yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] cng92:
does keweon support DNS over tls for android 9?
[Android Software/Hacking General [Developers Only]] J4jks:
No
[Android Software/Hacking General [Developers Only]] MrT69:
The DNS Changer App is not a real VPN. There is no Server, Password, Certificate. Nothing. The only reason for this it's the only way to change your DNS Server settings.

Apple has the same problem. The App create a VPN Adapter on Android and because of this it's possible to change the DNS Server. You don't need to use any App at all when you change the DNS Server on your Wifi router at home. If you want to use keweon at mobile network you need the App or Magisk. But Magisk only supports IPv4. If you will have a IPv6 address at Mobile Network then you have your provider DNS. And of cause all ads, tracker and whatever crap.

The keweon Certificate works complete indendent from this and has nothing to do with VPN or something like that. This Certificate has 3 different reasons.

1. Speed up your Internet

2. Pretty up Websites

3. Block things which are not possible at all (I call that "Deep Privacy & Security Protection" - invented and copyright by me)

The last feature is currently active on some sites but in a few days I will enable 2 Servers where the keweon Root Certificate becomes mandatory.

I'm starting to block Amazon and Facebook within a never seen way. But without the Certificate a lot of things within the Internet will not longer work.

This is one of the core features of keweon. A lot of people has concerns to use the Certificate because they believe it is possible to do evil things with this. This is complete wrong. With just a Root Certificate it's not possible to do evil things at all.

Because of this I do the change and activation for "Deep Privacy & Security Protection" at the moment only on 2 Servers.

More will coming soon.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
I've got one little issue with the certificate. When trying to install it on Android, a dialog box appears saying "Attention. You need to set a lock screen PIN or password before you can use credential storage.". Being the good XDA citizen that I am, I of course searched this thread, found the same problem and giggled at your reply:

Lol, that was priceless. I still have a question though. You said "if you have an unrooted device". I have a rooted device however, can I bypass this security measure by forcing the certificate installation using a root method somehow?

I currently don't (yet!) own a device with any biometrics so I'd have to set either a PIN, password or pattern but I find that tedious to use every single time and it complicates my commute big time.
[Android Software/Hacking General [Developers Only]] J4jks:
Magisk module(by [MENTION=8843871]bhaskarjy0ti[/MENTION] )installs the certificate, even if you can't change the DNS in this way you can have the certificate.

You may try https://play.google.com/store/apps/details?id=net.jolivier.cert.Importer
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Oh wait. I have the Magisk module installed. So that means I've been sporting the certificate all along?
[Android Software/Hacking General [Developers Only]] MrT69:
I can't belive this. Check this URL:

https://i.hate.ads

If you have keweon connection and you open this URL it should be a Certifiate error. If it's a blank page you have it installed.
[Android Software/Hacking General [Developers Only]] MrT69:
The first and only one App I know is xbrowser from PlayStore who has build in the keweon Certifiate.

It's not my App and a User told this to me. I can't imagine that other PlayStore App install it.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Looks pretty blank to me...
[Android Software/Hacking General [Developers Only]] mendax99:
i have magisk module from magisk official app installed but

i am still getting ads

and please guide me to use keweon dns on my pc

when i open i.hate.ads i do not a blank page but i get error ip address could not be found

please help

in my pc i have set the router dns address and pc internet ipv4 dns address as mentioned and restarted but i am still getting ads

i have attatched the attachments
[Android Software/Hacking General [Developers Only]] J4jks:
Have you checked whether DNS is changed or not with dnsleaktest.com like sites.

Try disabling ipv6 on PC and in mobile use any VPN based DNS changer like dnssilter with adding ipv4+ipv6 addresses
[Android Software/Hacking General [Developers Only]] knojap:
is there a way to send mms wirh activated keweon dns adresses? i can't send mms anymore. i have deactivated the keweon magisk module but mms still doesn't work?

edit. sorry it was the firewall and i had to put +49 in front.
[Android Software/Hacking General [Developers Only]] mendax99:
i have disabled ipv6 on PC

and through dns tools it is showing that my dns addresses are changed as shown in attachment

but ads are still there

on mobile when dns changed through dns changer app vpn it works and ads are blocked

update: i changed my dns on android thorugh magisk module dns switcher and now ads are blocked

my only concern is why is it not working on my pc?

i have tried almost everything

it is shutting my dns is changed but i am still getting ads
[Android Software/Hacking General [Developers Only]] MrT69:
IPv6 problem.

You have a valid IPv6 Address and Magisk only supports IPv4. This NXDomain error shows you are not connected to keweonDNS Server.
[Android Software/Hacking General [Developers Only]] MrT69:
Open a command prompt and type:

ping i.hate.ads

or

ping i.love.keweon

If you get an IP address then you are connected. Please keep in mind DNS is sometimes a little bit slow. That means your DNS cache is still full of this Ads addresses and then it will take times until it's empty.

