yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
It becomes better day by day. Now I'm redirecting traffic to my Servers? And in addition MITM? Data stealing?. What will be the next? ;)

You are right. It's not time to redo the process. I guess it's time to rethink the entire Project when user telling this things. Exactly this was the reason why I have build it up. My goal is to prevent this things. I expected such things from the advertising industries and e.g. Google or something like that. But users here on XDA? This is a real hard pain.

I redirect no traffic from any user over my servers. That's why I'm not doing it via a Proxy. I know I'm good within inventing things but passing traffic via my server? Without a proxy??

On the one hand it's easy to proof and on the other it will costs 1000 of Euro to have some kind of proxy. It's not payable by myself even when I would like to do it. But hey, it's OK. Not to collect user Data and not to pass traffic through my servers is since 3 yrs the problem why no investor want to spend money into this project. At the moment I'm really shocked. Passing traffic over my Server?? Wowwww...

I'm excited when I read the fact that I will do this just to offer a botnet or have direct access to users entire data. And I'm pretty sure I can wait until this will be proofed from someone.

Let me think about this please. Interesting statements.
[Android Software/Hacking General [Developers Only]] L1p1c1:
breaches on my email

if there will be a breach will happen with or without keweon

https://i.imgur.com/hNLdFnl.jpg
[Android Software/Hacking General [Developers Only]] AeolicLavender:
Yours does redirect stuff to your server, just run "dig www.googleadservices.com [MENTION=5214291]176[/MENTION].9.62.62" and you'll see a server controlled by you.

[MENTION=4159439]Illidan Pornrage[/MENTION]'s proxy has costed less than 5$/month.
[Android Software/Hacking General [Developers Only]] MrT69:
I'm to tired to explain this. Seriously. I can't repeat the same things day by day. I wont. And I see others knows it better and can do it 100 times cheaper.

I was trying to install the DoT Service since December and since this I'm trying to explain it's just because of blocking this site.

Today I received my invoice for all the servers. When I read all the comments about my vision and my idea during the last months I only see I'm a real stupid idiot without any clue.

Thanks a lot!
[Android Software/Hacking General [Developers Only]] O l l i X:
MrT69, do you think you might be a REALLY big annoyance to some people..? Let's Say, like in big advertisers, corporations, and whom ever you might be at economic hassle to? How do you think they would go about shutting you down? How would you do it!?

If you ask me, I would keep wasting the targets time by asking hard or even impossible questions to answer.. I would waste the targets time as much as possible. And keep the target busy doing other stuff than what made him / her a target in the first place. I would go on and on and on, without leaving an open door for evidence to prove me wrong!

And then, if it fails, I would tell the target how useless a human being he / she is. Discourageing the target into a deep dark hole, where it can have a slow and agonizing end of being..

There is no one as blind, as those who will not see! ?

Don't fuel the fire!

And Keep it up keweon dude, keep the good work up! ?
[Android Software/Hacking General [Developers Only]] MrT69:
Imagine you are someone who declared Google, Facebook, Microsoft and the entire advertising Industries the War and you have a tiny Robin Hood complex to bring the world together.

Do you really think this is fuel within the fire? It's not. ;)

Be patient.
[Android Software/Hacking General [Developers Only]] O l l i X:
You are on the moral high ground! What I meant was: "Fuel" = Your highly complex and time consuming replies to the "Fire" = circular, demanding exhausting questions and requests to clarification..

You have your interests in a very good place! And I thank you for it! ☺️
[Android Software/Hacking General [Developers Only]] Jaruamana:
Not working in firefox at all whatever I do. India.

Whatever I do in firefox, it is not working at all. I am from India.

Setting trr.mode 2 or 3.

Setting trr.uri to either "https://159.69.145.142/keweonDNS" or " https://secdns.keweon.center/keweonDNS" .

Setting trr.bootstrapaddress to 213.239.207.143 .

security.OCSP.enabled = 0

With certificates or without .

Nothing works. Simple. Tried on multiple firefox stable, new profile ( using profile manager) , new os , ubuntu, mint, windows 10 . Nothing works.

