[Android Software/Hacking General [Developers Only]] MrT69:
Ich

First at all in need so say excuse me because I was misunderstand you question. You guys want to know if I'm personally able by Admin login to do some changes and redirect Domains. I was talking about technical point of view you was talking about physical access.

“With just DNS and just a Certificate it’s never possible to get passwords from any Domain” and without any discussion this is a given fact. I’m not talking about a Proxy, a DNS Server which take over the IP Address and uses its own address as destination IP Address (…interesting sentence…) or Reverse Proxy or whatever Proxy.

But you are right. From your point of view it’s very easy to redirect the Domain to a “Proxy” and grab this information’s. There was a misunderstanding from my site because you guys have done a real huge pressure within the discussion. It even has taken 2 days until a Mod and I understood what you want. But hey, if you would ever become a real Security Specialist then I would not classify this as a lie; I would classify this as a huge Security Risk. If a Administrator has its own device not under Control then this is a huge Security RISK. Not a lie ;)

If an Admin is not able to take control about any services on his own Server then I would have serious Security concerns. But you were asking about “is it possible and proof it” – and again, from the technical side I have done everything and its triple protected to prevent this scenario. No one understands why you were asking this question and even I have had a problem with this. It’s of cause quite logical that this is possible. How to proof something which migh or might not happens? Strange question.

Of cause it is possible by local Admin Account. I'm able to do it and I even have planned this to do. But I would never do this with PayPal or something like this. And this thing has already a name. I call this "Phishing Protection". I guess you will now open a third Page somewhere and write an additional warning about keweon. No worry, as long as you will do no Data Collection I would also never block any sites. Even if this is against me ;)

I still don’t understand why this question is depending from the Certificate. If I would think about to do evil things then I wouldn’t be so stupid and do this via a certificate. HTTPS doesn’t mean Security. The “S” inside HTTPS is secure. That’s a huge difference. And if you really believe this is just related to a certificate then I need to tell you this is complete wrong.

Ok, but now let me explain how this Phishing (Protection) is working.

Within a Mail users will get a camouflaged link which seems to be Google Mail but it's not. Click on the Link and you will get pages which grab your account and password. This links will lead to a website which seems to be some kind of “Paypal” or whatever. You will try to logon and the Phishing was successful. Bad luck. At this Point all experts recommend not clicking on this kind of links which is not very helpful. I’m sad about all the Security Specialists who are talking about “this is not possible, that is not possible” because this is the result. Phishing statistics of 2018:

https://blog.barkly.com/phishing-statistics-2018

https://www.hoxhunt.com/blog/statistics-showing-5-phishing-trends-for-2019/

https://securelist.com/spam-and-phishing-in-q3-2018/88686/

https://www.f5.com/labs/articles/th...raud-report--attacks-peak-during-the-holidays

keweonDNS vs. Phishing

With DNS I'm able to "correct" this kind of links. Instead of getting the evil.phishing.com page it's possible to redirect your link to mail.google.com and if this is happens then you will be at the right place. Sounds simple but this option has a lot of limitations.

Facts and Infos

First at all, I will never do anything on the Server without informing users. It's just an option. It's never a "eat that sh*t and use it". Of cause it’s possible but at the moment it’s still not active. It’s running on my very private server.

The next thing is the certificate which provides benefits. I also need to terminate this Phishing address with my ZSBP systems and then I can prevent this kind of threat. This has different reasons.

1. My own DNS Development will not work with redirect only. Errors might happen and to prevent this errors the entire redirect will not work if it’s not a double entry. This is for security reasons and it’s also already developed for automated process.

2. As controller instance this domain needs to be terminated by my ZSBP System. If the domain is "redirected" to my public IP Address then the entire logic is working. This has security reasons because I don't want to have the evil domain still alive and this has controlling functions.

3. The Certificate itself is just a benefit. If there is just a “HTTP” address inside the Phishing Mail everything is working even without the Certificate. If there is a “HTTPS” within the Address then there are 2 different Options. With the Certificate you will get redirected you the right address. Right after the Domain Termination, as soon as your browser contact the ZSBP System the HTTPS connection is done and there will be a recall. This cause you will be redirected to the right Address without any keweon Certificate. No worry, everyone can double check this within a damn easy way. Without the Certificate you will touch the ZSBP System and that’s it. Because of the Certificate error nothing more will happens.

I guess you still haven’t have understand until today what I’m doing there. There are a lot of threats outside and so named “Computer and Security Specialists” are talking just about “this is evil or that is evil” and they are blaming the world is so bad and we can do nothing against so many threats. We can do something. May be I’m sometimes not political correct or in cases like this it’s a misunderstanding from my site and I can only hope you accept my excuse about this. The only approach is to show them “hey, we can do something against almost all threats”. I don’t say it’s working perfect but it’s possible.

