yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
The entire keweon system is weak, it's tiny but it's million times better than other. :laugh:

Just kidding. ;) No worry. I know Marketing is not one of my favorite strength.

My solution is using a complete different way than any other existing system and this is no marketing speech. I know my servers are very weak because they are only 2GB/2Core VPS with a very limited bandwidth.

As long as I'm not able to offer a better and faster solution it's up to you to find which server will be the fastest for you.

The error on your side "unsafe" is showing that you don't use the keweon Certificate. Exactly for errors like this the Certificate is designed. I know the Servers are not the fastest but with using the Certificate you will see a huge incredible performance increase.

If you would using it you will not longer see any error. You will see a blank page instead the "SSL error".

Why would this speed up your internet?

Let me take Yahoo as example. Within Yahoo I have removed round about 630 addresses (!) which are "not required" for visiting this site. Ads, Tracker, Spying, Data collection - whatever they do they are almost HTTPS calls.

If you block now all of this then this will cause HTTPS errors which is normal. If you have some experience within Programming you will know every error cause a latency or a delay. This is also a normal thing. Because of this the keweon Root Certificate is developed. It will catch up all errors and make sure every "HTTPS error" will have a valid SSL connection. I call this "Unbounded Wildcard SSL Certificate".

You can give this a try. Go to Yahoo, surf around, try to watch some videos and within a few minutes I'm pretty sure you will close the site because of all the annoying HTTPS errors. You can confirm them manually or ignore them. After this do the exactly the same again with the Certificate installed and you will see the difference.

It speed up the site, it speed up the Videos, it speed up even you entire Internet.

If you ever find a "non working Website" or anything else then let me know this. Copy it into a TXT file and post it to one of my Mail address within the signature. At the moment I need to do all this things manually but as long as I don't have a stronger system a different solution makes no sense and it's too expensive.

Because of the reason that I don't find an Investor I'm working on a complete new Idea about to increase the DNS performance on user side. It's still to early to talk about this because I have no clue if it will work at the end. 2 or 3 more weeks and I know more.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I'm using keweon in android (can't use in windows coz of institution's censorship) and it's working very very fine, previously i was using adaway and ublock for browser but now I've disabled them coz I don't need them at all.

Performance is far better compare to adaway + ublock

And yeah very glad to see your interest towards this project and your activeness in thread :)

Thank you for your great support and work :angel:
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot for this!!!! :good::good::good:
[Android Software/Hacking General [Developers Only]] realista87:
hi,

1) i installed the root certificate, but i still can't access to androidworld.it and i would know it you can sent me some sites in which i CAN TEST if it is working properly. U said if does not work i see error messages... but if works i should not see anything, so please give me some domains as example :D (ps: on youtube i still continue to see ADS.... why?)

2) i uploaded 2 screenshots ...is the certificate correctly installed? on install it asked me if to use for "wifi" or "vpn and apps"..... i choosed second option .. is it correct?

3) last doubt... do you think is useless to continue to use adaway on android? for what i know you only use 1 host source for keweon and it is energized team ULTIMATE host, and that host is "maybe" one of the biggest one host file present on the internet(excluded porn), am i right?it consolidates a lot of sources like stevenBlack etc...and many others so i SUPPOSE that would be

redundant and useless

to use adaway with default hosts, or adaway with energized ULTIMATE host ...just because that "big list" is already there in your DNS server so theorically the BIGGEST ONE HOST is already working......before the traffic enters into my device, so it is "optimal" to uninstall adaway and delete the firefox mobile extension ublock. is my argument correct?
[Android Software/Hacking General [Developers Only]] MrT69:
It's correct. And the domain should already working. ;)

You don't need to test specific sites. Just check your favorite sites and if you see any issues put the domain or URL into a TXT file and post this to me.

YouTube is a very tricky thing to make free of Ads only via DNS. I'm still trying some things but it's almost impossible to make it 100% free of ads at the moment.