Either you clean the cache manually or the most easy way is a reboot. On PC if you have set the DNS there. When you have done the settings on the Router just boot everything. It's the fastest option. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
NEED SOME TESTER - SERVER WILL BE OFFLINE ON FRIDAY

Testserver with keweon Adblock Root Certificate ONLY:

IPv4:

213.239.207.143 (DE-NUERNBERG)

107.191.55.215 (USA-DALLAS)

IPv6:

2a01:4f8:a0:8487::143 (DE-NUERNBERG)

2001:19f0:6401:175d::215 (USA-DALLAS)

If you use it without Certificate please do not complain about all the non working websites.

The reasons:

This server blocks AMAZON and FACEBOOK within a never seen way. At the moment it even can be that you still see some ads on Facebook but this is the next stepp. Don't worry.

Important is if the Websites Amazon, Facebook, IMDB and YouTube are working. The global most datacollector (pixel.facebook.com and graph.facebook.com) is now closed. That's the reason why the keweon Adblock Certificate is required for this two servers.

Please don't complain about site errors if you don't use the keweon Adblock Root Certificate on your device with these 2 listed DNS Servers.

If this is working we have a base to do the rest. So it's now up to you to test. Any feedback is welccome.
[Android Software/Hacking General [Developers Only]] SimplyCity:
MeT69, I set these test servers on my n8 with DNA changer. Certificate installed. Visited all sites you've mentioned and can't see any issues, neither any adds. Actually, they are loading pretty fast. I will check on my windoze PC in the morning. I can say it seems all good. Not sure if that small tests I've made are enough, if you like me to check something extra, just say. BTW : used Chrome and YT vanced app.

And once again, thanks for brilliant idea and whole infrastructure you bring to us.
[Android Software/Hacking General [Developers Only]] J4jks:
Not with vanced try with official app and say .

Vanced is already adfree !!
[Android Software/Hacking General [Developers Only]] MrT69:
That's it. keweon does not only protect on mobile devices. Also within Browsers, other devices and on OS Level. ANY OS.

It might be there are a lot of Apps outside who do protect. But then it's only on Android. Whats about the user who don't know the App? What's about IPad? Oder IPhone? Or Windows Computer? And we are talking there about one single App. What's about the rest of the Apps?

pixel and graph are deeply buried within the entire Internet. One App does not solve this problem. That's the reason why they still able to get the data they want. Because of this I have build keweon.

That's the idea behind of it. One change at a centralize settings point - and this tiny change protect everything. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update - Amazon

Minor fixes at assoc-amazon and amazon-adsystem. Certificate is still a mess but it's just for testing and it's an interim solution. ;)

Now it's 100% closed and locked down. I guess now I can forgett the 100K US$ funding from Amazon into this project. :good:
[Android Software/Hacking General [Developers Only]] MrT69:
Facebook and me

After creating my "facebook" account with keweon Mail address and Picture upload verification they have yesterday locked my account until it's verified.

Today I was double check it and now the entire account is blocked now. No reasons. No further informations.

I'm not longer able to create a Facebook account. May be the problem was that I have registred with my keweon.de address. I guess I'm blacklisted. :good:

I feel honored about this.

Now it's your turn to test if facebook is working. Unfortunately I can't do it and I'm not allowed to do it. I would also need some tester now to block the Ads things on Facebook. If you see unwanted ads please PM me.
[Android Software/Hacking General [Developers Only]] SimplyCity:
Hihi! But, if they ever could invest, maybe you should consider some time-windows open for their adds, lets say from 2 am to 3 am, doable, right? An hour or two is fair for 100k $.

:D

Beside - no one ever asked me, if I like to see an add. Any adds. What if I don't want to see them? I would probably have a different view, if they would offer real $$ for their adds I am forced to watch. Not funny...

Today (actually, few minutes ago) I've tested amazon, facebook, imdb and youtube on my Keweon'ed PC with certificate. IMDB, Facebook, Amazon - no single add; got one while on YouTube - it was a footage-add-b4-movie, short piece of movie add I could close after few secs.

Scr-shots aatached. Also, when entering Amazon, got pop-up about certificate. Also scrshots.
[Android Software/Hacking General [Developers Only]] mendax99:
in cmd prompt i am getting a error

is a static ip neccesary for it to work as i have PPPoE

i am willing to let someone check my internet settings on either teamviewer or anydesk

i don't think it is a problem of ipv6 as in the attatchment you can see that i do not use ipv6 and i have even disabled it
[Android Software/Hacking General [Developers Only]] MrT69:
What does this exclamation mark means translated into English? It seems the certificate is valid. But...

What does it mean?
[Android Software/Hacking General [Developers Only]] mendax99:
i have attached screenshots and i think i have set the dns correctly please guide if i did anything wrong
[Android Software/Hacking General [Developers Only]] SimplyCity:
first one (the smaller)... well, even in my national language I can't fully figure out what creator had in mind... anyway: "Informacje o cofnięciu dla certyfikatu zabezpieczeń dla tej witryny nie są dostępne. Czy kontynuować?" means: "No revocation information is available for the security certificate for this site. Continue?" but I dont know whats better instead of "revocation" (withdrawal, deregistration)... strange, but I just can't translate it fully... Now I am installing vmware, and fresh copy of w7, english, if I get it again, i'll make another scrshot, if you want.

