yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Basically this is a real good idea. But with keweon I have different challenges and at the beginning I seriously wasn't aware of the technical need.

Server, Infrastructure, Security, Firewalls. This all are real expensive things.

I can use Microsoft Azure or AWS Services this is also damn expensive. But Microsoft or AWS? Not the best Idea.

Beside keweon I would have keweon KidSafe. Porn and violence free internet. Or keweonBusiness where it is possible also to block IP Addresses. But who will pay for something which needs 3 to 5 additional months until it's done? I'm alone and to hire some people is also a question of money.

On the other hand I have round about 230 Business Leads. Big insurance company for example. I also know the military and authorities within EU would have a need about this. Selling things and all this kind of sales discussion is seriously not my Job.

When you talk so someone of them there IT specialists telling me it's technically not possible what I'm doing here. There was already someone here in XDA who ask for closing this thread because what I'm doing is a huge security risk just because only of the Certificate.

Business development is not my Job but I know what to do with all of this and all this is just a tiny part of all. I also dreamed about the famous big suitcase full of money but I need someone who is helping to make a business out of this. I want to prevent all of the expensive mistakes which others has already done and payed.

And finally I know I will have many enemies who hate me when everything is worldwide online and when it's running within the way I want to have. Bad press, court lawsuits and things which will also not become funny.

With all of this I really don't care. Ask my former Boss, ignoring things is one of my biggest strengths. ;)

On the one hand is the money, of cause. But on the other I need also a strong partner.

If I would even think about to do this alone this would be ridiculous. I'm damn proud about the things I already has reached. Without XDA and all the users this all would never have been possible and at the moment I'm within a safe position. To destroy this advantage because just only of a few bucks would be a real stupid idea.

But thank you for your words and I hope you understand that unfortunately this is not as easy as it may seem. ;)
[Android Software/Hacking General [Developers Only]] namhoang235:
Maybe we have paypal donation for some lovely guy who want to help :3
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot. ;)

At the moment I'm fine with all. But I need to have finally a full package solution.

My biggest fears are the reaction from the Ads industries. Let's assume everything is running within they way it should run and the DNS Service is powerfully usable in all Countries. And this is not a big secret because this is finally my primary goal.

I know what the would do from the technical side. That's not a problem and I'm prepared for this. That's OK. But I have concerns about the rest what they will or can do.

To clean up all the blacklists for a "go live" will take at least one or two weeks. At the moment it is helpfully and the Server will not run on the limit. So many false/positive blocks are the reason why a lot of users don't want to use the system. They are waiting for a "cleaner system". That's OK for me. This make sure the server will stay stable online for all others.

Now imagine everything is running within a range of 98 to 99%. What will happens then? A lot of users will be happy. But what happens with the Ads Industries or the porn industries?

I'm fine with this because since years users claiming about data and privacy violation. They ignored the users. What's about Google? Violence Ads within Kids Videos and now they decided to share more Advertising. And they don't stop to give a huge s*it on all of us.

I never forget anything. Whatever happens to the ads, tracking and spying industry because of keweon, on behalf of all users - I hope it hurts bloody hell.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
sir we all know that your intention is not to make money and that was my thinking that by giving some premium features you can run this model but I don't know difficulties which will come in way.

Ok now i understood that that would not be easy
[Android Software/Hacking General [Developers Only]] MrT69:
The problems are not the premium features. The problem is the money to establish them. ;) I can offer premium features but this would need a huge invest.

Then you can be sure there is NO ANY Advertising. Even with i.e. YouTube ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Someone posted me www.androidworld.it and Adblock detection. As far as I have already seen this it would become tricky to remove this Adblock detection.

Not sure if I will have it running today but latest on Friday it will work.

EDIT:

Done! Just use the keweon Adblock Root Certificate and the Videos are working.

It's a good example to show how Advertising Companies working with "SSL ERROR DETECTION".

