yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
My pleasure. Whenever you have troubles again let me know this. ;)
[Android Software/Hacking General [Developers Only]] GamaShani:
Are both the servers for DoH only?
[Android Software/Hacking General [Developers Only]] Mackie Messer:
Windfinder doesn't work.

https://play.google.com/store/apps/details?id=com.studioeleven.windfinder
[Android Software/Hacking General [Developers Only]] MrT69:
Would you double check the app please?

Is it working now?
[Android Software/Hacking General [Developers Only]] aL_09:
Can anyone give me a simple answer of the difference between DoT and DoH? Which is more secure and faster? Which do you guys use?
[Android Software/Hacking General [Developers Only]] MrT69:
DoH (DNS over HTTPS) is a JSON answer format for DNS requests. This protocoll was invented by Google and since July 2018 it's within public usage.

This protocoll runs via Port 443 and it has the advantage for countries with Governmend censorship. When the Censorship is just DNS based it can be bypased with DoH.

DoT (DNS over TLS) is native DNS within a SSL tunnel. You can compare this with your Webbrowser and a HTTPS connection. It's working via Port 853 but in countries with censorship this port will be almost filtered.

I can't give a recommendation which one is faster or not. It's up to you to test and decide which one is better or faster for you. Within my mobile device I have 24x7 the DoT active even when I'm within my own WLAN.
[Android Software/Hacking General [Developers Only]] Mackie Messer:
Looks good now. Thank you!
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
I've been getting ads in some games since yesterday. The one in screenshot is Crowd City. I took the liberty of drawing a shocked emoji [emoji33] (or at least tried) for extra dramatic effect. I'm also showing that it's not one of the excluded apps in Nebulo.

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] MrT69:
I need to install and check this... Can you tell me when this happens the 1st time??

EDIT:

Awesome info from you...!!!! Thanks a lot!!!
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Upgrade Info

The upgrade is through for following servers. Nothing changes for you, it should just run faster.

[DNS over TLS - DoT] dot.asecdns.com

[DNS over HTTPS - DoH] doh.asecdns.com/nebulo and doh.asecdns.com/dns-query

DoH now runs better with NEBULO and now also with INTRA even if the app comes from Google.

I also did an update to the blacklists. There seems to be something going wrong since Monday and a table in the database wasn't read properly. This is now fixed.

I would be happy about feedback. Have fun!
[Android Software/Hacking General [Developers Only]] Keule-Tm:
Read something about DOH being less secure than DOT about a month ago in Süddeutsche Zeitung (usually they are well informed on things like that).
[Android Software/Hacking General [Developers Only]] MrT69:
It doesn't matters if you use DoT or DoH or DNS because logging is with all of this possible.

DoT is just as like as a webserver with SSL. There will be a tunnel and the DNS request will be pushed over this tunnel.

DoH is invented by Google in 2018 and they transform DNS responsed into a JSON format.

The only risk with DoT or DoH or even DNS is when your DNS provider is doing evil things. From this point of view it's inseucre to use DNS at all.

Both protocols has advantages and disadvantages. I love to provide DoH because it prevent censorship for different countries. When I'm within a public hotspot (Munich Central Station) then DoT will not work because they block DoT. I switch to DoH which runs at port 443 and everything is fine.

If you take a look at this topic then you will see that just only governments are hard against DoH. Until today I heard only that there was a Malware "Attack" but there is no proof. There are no further informations what was happens, who was responsible and it was just only one Articel about this. Think abou this.

I only see that some governments has a real pain by using DoH. As long as the goverment has serious concerns to use DoH as long as this it's a good reason to use DoH.
[Android Software/Hacking General [Developers Only]] alexacm:
current dns server list

Hello MrT69,

Thanks for all your hard work!

I was wondering what is the most current/latest/recommended DNS servers for the US? I am confused on which IPv4 server/s I should use. I am using them at the router level, specifically for my android TVs. Also, do you recommend installing the certificate even if the browsers are really never used?

