yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
amazon-adsystem troubles

I have tested it. I can't lock this. No ads anywhere and Amazon and Co. is working if you are able to use the Certificate.

If you can't use the Certificate then you will have troubles with so many sites. Amazon. IMDb, various sites and different Apps are not longer working. I have no problem with users when they don't want to use the Certificate. But I have problems because the Certificate is almost only working within EU and US. This would cause too many troubles when I lock different domains without the chance to use it.

The current system is to weak for this. ?
[Android Software/Hacking General [Developers Only]] sobriquet506:
:eek: Just noticed that the keweon Magisk Module has been removed...

Hoping for info, it has been working wonderfully for me!

(Also, thank you for all the hard work on keweon, it's an amazing project!)
[Android Software/Hacking General [Developers Only]] MrT69:
This project was not initiated and supported by me. I hope someone take care about this and re-start this.
[Android Software/Hacking General [Developers Only]] J4jks:
This module is by [MENTION=8843871]bhaskarjy0ti[/MENTION] , hope he'll bring it back in magisk repo, I think he is aware this removal.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Thanks for informing me bro. I will look into it.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

The last 2 weeks was a hard development time. Within the Telegram Group I was able to identify a major problem.

The current keweon System is too weak to provide a successful ZSPB connection when the Certificate is installed. This has had impact to different domains when I put them on the blacklist. Until yesterday I was not able to block ads from big companies as like as Facebook or Amazon because they where almost served via HTTPS. Just blocking them causes a lot of troubles to other sites.

Since yesterday I'm running a test with different users on my private DNS Server. This Server is connected to a DSL Line at home but it's strong enough for a tiny group.

At the moment some users are still testing. I have locked down the domains below:

- pixel.facebook.com

- graph.facebook.com

- almost all known Amazon ads domains

The feedback is amazing:

- Amazon is working and almost no ads

- same on Facebook

- Youtube almost no Ads and also no in-stream ads

- Snapchat working

- Instagram working

- IMDB working

I don't know any additional domains to test and of cause, at the moment it's not 100% working because it's still in test.

Every recommendation is welcome. If you are interested to support and want to become a tester then join to Telegram. But keep in mind it's just a Test System and Setup.

Why to use the certificate?

This websites uses https technologies for different reasons. Tracking user, serving Malware or Spyware, grabbing data and the most important thing is because it's almost not possible to block.

Best example is pixel.facebook.com domain. When you block this by simple add this to your hosts file you will run into troubles. That's because of the HTTPS error. This error is a very good option to detect if you are using Adblock technologies.

That's the only reason for this solution.

Actual Status

Via Telegram I'm still testing Apps with users and this will take some time. At the moment I know it's still not 100% working and there is still some fine tuning required. I want to have a working solution for all countries. We are working on this.
[Android Software/Hacking General [Developers Only]] MrT69:
Edit:

Received the info Apkmirror is also now working via my Test server.

Please allow me one more day for testing.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Apkmirror.apk or through a browser?
[Android Software/Hacking General [Developers Only]] MrT69:
I only received this info by a user who was testing my current TestDNS Server.

It seems they are working with Facebook and/or Amazon ads. Wasn't aware of this.

I'm still not sure if I should activate this on all DNS Servers. If a user is not using the Certificate then a lot of things are broken.

There would be a higher protection but on the other hand I don't want to force someone to use the Certificate. This would have a bad taste.

Damn...
[Android Software/Hacking General [Developers Only]] jyoti.id:
With DNS on Saavn app cant play few songs. It stucks when DNS is on, as soon as i turn it off the song starts... Happening since 2days
[Android Software/Hacking General [Developers Only]] MrT69:
Send me a link for the App please. Are you using the Certificate or not?
[Android Software/Hacking General [Developers Only]] jyoti.id:
Yes using it.

---------- Post added at 07:02 PM ---------- Previous post was at 07:01 PM ----------

https://play.google.com/store/apps/details?id=com.saavn.android
[Android Software/Hacking General [Developers Only]] MrT69:
Update in progress...