Blahdns and adguard dns working perfectly. I don't know why.

Any suggestion? Anyone from India?

---------- Post added at 05:14 PM ---------- Previous post was at 05:10 PM ----------

Can you make the certificate install page secure, over https ,tls1.2 or 1.3 . Right now, the certificate is served on unsecure http .

---------- Post added at 05:23 PM ---------- Previous post was at 05:14 PM ----------

Can you make the certificate install page secure, over https ,tls1.2 or 1.3 . Right now, the certificate is served on unsecure http .
[Android Software/Hacking General [Developers Only]] MrT69:
trr.mode 2 means select the best which is available. If you set DoT and "normal" DNS this settings must work.

Mode 3 means force to use DoT. If the DoT Server is not working but your default DNS Server is set then no Internet when the DoT is offline or not available.

Forget the certificate at the moment because it's only interesting if you are within the Internet. This Server "https://secdns.keweon.center/keweonDNS" is working with Let'sEncrypt Certificate and it must work.

Forget about also about the Browser. Do you have a chance to Install "Smokescreen" DoT Client on your Mobile device for testing it?
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
sir I'm not expert but we have curiosity to know. They are not saying you are doing MIMA but from the ss, it clear that user get connects to keweon server. If you have given answer then last time give the answer and put it in FAQ so none will ask next time. It is not question that you are doing it or not, it is question that with root certi is it possible or not.

Now I'm telling what i understand about DNS, dns returns Ip address of requested domain and after getting use will be connected to that ip address, now as we see in ss, we are connecting to keweon server when googleadservices get blocked. So people are giving argument that as we are connecting to keweon server and it is validated by certi, it may possible that if any other guy has access to you server he may able to do MIMA. Correct me if I'm wrong :)

Please explain if possible and this time save your answer and put in FAQ ;)

edit: I know certi is for error preventing but here we are talking about worst case possibility.
[Android Software/Hacking General [Developers Only]] O l l i X:
edit: I know certi is for error preventing but here we are talking about worst case possibility.[/QUOTE]

When talking of worst case scenarios, just pretend the scenario is actually happening. That way you can act professionally and prevent any negative surprises.. ☺️
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
When talking of worst case scenarios, just pretend the scenario is actually happening. That way you can act professionally and prevent any negative surprises.. ☺️[/QUOTE]

But it is not hsppening. What now? Explain please
[Android Software/Hacking General [Developers Only]] O l l i X:
But it is not hsppening. What now? Explain please[/QUOTE]

If it's not happening, then there's nothing to explaining.. Have a good day! ☺️

---------- Post added at 02:38 PM ---------- Previous post was at 02:27 PM ----------

d) Privacy MUST become a fundamental right for everyone on this Planet. That's what I'm fighting for since years. Writing funny statements on a website but still collecting data is not my understanding of Privacy (Google, Facebook, Microsoft, etc)

Privacy or any so-called right, is never given! It's simply just TAKEN.. On a individual level, not by so called "government" or other institutions. Those are just tools, some good some bad..

Keweon is to me, a good tool.. This hammer, makes the nails dissappear proper good! It only leaves the necessary part stay visible! (whoa!)

And to the rest of your extensive post:

I FUNKING KNEW IT! ?
[Android Software/Hacking General [Developers Only]] ttocs99:
Do i still need root certificate when using keweon through intra
[Android Software/Hacking General [Developers Only]] MrT69:
It's up to you to decide. With it you will have less errors, a cosmetic cleanup and it speed up your Internet.

A few sites will not work without it because they are working with HTTPS adblock detection.

Compare it. Try it without and with certificate. Then decide ;)
[Android Software/Hacking General [Developers Only]] O l l i X:
And share results.. Thanks! ☺️
[Android Software/Hacking General [Developers Only]] Mackie Messer:
The Waze Navigation App is always loosing network connection after some minutes with keweon.
[Android Software/Hacking General [Developers Only]] MrT69:
I was installing it on the bus station and it seems working. Interesting App!!!

How do you notice the connection loose? What happens?