Let me know if it will do the Job!
[Android Software/Hacking General [Developers Only]] MrT69:
DoH Server Update

After installing the Server it seems to be a Certificate issue why you can't currently use it. I have had reported the Problem to Jigsaw:

https://github.com/Jigsaw-Code/intra/issues/75#issuecomment-424517576

At the moment I'm using a Let'sEncrypt Certificate. I'm waiting for some feedback about detailed certificate informations.

When I know what's going wrong then I can fix it up. On server side I see currently no problems.

Sorry. You need to be patient.
[Android Software/Hacking General [Developers Only]] MrT69:
DoH Server Update

I guess I found a bug in Intra.

Open Intra and enable "Show recent queries" at the Main page.

When I'm using one of the default Servers and I open the log then I see a valid IP Address at "RESOLVER LOCATION". When I'm using the keweonDoH Server then it shows [::1] within "RESOLVER LOCATION".

Can someone verify this please?
[Android Software/Hacking General [Developers Only]] J4jks:
Yeah, with keweon it shows US (::1) with destination server: SEND_FAILED
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Read your Yelegram mesdage from me I send screenshot there. I aldo get the same results
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Sorry Telegram. But the sreenshot came through.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
New screenshot
[Android Software/Hacking General [Developers Only]] J4jks:
I didn't receive any message on TG.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Sorry my mistake

---------- Post added at 06:35 PM ---------- Previous post was at 06:32 PM ----------

Sorry my mistake. I do not have your TG . Send it to MrT69. But did you see the screenshots here. I gget the same as you
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I tried with mobile and also firefox which natively supports DoH , I've tried cloudflare with FF which was working but keweon can't connect to site
[Android Software/Hacking General [Developers Only]] MrT69:
The wrong interface explain why Intra is not working.

But Firefox should work with this DoH thing. I hope they don't have the same troubles as Intra.

Thanks a lot. Will take a look at this.
[Android Software/Hacking General [Developers Only]] MrT69:
Can you do me a favor? At the moment I'm already on the way to office and being patient is not one of my strengths ?

1. Make 2 HOSTS File entry with secdns.keweon.center

2. Add the real IPv6 and IPv4 to this entry

3. Save it

4. Open a CMD prompt

5. Type "ipconfig /flushdns" to clear the DNS Cache

6. Now open FF and try it with DoH again

7. Now it should work

#IPv4

159.69.145.142 secdns.keweon.center

#IPv6

2a01:4f8:1c1c:4a23::1 secdns.keweon.center

Edit:

If someone has a rooted device please add this entry above to hosts file and give it a try with Intra. Thanks in advance.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I don't know how to make host file entry in Windows , but i can try with my rooted android device for intra and FF.

for android, should i place 159.69.145.142 secdns.keweon.center and 2a01:4f8:1c1c:4a23::1 secdns.keweon.center in host file ??
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Help me my system only support ipv4. Can you make me a secdns file with the ipv4 setting please. I do not know how. I am a noob
[Android Software/Hacking General [Developers Only]] MrT69:
This doesn't matters if it's only IPv4. Just copy and paste this to the end of your HOSTS file:

Linux, Android, Windows - it doesn't matters.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
How ? And what is the host file sorry for my stupidy
[Android Software/Hacking General [Developers Only]] MrT69:
Ahh... I see.

No worry. You don't need to do this and I only need this to find the error. To do this you need also to have a rooted device.

When the Server is working I need to reinstall it because at the moment it's just only running as test instance.

The Server is currently only with 4GB RAM. This will not real working.

Just wait until everything is working. ?
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Thxs let me know when it is working. Keen to try it and still keweon on. Also thxs for all your time and effort to make s perfect addless system. Well done
[Android Software/Hacking General [Developers Only]] J4jks:
Same didn't work even after adding them to hosts

Send_fail.

Why it is showing Destination US(some address) with cloud fare and keweon too.

US means United States? Confused, sorry
[Android Software/Hacking General [Developers Only]] Ufolas:
Thank you Sir! It was me! Unfortunately it's not working, still articles are blocked showing "disable your adblock" message. YES, I do have your certificate in both Edge and Firefox.