Should be online within 2 hours. Let me know if it's working. :fingers-crossed:
[Android Software/Hacking General [Developers Only]] MrT69:
Test request to China or Singapour:

Please install the keweon Adblock Root Certificate and try to access this URL:

https://adblock.keweon.center

If it's a blank page this would be awesome. If this is possible to access the site it's possible to lock down Facebook and Amazon against privacy violation, data sniffing and data collection.

Million times thanks and I cross the fingers!!!

非常感谢!
[Android Software/Hacking General [Developers Only]] MrT69:
This test failed. OK, will try the next option.

In round about 2.5 hours from now it should work.

Update is already in progress.
[Android Software/Hacking General [Developers Only]] LilSasa:
It works here in Vietnam :fingers-crossed:
[Android Software/Hacking General [Developers Only]] MrT69:
That's cool!!! Thanks a lot!!!
[Android Software/Hacking General [Developers Only]] i9o:
Does it work in China?
[Android Software/Hacking General [Developers Only]] jyoti.id:
Everything fine so far.

India ?
[Android Software/Hacking General [Developers Only]] Cookie Ninja:
All I get is a blank page. Does that mean it works? Currently in India.
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly. In the meantime and because of a lot of user reports I have seen that Magisk usage causing the troubles

My server is also not working perfect and sometimes a reload is required of the browser page. That's because of the virtual system. Tiny network packages as like as DNS packages having somtimes troubles with this.

No idea why Magisk have troubles with this. I can't take a deeper look at it because I need to keep my phone un-rooted.

Anyway. Thanks a lot for your feedback.
[Android Software/Hacking General [Developers Only]] Goneham2:
Works great

Increases download speeds. Decreases ads. The only thing I dislike is not being able to really "continue to webpage" after they are blocked.
[Android Software/Hacking General [Developers Only]] MrT69:
As soon as you have seen something is wrong blocked post this to me.

Copy it into a TXT file and mail this file to my whitelist address. Within the next day it's working.

Take a look at my signature. I have other plans to do this in realtime but actually I don't have the money for this. If I could do it as I want to do it you can change this within almost realtime with a delay of just a few seconds.

I'm sorry for this...
[Android Software/Hacking General [Developers Only]] MrT69:
keweon - huge update in progress

During the last 2 weeks I was able to see what's going on with this DoH Server. I see some weaks and I also see strength. From my point of view it is currently the very best solutions since years.

Therefore this will happens during the next weeks:

1. All existing servers will get an upgrade and every single Server will get it's own DoH Instance.

2. Therefore there will be an outage of each of the Server during the change. When this starts every machine will be offline for round about 10 to 15 minutes.

3. Because of the fact that the entire system is too weak for different things I decided to split the servers. I will take 2 Servers which will become almost only useable if you are using the keweon Certificate. On this server I can finally block things which are normaly not possible. (Facebook, Amazon, etc, ect.)

If the usage will be finally to high on this server I will extend them. Regarding the current survey there are too many people who don't know why to use the certificate or they don't see any benefits. That's the reason why I will limit this to 2 Servers only. This 2 Servers will also provide DoH Services.

4. To prevent DoH outage if one of the Server went down I already requested at INTRA to provide an option for a second DoH Server entry. They recommened at the first stepp to use RoundRobin but this will cause a lot of troubles. I explained them the situation and let's see what they will do.

5. Frostnerd (Daniel) is currently working on the DNSChanger App. This App will provide also DoH Server within the next time. I already have had a talk and he told me he will do it with 2 DoH entries. This will take some time so please be patient.

6. Detailed informations about reboot, update and server downtime will follow as soon as I'm ready to go. You will have in addtion one more week to inform your friends and neighbors. The entire upgrade should not become a problem.

7. All current Servers are whitelisted at provider and German BSI. That's the reason why I don't want to change the IP Address of the Server. That's also the reason why you will have a few minutes outage. And I guess this is OK for all of you.

And finally 2 good news:

I was asking CaddyServer (caddyserver.com) for an official commitment to use Caddy Server on keweon to provide the DoH Service. Last week I have received the permission and approval to use Caddy Server for the DoH project at keweon.

At Telegram there is now an additional Channel for keweon in German language. If you want to join please click here:

https://t.me/keweonDE
[Android Software/Hacking General [Developers Only]] Cfibel:
OpenFM is not working.

