorry that stupid question, how do we remove the certificate on Windows 10?

I list certificat but I do not find it, at least a Keweon...

PS: In Firefox I found and deleted "keweon AdBlock RootCA"

Many thanks.
[Android Software/Hacking General [Developers Only]] pxrave:
Today I tryd nebulo on 8.1 works fine but deezer music doesn't work with your DNS. Spotify works fine.
[Android Software/Hacking General [Developers Only]] MrT69:
I have no idea because here at home I can only work with IPv4 Address.

Sorry...

No idea if this is working. The servers are working with IPv6.
[Android Software/Hacking General [Developers Only]] MrT69:
May I ask what was the reason for remove it?
[Android Software/Hacking General [Developers Only]] MrT69:
I was using the browser. This is working.

https://www.deezer.com/en/album/88592872

What exactly is not working?
[Android Software/Hacking General [Developers Only]] MrT69:
Info: g00 Adblock Detection - it's history

It has taken a damn long time but now it's done. The famous g00 Adblocker is history.

At the moment the live server don't have the update because it was required to re-design the entire database. On my Test Server it's already running.

If you know any additional g00 Adblock detection please forward this address to me. I need to double check a few things.
[Android Software/Hacking General [Developers Only]] koukise:
Hi,

I am using laptop from my company I cannot do what I want, I proceed to some tests with Keweon, fully used on my Droid.

Regards
[Android Software/Hacking General [Developers Only]] MrT69:
If you see false blocked sites please forward them to me. I'm not able to track and check every site in addition ;)

If you send them to me I will whitelist them and they are stay open.

Can you give me more details which things are not working?
[Android Software/Hacking General [Developers Only]] pxrave:
website works fine but play content (music) doesnt.

I also noticed that your service is sometimes very overloaded and does not respond.

My question is certainly critical for you, but would it be possible to integrate a fallback dns into your system? Of course of your choice so your service would be more accessible. But I only noticed DNS / HTTPS / TLS so far.
[Android Software/Hacking General [Developers Only]] 5amar31:
flipkart.com on Chrome Android is giving issues since a few months. Images don't load up.
[Android Software/Hacking General [Developers Only]] Ufolas:
Search on Google for "Certmgr.msc", I did it by that windows tool in case someone needs to :good:

I removed it coz I needed "booking.com" to work and tought the reason was the certificate, but still not working with keweonDNS on :eek:
[Android Software/Hacking General [Developers Only]] MrT69:
It's already removed and working. Keep in mind that the entire System is still within a test because of the size and to collect all the things which are not working.

This is very important for me to get all the broken things reported because this is the base for the Filter Algorythm. It's almost enough when you let me know which site is broken. As soon as you report this it will be fixed almost within the next 24 hours.

It's not a problem at all to reduce this time down at round about 5 to 10 minutes. But I have a Job in addtion. ;)

That's all at the moment I need and I hope you have still fun with keweon!!
[Android Software/Hacking General [Developers Only]] Ufolas:
Sure man! Your work is great! I was sure was my pc going crazy coz it's too famous website to go in bl ;) then I sent you a wl mail :good:
[Android Software/Hacking General [Developers Only]] pxrave:
hey torsten,

i also read on android-hilfe and i can confirm the tls slowdown at android and other devices using tls.

In Firefox i use ttr.mode = 2 because of i use cloudflare 1.1.1.1 dns as fallback.

i tought about an fallbacksystem for your dns services but i think you wont agree because its not your project, but think about users if it gets final there shouldn't be some slowdowns. so using a fallback dns strategie would be great.

do you have any idea for use two dns servers with autofallback i know about i can setup two servers but this conzept doesnt work.

android tls dns have often problems with whatsapp messages dont go out (if i deactivate your dns its very fluent) it must be your dns. as i already reportet deezer streaming (not website) sometimes dont work (maybe dns to slow also?!?!)

i deactivated all your dns stuff and used 1.1.1.1 for testing everything and it works flawless.

if you need further details you can contact me in telegram or xing
[Android Software/Hacking General [Developers Only]] Jaruamana:
www.ghacks.net is not loading.

Images, icons in F-droid is not loading.