This is an example: Android World Article Link

If it takes time to make it work it's absolutely fine, your job is incredible anyway :)
[Android Software/Hacking General [Developers Only]] MrT69:
Hmmmm... Can you send me a Screenshot with and without this adblock message? At the moment I'm within the office and I anyway have no chance to compare.
[Android Software/Hacking General [Developers Only]] Ufolas:
Sure, here you are!
[Android Software/Hacking General [Developers Only]] MrT69:
The problem is the DoH Client Design and from my point of view it is not possible that this will work within the way as they actually do it. DoH is still within a Beta stage.

Why it can't work?

Whenever you have to set or change DNS settings you only have the option to use IP addresses. Using a Name or DNS Name makes no sense because the internet is working with IP Addresses. If you want to use Domain Names then you have nothing which can resolve this DNS Server name or url. That's the reason why you need to use IP Addresses. The Name (i.e. www.facebook.com) is only assigned because it's much more easy to remember to a name than to a Number or IP Address.

With DoH you need to type the DNS URL but who the hell should resolve this without DNS Server? It's technically not possible.

The Intra client has NO DNS server to resolve this name. It seems this DoH Server is not existing and because of this it's using his default internal interface. That's the reason for the ::1 IP Address. This is just the default IPv6 localhost.

Workaround Idea:

I will create this evening a keweon Certificate which contains the DoH Server IP address. I actually can use only a "keweon" Certificate for this because to add an IP address into a "Public Certificate" is currently not possible with i.e. LetsEncrypt.

Then the DoH URL will be

https://159.69.145.142/keweonDNS

and this DoH thing should work.
[Android Software/Hacking General [Developers Only]] MrT69:
Woww... They push a full screen layer over this??

That's incredible.
[Android Software/Hacking General [Developers Only]] MrT69:
As far as I remember I was on this page and I haven't seen this layer.

Can you do me a favor and let me know what happens if you click this address?

https://adblock.keweon.center

Is it a blank page or do you get a HTTPS error? It should be a blank page with positive HTTPS connection.
[Android Software/Hacking General [Developers Only]] Ufolas:
I get error. can't make safe connection... ok that's why it's not working. If I try to install your certificate again browser says I already have it. Is it cos my pc can't reach your server on time?
[Android Software/Hacking General [Developers Only]] MrT69:
What OS you are using? Linux or Windows?

EDIT:

If you would have a problem to connect to this server within Europe then I need to find a different provider for this.

This would be a no go but I'm pretty sure it's just only about the Certificate.
[Android Software/Hacking General [Developers Only]] Ufolas:
Windows 10, on Android it's same btw. And I'm connecting from South Korea with 176.9.62.62 and 45.77.25.72 . Is there anything I can do for help you understand what's wrong?
[Android Software/Hacking General [Developers Only]] MrT69:
The problem is when the connection to this server is to slow then the Cert Trick will not work. But a real fast connection with a physical server is too expensive at the moment for me. South Korea is real far away from this server but let us try it.

I have a REG file to import the Certificate but I have no clue if this is working with Windows 10.

Let me test this at the evening because this would be much more easy to install the Certificate within the right place. Can you wait a few more hours for this?

Edit:

Do you have installed the Certificate also on Android??
[Android Software/Hacking General [Developers Only]] Ufolas:
on android I installed only on Firefox, coz I have no root.

in a couple of hours I'll sleep, in case I can try tomorrow ;)
[Android Software/Hacking General [Developers Only]] Saswata Chakraborty:
Although Keweon DNS blocks ads perfectly, however changing the DNS server by using a VPN will anyway slow down internet speed and put an extra burden on the system. And the magisk module is just useless. I tried it both with wifi and mobile data and it doesn't work at all even though I made changes by using the terminal.
[Android Software/Hacking General [Developers Only]] MrT69:
Ah, OK. For installing the Certificate you don't need root. Just download it and install it on your device. The only thing you need to set is a device password.

That's a Android feature. On iOS it's just easy install & go! ;)

For Windows I'll check the RegFile. Double click and it's done.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon has the advantage if you change the DNS on the Router you will have the entire network free of ads.

This includes EVERYTHING. Xbox, PlayStation, VPN, SmartTV... That's the reason of the idea.