Link:

https://play.google.com/store/apps/details?id=pl.wp.android.openfm
[Android Software/Hacking General [Developers Only]] MrT69:
it should now work . If not let me know this pls ?
[Android Software/Hacking General [Developers Only]] kokododo2016:
request

could you add these features to keweon dns servers ?

EDNS

DNSSEC

Client Subnet
[Android Software/Hacking General [Developers Only]] Idroit:
Did you test Keweon in China?

Gesendet von meinem ONEPLUS A3003 mit Tapatalk
[Android Software/Hacking General [Developers Only]] MrT69:
My DNS Server has a monthly traffic limit of 1TB. When I activate all this features then this will increase the bandwidth dramatically.

EDNS is clear. But why DNSSEC? This thing is a real mess and nightmare.

https://ianix.com/pub/dnssec-outages.html

And what do you mean with Client Subnet?
[Android Software/Hacking General [Developers Only]] MrT69:
Yes. Keweon is running without any restrictions within China.
[Android Software/Hacking General [Developers Only]] Saswata Chakraborty:
If I flash the magisk module, will it change the IP address automatically or do I still have to manually choose primary and secondary IP address??
[Android Software/Hacking General [Developers Only]] J4jks:
It doesn't change anything automatically.

You have to select your primary and secondary DNS servers.
[Android Software/Hacking General [Developers Only]] MrT69:
Someone send me www.wp.pl as "broken website".

It's fixed and I removed also ads within videos.

Send a feedback please if they are working. It might be the certificate is required for this. Let me know please.
[Android Software/Hacking General [Developers Only]] Shadow337:
Hello, Messenger ads have backed to me since 2-3 days :(

( Using dns and cerfiticate + energized the biggest )
[Android Software/Hacking General [Developers Only]] MrT69:
Since 2 or 3 day's it's back? Hmmmm... Interesting.

Please wait for this. I'm actually installing the new Servers. I guess one more week and it should be done.
[Android Software/Hacking General [Developers Only]] MrT69:
A big surprise within the next comming day's

Let's asume you are the Developer of a real awesome DoH Client with incredibel features.

How you would name this brand new App?

Give some feedback please!!

Edit:

Not Intra - this name is already in use :)
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
MistyDNS is my name for it
[Android Software/Hacking General [Developers Only]] surya790:
SecureDNS or AdBlockDNS ?
[Android Software/Hacking General [Developers Only]] Idroit:
DNS 1968
[Android Software/Hacking General [Developers Only]] MrT69:
JediDNS - strike against the empire ??
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Brillian name I like it

---------- Post added at 07:13 AM ---------- Previous post was at 07:13 AM ----------

Brilliant
[Android Software/Hacking General [Developers Only]] nussbaum:
Beware of the Disney empire and their lawyer troopers...
[Android Software/Hacking General [Developers Only]] Tibiti:
Why not JeDNS then? ?
[Android Software/Hacking General [Developers Only]] kokododo2016:
QNAME minimisation

could you add this feature QNAME minimisation to keweon dns ? :confused:

please add server location in egypt bcause major isp tedata egypt redirect all traffic to ads website , thanks in advance
[Android Software/Hacking General [Developers Only]] MrT69:
Qname minimization might have impact to different services. I'm not sure if this would be a good idea to enable this on all the server. But I will do some test with this to double check.

Other server locations are not possible because I'm running out of money if I would do this.

At the moment the cheapest offer I have would be round about 400.000 EUR per year for a minimal global System via CloudDNS. If I would like to activate all options we are talking about a 22 Million EUR for all together for 5 yrs. As long as I don't find an Investor or a tiny wonder will happens I have no chance to establish a real system.

All investors are only interested to collect user data and selling them. I'm always shocked about this meetings. Really no one is interested about protecting privacy or user data.

Sometimes I have the feeling although it is a real good solution it's some kind of worthless because it's too expensive. But you can't fight against Infrastructures as like as Google, Microsoft, Facebook and all the others who has a 3 digit million Dollar budget with a 10000 Euro solution.

Sometimes it's indeed real frustrating.
[Android Software/Hacking General [Developers Only]] MrT69:
Huge update was running...