DOT is not working in nebulo app.
[Android Software/Hacking General [Developers Only]] Jaruamana:
Images is not showing /loading in " https://gadgets.ndtv.com/news ". It is a tech news site .
[Android Software/Hacking General [Developers Only]] MrT69:
I hope I have done everything to open it. Will double check it when I'm at home.

Because of DoT and Nebulo App I'm working close together with frostnerd. There is a problem within the App.
[Android Software/Hacking General [Developers Only]] MrT69:
I only worked for feeling. ;) That should work.

I will double check it when I'm at home today.
[Android Software/Hacking General [Developers Only]] GamaShani:
How to use DoH on Windows?

Does the instructions provided in the OP enable me to use DoH on Keweon or the DoH functionality has not yet available on Windows? :confused:
[Android Software/Hacking General [Developers Only]] MrT69:
Therefore is currently no real client existing. Last year I was thinking about to offer a Client for this or a virtual machine but because of the "keweon is doing mitigation threat and everything is ****" discussion I decided it's better not to do this.

Í would recommend to buy a old and cheap PC. Install Ubuntu and Unbound. Point the WIFI Router WAN DNS to Unbound and allow Unbound to talk to external DNS.

This offers a better performance and even for a 20 user office this is faster then a local client because of caching option.
[Android Software/Hacking General [Developers Only]] madhub:
Hello [MENTION=304818]MrT69[/MENTION], found two problems.

The android app fotmob for football livescores is not loading correctly since a few days. No graphics like Club Logos will be loaded as well as game details.

Additionally to that the tipico app isnt starting at all...

It would be nice if you can have a closer look there.
[Android Software/Hacking General [Developers Only]] Jaruamana:
For the first time, in history, for me ( I can vouch, can confirm that) , Keweon dot is working in android default private dns address in setting & also in nebulo app. Previously, no matter what, it was not working at all , not even once. Working in India at 5 pm.

In Stubby, it is not working somehow.

Some servers are not working somehow.

Thank you.

Keweon DoH in Firefox doh is still a mystery for me. In firefox, it is still a mystery.

---------- Post added at 01:48 PM ---------- Previous post was at 01:45 PM ----------

1. ghacks.net is not loading.

2. Images,pics are not loading in the website " gadgets.ndtv.com "

3. Images,pic, icons are not loading in F-droid.
[Android Software/Hacking General [Developers Only]] MrT69:
I have found fotmob but I have problems to find the other App. Can you send me a link to "football livescores" App?
[Android Software/Hacking General [Developers Only]] MrT69:
DoT Server - Upgrade

I upgraded all Servers and I moved everything to FreeBSD. The Server are now much more faster and I hope they are running better now.

Give it a Test and send some feedback

DoT Server Address:

dot.asecdns.com
[Android Software/Hacking General [Developers Only]] jemail:
I would really like to use this on my router, but every dns server I use from keweon immediately disconnects my router from the Internet. If I change my dns on the router back to my previous opendns servers, I get Internet connected again.

I have followed your instructions but I get the same behavior.

I have configured dsncrypt on my android devices with no problems. So I guess I will set up dsncrypt on my router instead.

I find it very strange that your dns servers immediately disconnect my router from the Internet.
[Android Software/Hacking General [Developers Only]] MrT69:
Which Server you are using for your Router?

This is my ASUS Router Config:
[Android Software/Hacking General [Developers Only]] madhub:
Thank you so far.

fotmob app is for live scores. The second request is about the tipico app wich is not loading at all.

Many thanks in advance.
[Android Software/Hacking General [Developers Only]] MrT69:
Got it! ;)

And it seems working. At the moment it's on the Test Server and I'm preparing the upload.

EDIT:

Upload is running. Should be done within 30 minutes.
[Android Software/Hacking General [Developers Only]] jemail:
Thank you for the prompt reply ?.

I use an ASUS RT-AC68 running Merlin firmware on an SFR Fiber connection. So the router is behind the SFR Fiber modem.

I'll try again, but my settings are similar to yours, except I have a static local ip address assigned by my SFR Fiber modem not an automatic one as you have.
[Android Software/Hacking General [Developers Only]] MrT69:
I have double checked it. With static IP Address it's the same place where you need to set the DNS Server.