Thanks again,

A-
[Android Software/Hacking General [Developers Only]] rmn.br:
After last Keweon maintaining I have many blocked web sites, same sites which one week a go doesn't have problems with loading. I start write whitelist, those sites aren't harmful in any way, just contain couple ads...
[Android Software/Hacking General [Developers Only]] MrT69:
About the Certificate read this here. There is a good explanation and if you don't need it at all or if you see no reasons to use it then there is no need to use it.

https://xdaforums.com/showpost.php?p=80708411&postcount=2801

For US I don't know which one is the best. I will update the list in posting #6 the next days for better overview.

At the moment the entire project is still within a funny toy stage but when everything is working as expected then I guess within a few months I can provide a worldwide Anycast DNS Service. This would mean there are 4 addresses at the end and then this try and error game about which one is the fastest is over.
[Android Software/Hacking General [Developers Only]] MrT69:
Such a help is really awesome. Thanks a lot!!!

If you add a hash and flag the URL which contains ads then I can double check it.

Million times thanks a lot for this!!!!
[Android Software/Hacking General [Developers Only]] MrT69:
keweon and DNSSEC validation:

It was a need to spend round about 1 more year into this and since yesterday keweon is working now with DNSSEC validation.

I don't use my own trust anchor because this would make no sense and I'm using the public known anchors.

Even when they change the anchors it's not a problem for keweonDNS. That's why I'm so hard against DNSSEC because it has nothing to do with security and it provides no security.

I guess enable this feature will not make a lot of friends in addition because DNSSEC was invented to prevent things as like as keweonDNS. I'm pretty sure a lot of you knows what I think about impossible things.

*/****storm-challenge-accepted/*

Here is a tiny Video about the very first early alpha stage. There is still some development required but important is it is working. Making videos is not my thing but hey, it's just for demonstrating things. :o

https://www.youtube.com/watch?v=_uRc7EJ6dDw

Because of the fact that some idiots try to steal my blacklists with round about 300GB DNS traffic I need to make sure that this will be not stolen. They didn't get important things but instead of contacting me doing it within this way was real incredible. The DNSSEC feature is anyway within a early dev stage and I guess within a few weeks it should be done.
[Android Software/Hacking General [Developers Only]] MrT69:
I only found this news within German language.

With Chrome 80 Google remove or restrict the API to use Adblocker plugins. I said this since 2 years that this will happen but no one wants to listen.

https://www.google.de/amp/s/www.gol...-adblocker-einschraenken-1911-144931.amp.html

In the meantime Google is almost within every Browser. Safari on Mac, Edge from MS and this will give them a Market strength of more then 73%.

That's a real nightmare.
[Android Software/Hacking General [Developers Only]] MrT69:
I have received a huge file and I gues it was your file. I need to say million times thanks for this.

I was able to remove a lot of things and it was helping to sort out a lot of errors.

It is a need to do a second and may be 3rd double check on my site but most of them are now working. Thanks a lot for your efforts!!!!
[Android Software/Hacking General [Developers Only]] rmn.br:
Mate that's wasn't me, I doesn't have time and started using KeweonDNS trough Blokada, lately I'm ad free and without blocked web sites. Magic. I have still opened list :)
[Android Software/Hacking General [Developers Only]] MrT69:
OK... ;) I'm still fascinated about this list. If everyone would do this then the entire system is clean within 2 weeks *gg*
[Android Software/Hacking General [Developers Only]] GamaShani:
When I install the certificate, what should I select in the credentials section?

WiFi or VPN and Apps? :confused:
[Android Software/Hacking General [Developers Only]] MrT69:
I always use both because just to be safe.

If you want to sort this out then install it and open https://adblock.keweon.center

If you receive a https failure then it's wrong. If you get a white blank page everything is fine.
[Android Software/Hacking General [Developers Only]] jyoti.id:
I did both!
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir [MENTION=304818]MrT69[/MENTION], ??

This site is detecting that I am using keweon.

I am on Android 10 using private dns feature and certificate is installed in the system directory. I am using Magisk..