At home I have Youtube free of ads on all mobiles but I can't release this because either all users needs to use the keweon Certificate or I need 2 different infrastructures. Same is with Facebook and Amazon.

I already told this to you. I would do it but I can't do it ;)

Additional Adblocker:

It's up to you to test. I'm using my own solution since beginning and I have sometimes done a test with different Adblockers. I don't want to say it is required but a lot of users told me that the only use keweon in the meantime because it's faster.

You can do me one big favor.

If you have a SmartTV then setup keweon on your SOHO Router and check all TV Apps about advertising. If it's possible also XBox and Playstaion. On my Samsung and XBox it's working but I have had no feedback received from other countries.
[Android Software/Hacking General [Developers Only]] realista87:
i already use it on my router, but i have an old lg smart tv that has few apps ang lags like a beast! i just tested 2 sites on the integrated browser and the adblock is working.... i sincerely never used other smart tv apps so i can't say what is "now" blocked.

one last doubt.... is there any chance to navigate sites who blocks reading if they see i am using an adblock? i think that the mechanism to elude these kind of "noview sites" is not possible with DNS method.... but i still hope there is a chance. i don't want to set other DNS on my router because i love added securuty layer that your DNS give to my whole family.... but if there is no methid to bypass the sites block

i will choose to not use these sites

:)
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
For android use YouTube vanced from xda https://xdaforums.com/android/apps-games/app-youtube-vanced-edition-t3758757

It is ad free and with some cool features like background playback and etc you can also sign in but you have to download one app go through thread you will find all things
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
We have option to set custom dns in android pie ,

What should i write in hostname to set keweon as dns server ?
[Android Software/Hacking General [Developers Only]] MrT69:
This hurts... Seriously ;)

Actually I'm working on this but for some reasons it's not working within the way I want to have it.

Be patient. This solution is in progress.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
No I'm not using cloudflare dns , i was just checking , see vpn sign still using keweon ;)

Waiting for solution ?

Can you tell me difference between Dns over Https and Dns over TLS , which is better ? Or we can use both together ?
[Android Software/Hacking General [Developers Only]] MrT69:
Wowww... Thanks a lot!!!!!! Million times thanks.

Keep in mind that this entire project is still within PoC (Proof of Concept). The Servers are too weak and on the other hand you see here only round about 5% maximum of the entire power of keweon. No kidding. You see with the current system just a tiny part of the entire solution. ;)

Whenever you see a "blank" site and you know, hey, this should work, then copy it into a TXT file and post this to me. Check my signature.

I always do a crosscheck on this postings because it also could be someone from the Ads industries or someone with a Malware site reports a false/positive although this should stay blocked.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I came to know that I haven't installed certificate and was using without it but now when i try to install certificate it is asking for password

What should I do to install it ?
[Android Software/Hacking General [Developers Only]] MrT69:
It's your device password which is required to install the Certificate.

This is always required when you install any Root Certificate. This crap is a glorious idea powered by Google. After this Android will notice you with an annoying message "Your Network might be monitored" which is complete nonsense.

Within iOS you need to open the site, confirm, confirm, confirm and that's all.

Then you need to trust the Certificate and on iOS it's done.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Ok thank you, i set pin and entering pin was giving wrong pass so i changed my pass pin to password and i can install it :D
[Android Software/Hacking General [Developers Only]] MrT69:
HTTPS and TLS is just only slightly different. TLS is a clean and well done solutions. HTTPS is the ugly quick and dirty solution but it has incredible advantages. But it is important to know the official announcement for DoH was decided at the last week of July 2018. The official standards needs still to be done

When there is a censorship then you can still "Controll" DNS with TLS. With HTTPS they believes censorship is not longer possible and in fact the DNS traffic seems to be default HTTPS Web traffic for the provider. They will have a harder doing to control this.
[Android Software/Hacking General [Developers Only]] Ufolas:
Hello MrT69!