Thanks a lot to each one of you for this great support. The update today has taken round about 5 1/2 hours. (!) It was the longest update process since the last 4 yrs!!!!

I was able to remove a lot of things and now it's up to you to check again. Round about 26.000 (!) false entries are removed.

The update is currently running and in 2 hours from now it should be able to see this on your devices.

Please doubel check it and if something is still not working send me Infos and/or Links.

Thanks again and have a lot of fun!!!
[Android Software/Hacking General [Developers Only]] MrT69:
Read this:

This is NOT keweon. It seems more and more companies with the incredible Idea of protecting users by DNS are coming up. Even with teams, with so many incredible solutions. With incredible technologies.

It seems my Investor meetings during the last 3 yrs were so incredible successfully. For everyone. Except me.

The only reason why they don't want to invest was I didn't agree to any data collection.

I have lost again. I started everything at October 2014 and it seems 4 yrs later I need to accept I'm too stupid. My bad folks. No one will ever spend an invest into a vision. And my business options seems to be too much work and too high invest.

No one is really interested about privacy, security and data protection for any users. No idea what to do now. I'm f**ked. Seriously.

And no idea what to do now.

EDIT:

This is the company:

https://www.nominet.uk/cyber-security/cyber-products/

This was exactly my idea and 3 to 4 yrs ago I have trashed this. Neither is it effective or inexpensive or fast. It's crap.

https://s3-eu-west-1.amazonaws.com/...11/27110642/Nominet_TechnicalDatasheet_V4.pdf

Damn rookies!! If you already steal an idea then you should take the right idea.
[Android Software/Hacking General [Developers Only]] MrT69:
This morning at 6 am I received a call that a good friend lost the fight against brain tumor.

H. was the Head of High Frequency Trading Developer Team within a German Bank and he was one of the 2 guys which are responsible why keweon is existing. It has taken a long time and discussions until I have had done the first step.

It was a big shock for me because I don't only lost a good friend. He has given a lot of inspirations, Tips and Tricks for all my coding stuff. His soul is still a part of keweon.

The last 3 yrs it was a long and hard way for him. All the operations and hospitalizations was sometimes a real hard pain. For him, his family and of cause for his friends. He always has given more then 100% to everything and last night he has passed away.

I don't know if it is ever possible to reach the goal of my vision but I see a lot of people has a lot of fun, they give support and together we will fight a battle against the big players for only one reason. The right of privacy for all.

H. have had a big enthusiasm for this project and I still belive in it's success.

I have had one of the worst mornings since years. Two bad news and I was really thinking about to give up everything. But this would be unfair to you and to me, to all users and also to our dreams, ideas and visions. Whatever happens I will never give up. Thanks a lot to all users for the trust and support. Thanks also to H. for all your ideas, solution and for your friendship.

Rest in peace my dear friend and may God bless you, your family and your friends. I will miss you.
[Android Software/Hacking General [Developers Only]] MrT69:
Someone here with some "i don't know what I need" experience????

Situation:

Currently I'm trying to setup a DoH Server instance on Ubuntu 18.04. I guess I have basic knowledge about Certificates and when I try to use a certificate it happens that the Certificate is not propper working.

The Server has a public registered FQDN on IPv4 & v6 it is listen on "sedns.keweon.center". Server is running with NGINX and when you open the URL within the Browser it's working. With my own Certificate and with LetsEncrypt Certificate I can call his URL within a browser and the Domain will be resolved (www.google.com).

https://sedns.keweon.center/keweonDNS?name=www.google.com

So far it seems working. But it won't. Now, when I'm use this DoH URL within Intra it's not working. Also within Firefox. https://sedns.keweon.center/keweonDNS is only working within the browser address bar. This domain is not working with Firefox DoH settings.

OK. The Server is now registered with keweon Certificate because I have added the IP Address to the certificate. This URL https://108.61.170.127/keweonDNS?name=www.google.com is now working within any Browser address bar and within FF Browser as DoH setting. Cool, but it's not working within Intra.

No idea what the hell I'm doing wrong. Someone here to help or support?
[Android Software/Hacking General [Developers Only]] MrT69:
Got it. When I take a stronger Server everything is working for some reasons.