I'm also running Merlin so the settings should work immediatly.

Which Provider and which Country you are from? It might be that you have DNS change restrictions forced by provider.

That's the only thing which would explain this if it's still not working.
[Android Software/Hacking General [Developers Only]] kusakhan:
https://www.telenor.com.pk/

kindly whtitelist this web adress....
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Who want to use DoH or DoT in windows, can use https://technitium.com/dns/ but follow instructions how to use it
[Android Software/Hacking General [Developers Only]] Mesoyt9:
Rutracker is broken

Hi, I was using the recommended DNS with root certificate on Windows and Rutracker didn't work. Says that I should enable Javascript.
[Android Software/Hacking General [Developers Only]] MrT69:
Who is rutracker? Can you send me a link?
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
So far so good, seems fast, and haven't noticed any kind of connection loss that I did had before this upgrade, great work dude ?
[Android Software/Hacking General [Developers Only]] MrT69:
dot.asecdns.com vs. dot.asecdns.ch

There is a new Server and it's now up to you to compare. In addition I need more traffic on this Server.

dot.asecdns.com:

This is a virtual Server instance with 3 different VPS Server and they are working round robin balanced. Each Server has 8GB RAM and 2 CPU

Location @ DC Hetzner Nuernberg, Falkenstein and Helsinki

dot.asecdns.ch:

Same installation and it's a physical System with 1 x XEON CPU (6core) and 32GB RAM.

Location @ DC Hetzner Falkenstein

For testing reason I will move the physical Machine end of the week to "Unbound" with TLS. I can't run this on a VPS because my Unbound config will need round about 5 GB RAM (!).

Test, see and check. Feedback for this would be great.
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir [MENTION=304818]MrT69[/MENTION], What are your thoughts on the below link?

I think that DoH is more privacy friendly than DNS over TLS.. :confused:

I would love to know about the diverse viewpoints on this topic from all the members of the forum.. ?

https://www.thesslstore.com/blog/dns-over-tls-vs-dns-over-https/
[Android Software/Hacking General [Developers Only]] 5amar31:
Thanks for fixing flipkart.com

I have another issue though. Any image in i.reddit.com is too slow to load & also comments/threads sometimes don't load up on reddit.

Edit: Just trying out the new .ch DNS & it doesn't have the same issue.
[Android Software/Hacking General [Developers Only]] MrT69:
That's interesting. All the DNS Servers are using the same "Root Server Backend".

I have also tested it at the .ch Server and there the site loads very quick.

Also the same with Videos and Pictures.

Thanks a lot for this feedback.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

1.

During the last week I have had redesigned the entire Blacklist Database. I was working more then 2 yrs on the g00 Adblock detection and now I know how this is working.

This system force user to get ads and all the other crap by some kind of reverse proxy. Best example is the website "boston.com". It seems they have always the newest version in use. Therefore it was required to redesign the entire Database.

2.

DoH and DoT Servers are now optimized and I also removed the NXDOMAIN errors which was causing sometimes a lot of annoying errors.

3.

There is now a physical instance for DoT service. It's a Server with a XEON Processor and 32GB RAM which supports the TLS/SSL connections. Because of all the errors before with DoT you can now compare the difference of VPS and physical Server by yourself.

doh.asecdns.com is the VPS instance and doh.asecdns.ch is the physical instance. Both systems are located in Germany at Hetzner Data Center.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

BROKEN DATABASE FIXED!​
[Android Software/Hacking General [Developers Only]] GamaShani:
Thank you Sir [MENTION=304818]MrT69[/MENTION] for your making me understand such a detailed topic in an easy and excellent way.. :good::o

Have a good day ahead Sir.. ? ✨ ??
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir [MENTION=304818]MrT69[/MENTION], when I install the certificate there are two different options..

1. VPN & Apps

2. WiFi

Which option should I select for the optimal functioning of Keweon?

And is there any .ch DoH server available:confused:
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
[MENTION=304818]MrT69[/MENTION] can you again give me the IP adress for dot.asecdns.ch please. My phone crashed. Sorry

Anton Vermeulen