I will install it later at home to debug and see what is going wrong there.
[Android Software/Hacking General [Developers Only]] Mackie Messer:
At the beginning it works flawless but after 5 o 10 minutes it shows in red letters on top something like "no network connection". If it tries to recalculate the route it stucks and shows something like "uh ooh something went wrong - network error". Navigation is then not possible anymore. If I restart the app it works again for 5 to 10 minutes. If you are in the Bus, just let it navigate you to your destination. Perfect conditions ;)

Next time I take some screenshots.
[Android Software/Hacking General [Developers Only]] MrT69:
Ah OK... I was testing it just round about less then 5 Minutes. May be that was the reason why it still was working.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Keweon is not dead. From the begining I suspected the Russians. Truth prevail. Keweon is not dead. Thxs Torsten for the great work you are doing.
[Android Software/Hacking General [Developers Only]] MrT69:
I don't want to do a finger pointing or something like that. Of cause I'm 100% aware that some people hate me because keweonDNS is working incredible and I'm offering this free of charge.

And this will never change. The basic version will stay for free. Of cause I have also business potentials but this is related to SLA, different Services and so on.

Also the Certificate is possible to White label. If a company do not trust my Certificate for some reasons it is quite easy to use there own Certificate.

This kind of bashing is not my way. I don't care if this is a Russian company. Based on various user informations I'm really shocked what's going on there but its OK.

I really didn't expected this. That's the reason why I ignoring this now. Not my body, not my life - not my problem.

They should do what they want to do but they underestimate the power of users. ;)
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Great work. Keep up. Keweon the best
[Android Software/Hacking General [Developers Only]] MrT69:
Infrastructure Update

Because of a few troubles and strange traffic against one of my Server it was a need to move one Server.

The old "Zero Session Broker" was not longer proper working and during the weekend I moved this Server to a new IP address.

The old one have had the IP Address "45.32.152.171" and is now replaced by IP "45.76.92.226". A few people also assumed this old Server is some kind of proxy Server because of the naming. It was named with "redirector02-ger-01.keweon.center" but its nothing then a special Pixel responder. They was blaming this server is an evil thing just because of the naming convention.

During the move I have had the Idea to name it "nsa-google-gateway01.keweon.center" but hey, it was just an idea ?

Anyway. The move is done. It's now running on FreeBSD and not longer on Linux. A few users have had the problem with different Apps and Sites. They should now run faster and the server offers now a quicker response. You should have less errors and it should be a little bit faster then bevore.

The Server is also now available via ping and if someone has a stupid idea - there is a limited queue for this. :good:

Any feedback is welcome.
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
Hey man, just wanted to say again what awesome work you are doing!

When I check articles om whatculture (for example http://whatculture.com/comics/10-worst-things-the-punisher-has-ever-done?rf=homepage) I see ads at the bottom, seemingly from Revcontent.. Also something like skimresources in the link of the ad which sounds all kinds of strange to a noob like me.. Is there something that can be done, or added to the list or something? Muchos gracias :)
[Android Software/Hacking General [Developers Only]] bhanupratap:
Well i never thought i would comment on this thread again. [MENTION=304818]MrT69[/MENTION] accused us being from "AD industry" , later with "group of russian hackers" and latest being "we belong to a russian company ". I really admire his creative imagination.

Comments like "delete everything rather making them open source" had really fooled me for a moment. Until i came across Pixelserv-TLS

This is the software which [MENTION=304818]MrT69[/MENTION] basically runs on his https termination servers with just replacing favicon and using his own root certificates on them. I really thought he had developed something for a while.

Last night when i contacted him on TG regarding how https termination can be done locally by eliminating keweon's root certificate, he literally shot me down and blocked me. I probably could post the screenshots of the conversation , but i don't want to embarrass a person publicly who has claimed to have

20 years of experience in this field

.

Pixelserv-TLS can be run on most of the systems locally without having to use the root certificate of your dns provider ( This basically eliminates mitm by dns operator where the foundation of entire argument was about potential mitm attacks). By running your own instance of Pixelserv-TLS locally , you will be the sole owner of your own CA.

Read the Readme-page for more details about compiling for your OS.