Will this solve your problem?
[Android Software/Hacking General [Developers Only]] Ufolas:
yes yes, I meant I didn't change DNS on phone, only installed the certificate ;)

now I turn off my pc, I'll check tmr for your reg file.

Have a good day!
[Android Software/Hacking General [Developers Only]] MrT69:
Yep, with Windows 8.1 and Windows 10 this REG file is valid:

http://pki.keweon.center/certs/keweo...ficate-REG.zip

Close all Browsers, double click the REG file, let it add to Registry and the keweon Certificate is installed at the right place.

Let me know what happens if you access https://adblock.keweon.center
[Android Software/Hacking General [Developers Only]] MrT69:
DoH Server Update

PLEASE DON'T USE THIS DoH SERVER BECAUSE NO WARRANTY FOR SERVICE.

IT MIGHT BE THAT REBOOT OR CHANGES OR OFFLINE IS POSSIBLE WITHOUT INFORMATION.​

YOU CAN TEST IT IF YOU WANT TO SEE HOW IT'S WORKING​

The Server seems to be working. At the moment the Server is running only within Mozilla with the settings below.

It will NOT WORK with INTRA.

How to test:

Install the keweon Root Certificate in Windows and Mozilla and now do following settings:

Open Mozilla

Type "about:config" within the Address bar

Type "network.tr" within the search field

Change the value "network.trr.mode" to 3 (ForceDoH) or 2 (Use DoH or default DNS)

Change the value "network.trr.uri" to the URL of your DoH Server "https://159.69.145.142/keweonDNS" and don't use https://secdns.keweon.center/keweonDNS

If you want to follow the communication between me and the Intra Devs:

https://github.com/Jigsaw-Code/intra/issues/75
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
working fine in windows 10 in FF

---------- Post added at 03:13 AM ---------- Previous post was at 02:51 AM ----------

If anyone wants to cross check that their DoH is working fine or not, you can check in Firefox if you are using DoH firefox service.

in new tab write about:networking

Now go to DNS , Now open any site , Press Refresh Button in DNS page , now find that site in list

If TRR is true then DoH is working fine
[Android Software/Hacking General [Developers Only]] J4jks:
Didn't work on Android using Fennec

Not yet tried on PC
[Android Software/Hacking General [Developers Only]] Ufolas:
Sorry but the link is not working, it has some dots in it :)
[Android Software/Hacking General [Developers Only]] MrT69:
Copy and paste is sometimes real complicate ??

http://pki.keweon.center/certs/keweonAdblockCertificate-REG.zip
[Android Software/Hacking General [Developers Only]] Ufolas:
installed but not working :crying:
[Android Software/Hacking General [Developers Only]] MrT69:
The server is to slow. Damn!

What's about the idea to move to a different country?

;)
[Android Software/Hacking General [Developers Only]] Ufolas:
haha less than 2 months and I'll be back to Italy, will work for sure! ;)

Really thanks for your time! You should make some YouTube videos teaching what's behind DNS and all the stuff you are doing, would be extremely interesting!
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I haven't installed this certi in windows still DoH working in FF and I'm using it,

So should is Installed it ?
[Android Software/Hacking General [Developers Only]] MrT69:
It's up to you. A lot of sites will use "SSL ERROR DETECTION" to detect adblocking. This certificate prevent this kind of errors and because of no longer SSL error it will speed up your internet.

This REG file will install the Adblock Root Certificate just with one single click. It will be automatically stored at the right place. The Idea for the REG file was to share it via Group Policy within Active Directory.

Give it a try!
[Android Software/Hacking General [Developers Only]] levone1:
Started seeing ads today on xda... Using US - New Jersey dns settings... (45.77.144.132 / 2001:19f0:5:2962::132).
[Android Software/Hacking General [Developers Only]] MrT69:
Nightly update was running 2 hours ago. Do you still see the ads?
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
It will appear as system certificate not as user certificate. Can you confirm its working or not ??
[Android Software/Hacking General [Developers Only]] MrT69:
If it's working and if its tested on several devices I will list it as "official" package.