It would need at least a minimum of 16 Gigabyte RAM. No idea why this will work. But now I know I'm not to stupid.

That's too expensive for me.
[Android Software/Hacking General [Developers Only]] MrT69:
Investor Meeting Number 94 is in progress.

After 4 weeks of different calls and discussions with a colleague and friend he organized a Meeting with German investors from Hamburg. These Guys are searching Tech Ideas with global potential. After 4 weeks I was given up yesterday evening to say no again. I don't expect a wonder but let's see.

Cross the fingers.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Fingers crossed
[Android Software/Hacking General [Developers Only]] -Happy Feet-:
The same here...
[Android Software/Hacking General [Developers Only]] DaRdamnDoG:
Can I just ask for some clarifications, am I able to connect to a IPv6 DNS server using the DNSChanger app OR do I have to be on a WiFi network that supports IPv6 or else I can't connect?

Thank you very much
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Can you open thid url https://s-2a1355-i.sgizmo.com/s3/i-nJkQJJSWNDYzT7EWnQ-2873331/?sguid=nJkQJJSWNDYzT7EWnQ

It is for my work please
[Android Software/Hacking General [Developers Only]] MrT69:
If you are using the App then set DNSv4 and v6 to be safe. It sometimes happens that user use only DNSv4 settings and because of the rule IPv6 bevore IPv4 this will cause no changes.

Don't care if you are in within a native v4 network. The IPv6 settings will cause no troubles.
[Android Software/Hacking General [Developers Only]] MrT69:
Are ads still visible?? I guess I need to make a facebook account for this if they are still visible.
[Android Software/Hacking General [Developers Only]] MrT69:
Will do it at the evening!! But the next time just put the URL into a TXT file and send this TXT file to my white list address.

Don't send it within the mail. Just send a TXT file.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Thxs will do Torsten
[Android Software/Hacking General [Developers Only]] Cfibel:
Netflix APP on TV is not working, old Panasonic with SmartTV.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
So. How did it go?
[Android Software/Hacking General [Developers Only]] DaRdamnDoG:
I tried millions of times but to no victory.
[Android Software/Hacking General [Developers Only]] MrT69:
I don't lock down anything from Netflix. I have Samsung TV and Apple4 TV and on both it's working.

Interesting thing... I'll send a PM to you.
[Android Software/Hacking General [Developers Only]] MrT69:
Send the first informations and now I'm waiting for feedback. Don't expect an answer during the next one or 2 weeks. The very first contact is always the slowest.
[Android Software/Hacking General [Developers Only]] MrT69:
OK, which App you are using? Make a screenshot please.
[Android Software/Hacking General [Developers Only]] paradoxiumwind:
Some noob questions.

"It's very easy:

1. Take the DNS Servers

2. Install the keweon Adblock Root Certificate ( <<< THIS IS ONLY A RECOMMENDATION) I did this by going to http://pki.keweon.center and after 3 sec downloading and it automatically installed the certificate (but the rest of the post says must be done manually?)

3. Change your Internet Router or your Mobile Device to it (does this mean just change the DNS to EG USE THIS AS PRIMARY SERVER

(this server has the version upgrade to keweonDNS v.6.80.280)

IP: 176.9.62.58 or

IP: 176.9.62.62

IPv6: 2a01:4f8:150:8023::58 or

IPv6: 2a01:4f8:150:8023::62? and the pick a secondary from the list?

4. Reboot (Router and PC)

5. Done! That's it.

6. See the Internet within a never seen way

With Android use the default Browser and go to http://pki.keweon.center and after 3 sec. the download of the certificate will start. JUST THE DOWNLOAD!! You need to install it by yourself."

I went to the download and clicked it and it said already installed after visiting the website and downloading and installing it automatically from there.

Am I doing it right so far?

Thanks

Edit: I use a VPN. It seems this uses a VPN. It won't work with my VPN will it? Not a replacement for a hosts file then I guess? Back to moadblocker february file...
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Keweon is not a VPN but a DNS resolving service. If your VPN connection uses different DNS settings, it will ignore the local DNS settings and thus render keweon useless. Ads (+ other crap) will then continue to flow in through the VPN.