Let me say I'm using your DNS since a couple of weeks and it's just an amazing job you did!! Thanks! Some stuff is not working for me like "stacksocial .com" or "kcsoftwares .com" and their tool called Sumo.

Are those blacklisted or may I help somehow to solve this problems? I'm using your certificate and I tried both Firefox and Edge.

Also "androidworld .it" shows me a page like Disable Your AdBlocker!. Any way to pass this thing?

Thanks again, your work is Amazing!
[Android Software/Hacking General [Developers Only]] MrT69:
To tell me non working things is your Job. I can't double check the entire Internet for things which going wrong. ??That's the vision behind this idea. Let's do it together.

Disable Adblocker is something which is devinitly a no go!!!

Therefore I have my reporting address. Just put working or non working URL or domain into a TXT and post this. Yesterday I have unlocked the android world URL and I have not seen the disable Adblock. For this case add an # at the end of the line of the URL and comment it with one or two words. Adblock disable Message for example. This is very helpful.

You don't need to collect them into one sheet. Just post them as soon as you find this. If you send 1000 mails within this way per Day it's not a problem at all.

At the moment I'm also working on DoH Server so please allow me that it might take one day more if it's a difficult thing to remove the Adblock disable notice.
[Android Software/Hacking General [Developers Only]] realista87:
sorry but i think you have to remove xyz domanis from blacklist :( i actually discovered that MY PREFERITE (and best) italian site of streamings use xyz domains. (swzz.xyz is used here for shorten links)

EDIT: i found an alternative way to see blacklisted sites... i just use dns jumper 2.1 to manually change on the fly the dns used by my pc....
[Android Software/Hacking General [Developers Only]] MrT69:
With this is have serious problems. The XYZ, WIN and TOP Domains are entirely Blocked and I open them by Whitelist.

In December 2017 Malwarebyte reported 98% of all of this domains are used for Abuse, Ransomeware, Malware and Spyware.

This has had the advantages that keweon user where active protected against a lot of attacks. Here are 2 famous examples.

https://www.tomsguide.com/us/youtube-mining-malware,news-26530.html

https://arstechnica.com/information...-ads-with-cpu-draining-cryptocurrency-miners/

If you have any of this domains and you know this domains are clean then feel so free and post them to my whitelist.

Based on Malwarebytes reporting I'm doing it the other way with these 3 TLD. Until today I have received 4 (!) Domain requests to unlock them.

I have no concerns to unlock 1000 or 10000 domains when this will be reported. But for security reason this Domains needs to stay closed.

Post the domains you know and you want to unlock and tomorrow evening they are open. Today I have no chance to do something because I'm still at work.

I hope you understand this reason.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
can you tell in detail, i don't know python but will try to help
[Android Software/Hacking General [Developers Only]] MrT69:
THANKS A LOT!! Send you a PM.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Facts

During a few days I was thinking about to rethink the Certificate usage. A lot of people told me they don't use it because they don't trust it.

The entire power is based on the Certificate and without keweon is just a stupid Adblocker without any special filters. From my point of view the entire sokution would not make any sense to keep it up running because then every Adblocker is more useful.

This morning I was taking a look at my website portal. I was taking a look at the current download statistics for the Certificate and I was shocked. Seriously!!

During the last 6 weeks I have had a download of more than 4.3 Million downloads only of the Certifiate.

Wowwwww...

To all users - million times thanks a lot to you!!!
[Android Software/Hacking General [Developers Only]] MrT69:
The Python problem is solved. Compiled it from source, change the default settings and everything is fine.

Now I only have the challenge with DoH settings.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
good news :good:

ok otherwise i was going to try today night
[Android Software/Hacking General [Developers Only]] MrT69:
It will anyway not connect.

HTTPS is valid but I get no DNS data.
[Android Software/Hacking General [Developers Only]] MrT69:
All updates since Wednesday are done. Please check it and if it's not working then let me know this.