Great work mate!!
[Android Software/Hacking General [Developers Only]] datsoy:
:good:
[Android Software/Hacking General [Developers Only]] MrT69:
From my point of view it's good enough when it's installed as User Certificate on mobile devices. It would be great if someone can explain to me what's about the different user accounts on mobile devices. Rooted devices also using SU and ROOT user accounts.

For Windows I have created all Templates as "Computer Certificate - Trusted Root Certification Authorities" because it could be that there are different user accounts on the same machine.

My basic Idea was to protect the device, not the User. If the device is protected than the user is also protected.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Thanks a lot for testing.

Umm, but there is need to keep the same certificate in User category, you can delete that one.
[Android Software/Hacking General [Developers Only]] problemathic:
the file was there that i flashed. some ads are block. yeah its working.
[Android Software/Hacking General [Developers Only]] levone1:
Fixed. Thanks.
[Android Software/Hacking General [Developers Only]] problemathic:
https://www.bromite.org/

https://www.google.com.ph/amp/s/xda...romite-chromium-plus-adblocking-t3687258/amp/

i got moab + keweon + this browser!!

---------- Post added at 09:33 PM ---------- Previous post was at 09:27 PM ----------

if youre build will be official. could i be included as one of the first testers? :D
[Android Software/Hacking General [Developers Only]] MrT69:
That's hardcore mate!!! :D
[Android Software/Hacking General [Developers Only]] problemathic:
all is about adblocking :D
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
I use AdFree + keweon , not a single ad on my device. Not only in browser but also in apps.
[Android Software/Hacking General [Developers Only]] levone1:
Back again all of a sudden...
[Android Software/Hacking General [Developers Only]] MrT69:
The problem is that this is geo related. Here in Germany its not visible.

Do you have any chance to log this or send me the source code of the website when this ads happens?

I need to see the source of this Ad.

Or may be it's enough when you touch this ad and send me the link of it. Then I can ask the server where this is coming from ?
[Android Software/Hacking General [Developers Only]] levone1:
https://www.googleadservices.com/pa...ww.hardwarestore.com/winter-17-15-off-coupon/

https://www.googleadservices.com/pa...ww.hardwarestore.com/winter-17-15-off-coupon/

(I think those are the longest urls I've ever seen...)
[Android Software/Hacking General [Developers Only]] MrT69:
HUGE UPDATE IN PROGRESS

Because of to much ads with keweon I decided to release a new filter update. I have tested the most sites (Facebook, Google, Ebay... are working) and I hope that this update causes not to much problems.

If it's to much I will move back to the actual state. The update is in place at 4:00 AM GMT+1.

If you see any false blocked sites please copy the URL into a TXT file and send this to whitelist@keweon.center

I'm curious about your feedback!

May the adfree be with you ;)
[Android Software/Hacking General [Developers Only]] problemathic:
nice an update? :) keep it up bro for improvements.

---------- Post added at 09:39 AM ---------- Previous post was at 09:36 AM ----------

im using magisk now. ill try this.
[Android Software/Hacking General [Developers Only]] problemathic:
is there a aay to uninstall the certificate i want visit something but i cant connect on it. Also the dns manager is working fine.
[Android Software/Hacking General [Developers Only]] MrT69:
What's about the Certificate? Is the flashable Version working?

Link to posting:

https://xdaforums.com/showpost.php?p=75223786&postcount=139
[Android Software/Hacking General [Developers Only]] MrT69:
DoH Update - Firefox on Android

Take a look at the attached picture. With this settings DoH on Firefox/Mozilla is working.

Actually I'm working on a new Server. This is just for testing the speed and performance.

For me it is interesting if users in countries with censorship are able to use this server.

Edit:

This server is unfortunately working at the moment only with installed keweon Certificate. Technical it's not possible within an other way.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Is it also for fitefox on android.

---------- Post added at 10:24 AM ---------- Previous post was at 10:23 AM ----------

Sorry firefox
[Android Software/Hacking General [Developers Only]] MrT69:
Give it a try. I'm using Firefox.