Now install Pixelserv-TLS locally.

Read the Wiki-page for more details about creating your own certificates.

Start the service.

If you have followed all the instructions from the github repo , you should now have a working Pixelserv-TLS , visit http://127.0.0.1/ca.crt to download your own generated certificates and import it to the system.

Add some host file entries pointing to 127.0.0.1 , and visit that domain on your web browser with https in the address bar. You should have a valid https connection for the blocked domain.

You can also change the favicon with your awesome logo during compilation and generate your own certificates with fancy names :cool:

Pixelserv-TLS can also be run locally on rooted android devices by using chroot method. I used Linux Deploy and Termux to accomplish this (you have to manually start the service by chrooting into the installation after each reboot in android device and complete installation on phone can take upto 20-30mins ).

I've tested on Arch based and ubuntu/debian based distro's on PC's. On rooted android phone, just tested on debian and ubuntu which works without problem. For windows use cygwin and for macOS use homebrew as suggested on the github.

I wonder why [MENTION=304818]MrT69[/MENTION] doesn't like to terminate https locally , which also eliminates to use keweon's root certificate and never thought about this method. Its very simple and doesn't take more than 5 minutes to compile and install it on a PC.

P.S. I've no relation to the above mentioned technologies and they are completely owned by their respective developers. Hope we don't get falsely accused of being related to these technologies.
[Android Software/Hacking General [Developers Only]] MrT69:
Do me a favor and make a screenshot. At the moment I see no ads. But I guess you know your page better ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Uhhhhhh... Damn!! He released my secret. You do not give it up to stress anymore ;)

If you do it with Pixelserv-TLS then this will work within a tiny environment. I need it faster, quicker and Steve has done with this tool a real good work.

Who is Steve?

It's the developer of this Tool.

Why I know his name??

We both know each other :good:

Now you have your own inspiration. Do it!!! :silly: And hey, what's now about data collection? Who is now the liar? You know this tool, you know how it works and you still was telling all this sh*t about data collection. :laugh:

That's about MITM Attack and PixelServ-TLS. Who was telling its proof and 100% confirmed that I'm doing MITM Attack? Hmmm... You was telling this. Interesting. Read this:

https://github.com/kvic-z/pixelserv-tls/wiki/FAQ#4-does-pixelserv-tls-exposure-to-mitm-attacks

Now you have proofed with this statement you have no clue about anything!

By the way - the "L" flag for disable logging is done on my inspiration at pixelserv-tls. Check it and you will find this recommendation within the GitHub.

EDIT:

There is also a 3rd tool outside who will do the same as pixel-tls ;) They has also embeded this feature but it's also too slow for my usage *gg* I'm patiently waiting if you will find it. It's a famous tool, it's known by almost EVERY Linux user, its embeded as hidden feature but it's also too slow and it offers data collection. I'm excited if you find this "Tool".

EDIT2:

You stay blocked on Telegram because your bashing is really anoying and I don't expect you will excuse your statements about all this nonsense you was posting.
[Android Software/Hacking General [Developers Only]] bhanupratap:
Finally , you accepted that you use pixelserv-tls (until now you claimed to have developed it all by yourself , ah another lie).

How does running pixelserv-tls on your servers with keweon's root certificate will be way faster than running it locally with users own certificate ? Have you forgotten to take the latency and time required for each tls hand shake between your servers and the users into consideration ? or trying to sell another lie like always?

Lmao again trying to impress with new ways . Whenever i use opensource projects and run into problems , i interact constantly with dev's. With time i learn their real name's , that doesn't make me their cool friend

Nothing is stopping you from performing MITM attacks when the user has installed your root certificate and using your dns servers, there is no way to detect when you perform the MITM with the root certificate installed. Fancy , 20 years with industry experience and says "its completely safe to install root certificate of the dns provider" , unless you have plans to perform malicious activity at later stage or you have no idea what you are speaking about.

Regarding MITM attacks author clearly states ,

4. Does pixelserv-tls exposure to MITM attacks?

pixelserv-tls is not exposed to MITM attacks. Since you are in sole control of both pixelserv-tls and the CA certificate (and its private key) on your home network, no one is able to spoof you by using this CA certificate.