Please note:

If it's not working then copy the URL it into a TXT file and send it to this mail:

For Whitelist the address use

Whiteli.g2o05glywjqt8zfy@u.box.com

If you have blacklist requests then copy the URL it into a TXT file and send it to this mail:

For Blacklisting the address use

blackli.wovqusywx173aog9@u.box.com

Thanks a lot!!!
[Android Software/Hacking General [Developers Only]] realista87:
i have a little ODD problem. i use keweon dns on my router BUT.... sometimes to see some sites i am forced to change the dns on my WINDOWS pc ...i set other dns but even if delete the cache and EVERYTHING of the browser... i still can't access some sites. i precisely SEE ADS...... a lot of ads but sometimes after 8 sec... sometimes after 17 sec.... the webpage show me th) to use othera i am using adblock so i can't see the site.

it is very strange, because on the browser i have DISABLED the adblock..... i force windows ( my wifi network card on propierties) to use other dns but sometthing in the site is still blocked by keweon.. how can be possible? i see ads!
[Android Software/Hacking General [Developers Only]] MrT69:
You need to send me this sites which are not working and also please send me the sites with Ads.

It might be that I remove the ads and 2 day's later they changed the ads provider. I have not a team of a few people and I also don't have currently the chance to track these sites. At the moment I'm still doing this things alone.

If you see ads let me know this and if sites are not working please let me know this too. Just copy the URL which contains ads to a TXT file and add a comment with "#" and write "Ads visible". Take a look at my signature and send this to my blacklist mail.

If you see something is false blocked then do the same procedure but send this to my "Whitelist" address also in the signature.

That's all. Thanks a lot!!!:)
[Android Software/Hacking General [Developers Only]] MrT69:
CURRENTLY BROKEN - NOT WORKING ANY LONGER​

Need to take a deeper look at this. Via Browser it's still working.

https://secdns.keweon.center/keweonDNS?name=www.microsoft.com​

[IMG="keweonDNS - DNS over HTTPS"]http://downloads.keweon.net/web/xda/k1doh.png[/IMG]

keweonDNS now with DNS over HTTPS​

Ladies and Gentlemens,

I'm proud to present keweonDNS over HTTPS. With the help and support of the XDA user [MENTION=4979220]bhanupratap[/MENTION] I was able to sort out a few tiny problems to offer now the famous DNS over HTTPS service.

How to do?

All newer versions of Android already have a client built in. For iOS, unfortunately, there are no good news. Apple currently see no reason to support this protocol. If you need a client for your Device I currently recommend this App:

https://play.google.com/store/apps/details?id=app.intra

Install it and set the URL below. If you have problems with using keweonDNS for some Apps please let me know this. Until it is fixed you can select:

MENUE - SETTINGS - EXCLUDE APPS

and select the App which have problems. With this option you can exclude it from keweonDNS.

The keweonDNS over HTTPS URL is:

https://secdns.keweon.center/keweonDNS​

PLEASE NOTE:

1. I'm not Google. I don't have a multi million dollar budget or a few hundred employee Team.

2. This server is not HighAvailablity. The keweon default backend has 42 Servers and the frontend are 15 Servers. Now it's one Server more.

3. It's just a VPS but it's hopefully fast enough. I can't actually offer more perfomance.

4. I have not used the keweon Certificate. The Server runs with LetsEncrypt Certificate. And this hurts, seriously.

5. The Server is in hard "BETA TEST STATUS". The final decision for the entire DoH standard is until today not done!!!!

6. The Server is protected against too many requests. The first attacking methods are already confirmed.

7. For this service are still the same rules valid. Please post false/postive to my black or white list mails within my signature.