I have attached screenshot and the URL..

https://www.uploadship.com/error.ht...22e68e7225ae-e55318020a142ebdc4d4404d2522bee5
[Android Software/Hacking General [Developers Only]] MrT69:
Nope... It's related to the certificate. I have done an upload here:

https://www.uploadship.com/1dd44e1bc76e6fbb

This is NETSCAN.EXE v. 6.21 which is the last freeware edtion. I can upload and download without any issues.
[Android Software/Hacking General [Developers Only]] Atheosun:
MrT69, thank you so much for all the work you do sir!

Am i correct in saying that for Private DNS in Android 10:

1. set it to dns.keweon.center

2. add the cert for "VPN and apps"
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly this way. And keep in mind the Cert is just for cleanup site.

In the meantime it also prevents a lot of sites with Adblock detection because there are no HTTPS errors because of the cert.

If you have any troubles or if you see if something is going wrong then feel so free and let me know this.
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Speeds seem to be on and off from couple of days... Is there any problems...?
[Android Software/Hacking General [Developers Only]] TheForce:
[MENTION=304818]MrT69[/MENTION]

This is probably a noob question. But I can't figure out what I am doing wrong.

When I open XDA-site on my phone with "via-browser" I get every time a warning that the site is not trusted. See screenshot.

I have to cancel this warning several times, (8 times or so) and then I can use the site well.

On "chrome-browser" I don't have that.

I know that via-browser has an inbuild adblocker. Could this be the reason?

There are some more sites with that problem.

My settings are:

1e
[Android Software/Hacking General [Developers Only]] TheForce:
My settings are :

See my pm. For some reason I cannot post them??
[Android Software/Hacking General [Developers Only]] MrT69:
The problem is the provider. They are very tiny server and sometimes they are damn slow. I know about this but actually I can't solve this issue.
[Android Software/Hacking General [Developers Only]] MrT69:
That's a problem of the VIA Browser. They are not using the default store within android for certificate and I have until today no contact to the dev team to ask them for a install option.

The other problem with embeded adblocker in browser is from my point of view something senseless. I have compared this "adblock" thing from Opera with keweon. I don't see any difference.

Allmost all ads are served via HTTPS and for some reasons all the adblocker crap don't display and kind of https error. Until today I don't understand how this things will do a real adblock because non of this things will ever bring up an https error. This is a reason why I provide a certificate against all this blocking errors.

I never have seen until today an embeded adblocker within a browser which is real working and adblocking.
[Android Software/Hacking General [Developers Only]] I5WsRcGXFSPHLBFtjNxBXkd2:
Hello, I have a few questions:

"Please take note that the usage of a Root Certificate from someone you don't know can cause serious problems when the Server is build up to target user. With a MITM Attack it is possible to get data, passwords and logon credentials."

Can you please tell me then, how can I know if you're not doing this kind of things?

Thank you for reading me.
[Android Software/Hacking General [Developers Only]] MrT69:
I just can say that I'm not doing this and more is not possible. Did you ever proofed to someone that you are not doing evil things? If yes - how have you done this?

On the one hand there would be a proxy required for this. I have invented keweon to proof it that security is also possible even without a proxy. OpenDNS is doing exactly the same thing as like as me and they also use there own root certificate but you don't notice this because they are hiding everything behind a proxy.

On the other hand why should I do this? Just because of the possibilities?

That would be the same if you said that everyone who is on the Internet is probably looking at child-p**ns because the possibilities are there. This is nonsense.

I'm german and in germany we have the almost hardest internet law within the world. If I ever would do something like this I would loose my job and I'd be in a lot of trouble with the law.

I know a lot of people are doing a hard bashing campain within differen boards because of the certificate. Did I ever say someone to use it? Did I ever say I kill you if you don't use it? No. I'm always wondering why this guys driving such a hard campain against me but not against OpenDNS or Virus Devs or Ransomware...