Now you who is in-charge of the pixelserv-tls (https termination servers) ? YOU (Not the user) . And who is in-charge of the CA certificate ? YOU (Not the user).And who is in-charge of the DNS servers to redirect the blocked domains to your servers ? YOU (Not the user) Are you getting the point ? or want me to explain it in step by step ?

Funny you , nobody wants to be associated with a potential scammer or a person who constantly lies to people/users. I'm new to TG , still figuring out how to block people , i should be thanking you for saving me a google search.
[Android Software/Hacking General [Developers Only]] MrT69:
Just found a historical picture. Wasn't aware that this is still there :D

This Picture was done at the 4th of Mai 2015 within the EQUINIX DATACENTER in MUNICH.

The very first keweonDNS physical infrastructure protected by 2 x CISCO ASA.

Long time ago... This system was incredible fast. Thanks to Andi again for this incredible donation. It was possible to run the entire System for round about 9 Months as a real system.

Hmm...
[Android Software/Hacking General [Developers Only]] MrT69:
.

Please take note about the first posting within this Thread​

.

>>> CLICK HERE >>> https://xdaforums.com/android/software-hacking/keweon-privacy-online-security-t3681139
[Android Software/Hacking General [Developers Only]] SimplyCity:
Guys, this little war brings nothing, at least I can't find enything positive in it.

No one ever proved that by using Kcetrificate any kind of data was "stollen", or used. Beside, no one - and that is important - no one force anyone to use it.

Yes, you guys did your job: informed everyone that by using Kcetrificate you think your data could be hacked. Thank you. Lesson learned. You should feel better, bc everybody knows your opinion. And still, the choice wasn't taken away, right?

I'd love to see if someone could figure a better idea then mr.T brings up to the world. That would be fantastic! If there is one...

For now let users find this thread as pro one, as it should be: helpful. Bc now, with all respect, xteen pages haven't move even mm forward.

I don't speak much, but the K idea is brilliant for me. And wish it was unbreakable. Yeah, you say: nothing is. True. That's why it's not worse then any other comparable solution. To the times, it's better. At least for me.
[Android Software/Hacking General [Developers Only]] MrT69:
I just want to have silence again - and just a few last words to this situation.

This guys called themself as "Cybersecurity Experts" and a few people was even listen to them. All this kind of threats are also possible with a fu**ing stupid website. With and without a Certificate. They was telling so much nonsense. That was the reason why I was laughing about this kind of "Experts".

But my CERTIFICATE is a threat? I still can't believe this. Just a stupid Certificate can do nothing without a App or an Application on users side. This is the most important reason why you will never get a keweon App. NEVER. And these Experts proof everything with a "Proxy Server" that keweon is a threat? It's incredible how easy you can run a campain against someone.

Why no one need to set this statement on a Website? PHP, Javascript & hide everything within the header then it's done. No one ever here at XDA was ever required to write such a statement. You can hide this threats also within an Android ROM, even within the kernel or even within a stupid App. But I was required to write such a statement.

It even might be that this is the dead for the Project, I don't care at the moment. I just want to have silence again and went back to the roots.

Since 3 Month I'm talking about it's not a threat and I only want to develope again. My DoT server is since December unused ordered and I'm too tired to discuss this nonsense again and again and again...

This project is running since 4 yrs here on XDA. I'm hard against any kind of data collection. And now this? Anyway - I don't want to hear again I'm cheating user. Or someone has proofed that I'm doing MITM. Or stealing data. None of them is true. Nothing of this. Not even one word.

For me was a real unfair pain to write all of this. Let's see what will happens now. It's now up to the users to decide.
[Android Software/Hacking General [Developers Only]] smokeyrider:
I would like to support the developer in this. I'm a very happy user of Keweon. I just want the developer to do what he is very good at. If you don't support the project maybe stay away from this thread. Just my opinion I don't want to lose the project.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Why i can't download the certificate?? [MENTION=304818]MrT69[/MENTION]