8. The keweon Root Certificate is still useable if you want to have a faster Internet.

9. This entire Service is as usual without any warranty.

10. Please don't ask for DNSSEC or DNSCRYPT. NO DNSSEC and NEVER EVER DNSCRYPT.

Enjoy it and have fun!!
[Android Software/Hacking General [Developers Only]] DEVILOPS 007:
Hi, looks great man, I'm currently using the magisk module which allows me to choose the server of which I choose the London one. Am I able to choose the server with this app you linked?
[Android Software/Hacking General [Developers Only]] MrT69:
No, the listed Server is here located in Germany.

But there is a huge different of the speed.

As far as I know currently this DNS over HTTPS should also speed up the DNS performance. No idea, it's the first time that I'm working with this.

Give it a try!
[Android Software/Hacking General [Developers Only]] DEVILOPS 007:
Okay, just tried it and realised it creates a vpnlike connection. I need my VPN so I don't think I'll be able to use this method unfortunately. Hopefully you release this as a root or magisk version in the later. Great work?
[Android Software/Hacking General [Developers Only]] MrT69:
Android Pie has an embeded client. I have no clue if this will also use a VPN connection.

If there is no VPN - I will throw my S9 out of the Window!!!!

Btw, can you tell me something about the speed on your side? Is it faster??
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I forgot to tell you that android pie natively supports Dns over TLS so we can't use url which supports Dns over Https.

No native android pie doesn't use vpn for Dns over TLs.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
[MENTION=304818]MrT69[/MENTION] check pm please
[Android Software/Hacking General [Developers Only]] MrT69:
This explains a lot of things. Damn...

So I would finally need 2 Servers. DoH and DoT to cover all cases.
[Android Software/Hacking General [Developers Only]] MrT69:
Within all of my Investor meetings they told me more or less there is no need and no market for keweon.

No market?

Sure. Because no one seems to be interested to protect you and your data. It is incredible what kind of discussions I have had during this meetings.

No need?

Read this story and think about this.

https://www.businessinsider.de/apple-to-calculate-trust-scores-to-combat-fraud-2018-9

Sometimes it's frustrating to keep up my vision. It seems no company within the world seems to be interested about to protect you, your devices and your privacy.

Sometimes I really think all my ideas are complete wrong. It's just incredible.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
yeah they will say no market because as you say if they don't get any benefit they will not invest. Yeah no company in world is interested into protect our privacy for free.

Now what's your future plans ?
[Android Software/Hacking General [Developers Only]] MrT69:
The problem is not "everything is for free". There are enough business cases. You will see here just a tiny part of the entire solution. I have a lot of additional things and also a lot of Business cases. But this weak system isn't ready to sell. I need a stronger infrastructure for this.

The Austria A1 told me keweon is the same solution and product which will also provided from CISCO and SOPHOS. There is nothing new compared to them and so they are not longer interested. That's why I told them - first take a look and then think about this. They didn't spend even a second to take a look at this.

How the hell should I explain all of this to someone who wants to know everything within 5 minutes? It's not possible. And when I say this then they telling me - oh, if you are not able to explain this within a few minutes then we are not interested. At the moment I have no ideas.

Crowdfunding is also no idea because I need to pay tax for this here in Germany. It's round about 48%.

Make no sense to me because this will be to much money. Moving to a different country might be an idea but that's also not a cheap solution.

I'll take a break, think about all of this and during this time I will develop the DoT and DoH Server. May be this will bring an idea and I still hope to meet a poor billionaire who will take note about this project. ;)

Giving up was never ever an option for me.
[Android Software/Hacking General [Developers Only]] albaniax:
Sounds more like this projects needs support from foundations, grants, and donations.

I.e. like:

https://en.wikipedia.org/wiki/Signal_(software)
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Do you know M66B-xda developer, he is also providing very good open source privacy apps like Netguard , Xprivacylua ( so powerfull app for privacy with xposed) and fair mail. He gives apps free but he makes some features premium, but we can live with free apps but premium features are very good.

Can this be implemented here ? It's just my thinking.

I know it's not good for us but survival is a key and to run a project there should be money and i came to know that tax on crowd funding is so high.