It's up to you to use it and to decide it if you use it. And I'm still waiting for a better Idea from all of this security guys to fight against this HTTPS ads without using a Root Certificate. I'm absolutly open for any ideas but until today no one has ever provided a better solution or a better idea.
[Android Software/Hacking General [Developers Only]] I5WsRcGXFSPHLBFtjNxBXkd2:
I can clearly see how tired you are about how many times people asked you about this things but don't take my questions personally.

First, I must say how impressed I am with keweon system. I tried for about 1-2 hours and it blocks ads even better than a well configured blokada or adaway (with a minor issues like a few sites showing a white page, nothing serious).

Second, on "Why should I do this?" Well, because the amount of invaluable information would be huge and not because of what you said after.

Third, on your fifth paragraph, I dont know what group of people you are talking about but I'm just a random, independent internet user who is just interested on your well designed system (and wants to use it) but is sceptic about it. No, you didn't said you'll kill me if I dont use the certificate but you recommend it because it will prevent and improve various things and that sounds good to me.

I'll stay here if you want to keep the conversation.

Have a good day.
[Android Software/Hacking General [Developers Only]] MrT69:
Yep, you are right. I'm so tired about this question and it would be very easy to cover all this kind of question by a website. I hope that this will find an end within the next few months ;) Thank you so much for understanding.

I'm really hard against all the data collection within the Internet and until today I don't understand why everyone complains about it but nobody wants to act. I always say keweon is not the holy grail for this but it's a good beginning and it just should show, hey - it is possible to do something.

It is not my intention to collect data, it is my intention to prove that you can do something against this. When EU politicians publicly stated at that time that we had to live with it because there is nothing we could do against this, that was the moment when I decided to make keweon publicly available.

I have always hoped that one of the big players would do this but nothing ever happened. Today it's clear to me because it's all about data collection.

It was clear to me from the very beginning that I would not only make friends with it and it was also clear to me that it would be difficult.

What was not clear to me, however, were these damn investors. It is almost impossible to find someone who is not interested in data collection. Since I've noticed that, I've seen start-up companies, especially in security area, from a different view.

As it always proves, nothing is harder than reality. ;)
[Android Software/Hacking General [Developers Only]] Shadow337:
I have problem since few days

When i load random page, it shows "detected change of web" and after 1 sec its automatically load again normally

How to fix it?
[Android Software/Hacking General [Developers Only]] MrT69:
Can you send me some example links and a screenshot?

Never heard about this...

Do you use Nebulo oder DoT by Android?
[Android Software/Hacking General [Developers Only]] Shadow337:
Its hard to catch with screenshot because of instant reloading of page

Im using Blokada with custon dns ( keweon ) and blocking ads there ( i think energized blue list is default )
[Android Software/Hacking General [Developers Only]] MrT69:
Energized Blu is by default enabled at keweon. Dropp the list and give it a try just with keweon.
[Android Software/Hacking General [Developers Only]] rmn.br:
I also using Blokada with Energized Blue + Goodbey Ads by Jerryn70.

I never didn't see same massage. Do you have latest version of Blokada and which browser u using?
[Android Software/Hacking General [Developers Only]] MrT69:
I remember of a user here or at telegram have had the same problem. He has done a reflash of the entire device and after this it was working again.

The problem is the VPN App because there is no stable interface on your device. You can try it by remove the app and clean all files and cache files.

But I guess the interface bounces is a problem with some broken API.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update Info

After 2 yrs developement and weeks of testing I will enable the AI filter database.

I want to see the quality and the result of the AI System to go ahead with this development. I will add this in addition to the current database which still contains a lot of errors.

No worry, I'm aware of this but cleaning up is actually not possible because I can't protect my work.

To qualify the AI result I update the database with 21 Million additional entries. If something is going wrong copy the URLS into a TXT file and mail this to whitelist@keweon.de if you want to support my work.

If there are to much errors tomorrow then I will step back to the current status.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
To my great grandchildren in 2087: I was here! The day AI took over the Internet, it's all on [MENTION=304818]MrT69[/MENTION] :silly:
[Android Software/Hacking General [Developers Only]] MrT69:
What's about the idea to use unbound??? ;)

I really have no idea about stubby because it's round about 4 or 5 yrs ago that I was using stubby.
[Android Software/Hacking General [Developers Only]] MrT69:
:laugh::laugh::laugh::laugh::laugh::laugh:
[Android Software/Hacking General [Developers Only]] mucke5:
Could you provide one tutorial configuring unbound with the current status of working ai servers, please?