But let’s go back to the roots. You have concerns about the “Root Certificate”? Do you really believe that I will do something evil?

If you would ever take a look at my Job history then you would see where I was working. My former company was Level3 (acquired by CenturyLink) which is an Internet carrier and for business reasons I have had almost legal full access to the entire RIPE Database. And as Security Specialist you should know what this would mean. I still have some good contacts to my former colleagues and you really believe that I would need a system as like as keweon to do evil things? Certainly not. And this RIPE Database Access was an essential base for my solution by IP Address filtering but this would lead to a complete different story.

If you take a look about the notes because I’m searching an Investor you will see that I have serious problems by finding one. Especially the “Phishing Protection” causes me a lot of troubles. I would like to offer a System where user can send suspicious mails. Send me the Mail and I check it. With this Mail I will finally get a lot of personal and high confidential Data and within an automated process everything will be blocked.

If the users one day agree to this solution I can enable this but it’s of cause a question of confidence. It’s a question of how do they trust. But you only trust your default Root Certificates? This Certificates which are set by default and no one really knows what they are doing? This Certificates which are responsible that Data will be stolen, User tracking and Ransomware installed? You are talking about this kind of Security which was the reason why Fedex has spent 300 Million US$ in 2017 against Ransomware attacks? I accept every discussion about Certificates but if someone explains to me he trust only the default Certificates because they are default then this is a poor statement.

Explain to me the Amazon or Buypass Root CA’s. Or Turkiye Bilimsel or Unizeto because you already told me you trust them. Android, Windows or Linux – what exactly do they do on your device? Which Sub CA they have Certified? What data communication is running on them? Which servers are affected? Why they are installed by default? To get a Certificate installed by default it’s not a question of trust. It’s just a question of the price. You do just trust someone because of money? That’s interesting. I have removed a lot of them by default. But hey, we have a different view of “IT and Security”.

I don’t care about this because it’s your decision to trust only them who have money. I wouldn’t say it’s some kind of corruption because you trust only someone who pays for this but it’s not my way. Let’s back again to the Phishing Protection.

Think about I would have an Investor who is only interested about collecting and sell user data. Because of this experience even in Germany I see Tech Startup very critical because without any Analytics and Data collection NO (!) investor will spend money into any project. That’s the reason why I don’t collect any data and I would never do this. I also don’t know if anyone is ever interested about this “Phishing Protection” feature because I don’t want to enable things which are uninterested for the users. Therefore is a more then good relationship required and on the other side they need to have trust into my solutions. Investors who are only interested in Data collection? Never ever. And your concern is this stupid Root Certificate which “might cause” security concerns? What’s about this fact? What’s about Google or Facebook? You are starting a Terror on Telegram and have released a few websites about this? For you I’m a bigger threat then Google and Facebook together? I’m seriously honored about this. If you would do the same fight against Google or Facebook instead of me then this would be the right direction.

I also explained in detail so many times why this ZSBP Server has a public IP Address and not the “0.0.0.0” address. And again, this is even not an valid IP Address, it’s a Network Address. OK, it’s seems that math is wrong or Cisco has no clue about networking. But hey, it’s also OK. Whatever I try to explain you guys ignore this. And now you are wondering why I have closed my Telegram Channel? Question – Explain – Ignore – Ask again?

Since November this game is running and I’m really tired of this because I can’t find a bot who repeats all of my explanations. I don’t say it’s perfect but everything has it sense because from the perspective of security. I just don’t can't hear it anymore from so named Experts and Politicians “This or that is not possible we need to accept it”. It is possible but they are not interested to do something against this kind of threats. I don’t say it’s 100% the very best but it’s better than just talking and telling people nonsense.

I also need to say thanks a lot for all the things you was doing for me. That is not meant ironically. I always was thinking about how to make keweon more known within the world and I was missing a real good idea. How can I do Advertising and Marketing with a Product which prevents such things? That’s indeed a hard challenge.

Since your battle against me the usage was growing up by 20%. I hope I don’t get an invoice from you but I didn’t expect this from the user side. At this point let me say thanks a lot to you.

Finally let me apologize again for the misunderstanding. I only can say sorry because it seems we were talking about 2 different things. I only can hope you will accept this.

I also want to say thanks a lot to all the users who was helping and supporting me and in the meantime I see this thing very relaxed. Thanks a lot and also thanks a lot to all users who has taken a neutral view on this entire story.

Thanks to all and have a nice weekend!