I'm using your service already via dd-wrt and the instructions on page #1 are working.
[Android Software/Hacking General [Developers Only]] MrT69:
The AI solution is just a tiny test. It's only to test the algorithm and to see where I need to adjust. Therefore Inhave add a part of the filter result into the current DNS system to check if this is working as expected.

Right now there are 76.5 Million entries in the Database. Imagine you have a hosts file with this.

I expect round about 700 to 900 Million entries within three live database but this is just possible when I would have more money.

Copy the entire internet into a database, filter out the evil things to make it clean and track the entire Internet in almost real time.

Since round about 2 hours a tiny list is online just to see if I'm on the right way or do I need to adjust something.
[Android Software/Hacking General [Developers Only]] rmn.br:
My app called Twisto stopped working, is opening and saying no internet connection. I'm using Blokada and through have set Keweon, when I switch to Adguard DNS connection is back. Thanks for your effort. Please when you have time, can we do something?
[Android Software/Hacking General [Developers Only]] MrT69:
Just post me the App Link and I can fix this when I'm back home.

Thanks a lot for this!!!!
[Android Software/Hacking General [Developers Only]] MrT69:
I talked to my AI supplier again and Cyberdyne Systems assured me that the T-Series is absolutely reliable and harmless.

Do you feel safer with the info now?
[Android Software/Hacking General [Developers Only]] rmn.br:
https://play.google.com/store/apps/details?id=cz.twisto.app

Vielen dank!

edit: [MENTION=6928666]jyoti.id[/MENTION] if you mean app which I posted here, there is zero ads (:
[Android Software/Hacking General [Developers Only]] jyoti.id:
There are lots of sites which cant be opened because it includes a lot of ads
[Android Software/Hacking General [Developers Only]] jyoti.id:
No i don't mean the app, other sites that i open.
[Android Software/Hacking General [Developers Only]] MrT69:
Are there too many false/positive right now??

EDIT:

I have seen a huge reporting about false/positive. It seems it's still to early for this kind of blacklists.
[Android Software/Hacking General [Developers Only]] MrT69:
I have seen a stupid typo within the cleanup procedure... I'm so sorry!!

I'm on the way to re-upload and I guess most of the errors are done.
[Android Software/Hacking General [Developers Only]] jyoti.id:
The page doesn't even load! Just white blank page
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Haha, that had me laughing all day.

I've been doing some gaming and browsing throughout the day on the AI infused blocking and it seems to be running fine! It sometimes loads a little longer but it's all ad-free and still connected when needed.

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] MrT69:
I never would compare my AI with a real AI because it's running here at home on MS-SQL Express. ;)

But hey, the logic is almost working and I'm pretty sure when someone with a real AI experience would see this then I'm pretty sure he would give me a head shoot.

For me at home my "results" are working pretty good and it was just to see where I need to adjust something. It's not perfect but now it's a 1000times better result then one year ago.

Because of the speed it's just a problem of the Database. The server are running near the limit and more is absolutly not possible at the moment. I was curious about the result and I must say I am fully satisfied with the result.

It's far from perfect, but a damn good start.
[Android Software/Hacking General [Developers Only]] MrT69:
Huge Apple fix in progress

I'm able since a few days to cover now Apple related problems. I have seen that Apple devices have had a lot of problems by using keweon.

Because of a incredible donation from an unknown user I'm able now to test also Apple things. The fix is in progress and this evening all Apple problems should be fixed.

Personal note:

I don't know who you are because I was not able to find the sender of this present so let me say million times thanks for this at this way.

I was searching round about one week because I want to say thanks direct to you.

Whoever make this donation - I was really shocked and I hope you send me a PM. I'm still surprised about this bcause it's still incredible for me.