Second one, exclamation mark

"We cannot verify the identity of this website or the integrity of this connection.

+ This certificate comes from a trusted certification authority.

+ The date of the security certificate is valid.

! The name on the security certificate is incorrect or does not match the name of the site.

+ The security certificate uses a strong signature.

Continue?"

:)

Edit: got first one in English, scrshot
[Android Software/Hacking General [Developers Only]] MrT69:
Ahhh, that's OK. Not a big thing. Will correct this. This is just a cosmetic error.

Million times thanks!!

EDIT:

Should now work. Check this please.
[Android Software/Hacking General [Developers Only]] MrT69:
Contact my via Telegram. Let me take a look at this with Anydesk.

At the moment I have no clue what's going wrong but I guess it's easy at the end.

;)
[Android Software/Hacking General [Developers Only]] MrT69:
Certificate for Windows Users

If you are using Windows and you want to use the Certificate I recommend to use the REG file which will store the Certificate within an easy way at the right place.

If you use Mozilla/Firefox browser then you need to install in addition this Certificate to it's own store. Very easy.

Open the Browser, go to http://pki.keweon.center and wait 3 seconds. Then click "bla, bla, for Websites, bla, bla" and that's it.

If you want to remove the Certificate from Windows then do it in this way:
[Android Software/Hacking General [Developers Only]] :
Will the certificate ever need to be redownloaded? I mean, does the certificate get updates?

Firefox for android makes it a pain to remove. Only way I know how is to clear cache and data which removes my bookmarks.

I love this project. Came to it through Blokada. Thank you for all of your hard work.
[Android Software/Hacking General [Developers Only]] MrT69:
When this will ever happens the old one can remain. I will complete delete the old one and then this Certificate will not longer work in any case. No worry. If even this worst case scenario will happens there is no real need to remove it.

At the moment everything is covered with this certificate. I also expect that they will check one day HTTPS on EV attributes (Extended Validation) but even this is not a problem with the current Certificate. I don't want to destroy all illusions for the Ads Industries so let's wait until they will do the next step.

Whatever they plan or will do the next 5 to 10 yrs is not a problem for all of us. :good:
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update:

Moved the Servers below to a new platform. They are now now upgraded to newer OS and provide a faster response. Redesigned security from scratch:

The rest of the Servers will be done during the next day's.

Latest Version:

keweonDNS v.9.11.280.S2
[Android Software/Hacking General [Developers Only]] MrT69:
A tiny look into keweon

Today I have received a whitelist request for this URL:

If you enable this URL and open it then it will open this site:

Take notice about the helpfull message, if it's stuck you have to disable all browser plugins. At this point I'm already on "Defcon1".

Now, let's go a little bit deeper into this.

The "Redirector" is a threat defence. Take a look at the screenshot below. At the second screenshot you will see the Threat defence is indeed working because you will see the public IP Address. It seems there is a real heavy protection.

But what Threat is this site protecting for? What is this exactly doing? Take a look at the headline:

Ok. Something is not normal working here and - thanks to God that this site is protecting me. But I still have the question what is an abnormal activity?

I'm running an CISCO ASA 5540 on my DSL Line. Some say's I'm paranoid, some say's "Oh, why not a PaloAlto" but I say it's just for fun and training. I'm running at home on 2 local keweonDNS Servers. That's beause of testing some things. In addition I have 2 diffent AntiVirus - but' there is still abnormal activity.

OK, might be that all the entire environment is abnormal but I see in non logs any activity. So what is going on there?

I disabled everything because I was curious and I want to know more about this. I have loaded the sites a few times and nothing happens. So I decieded to take a look a the Source code of this "Threat Detection Site" and - taaadaaaaaa - here we are.

Open the Website and this site ends in a "NGINX" default website. So, let's do some Remote AntiVirus and here we are:

https://www.virustotal.com/#/domain/statsy.net

What does it mean?

1. NEVER (!) trust anyone who say he will do security on a illegal website. I don't want to start a discussion about "Torrents" but they are almost 110% illegal.

2. If someone say's he will do a "Threat defence" then you should ask yourself why? What kind of threats? Abnormal Activity? What is abnormal? And what the hell is normal??

3. If you will ever do a security check and you need to disable your browser plugins then you should do only one thing. Leave the site & close your browser. IMMEDIATELY!!!

4. You have a right click option within almost every browser to view the Source Code. Do this and almost there is no Coding knowledge required to see if there are some poison things.
[Android Software/Hacking General [Developers Only]] paradoxiumwind:
I've got an RT-AC87U with custom firmware, I can change the DNS easily, I just change them to yours which are:

primary: 176.9.62.58

secondary: UK / London

k1ns-lon-001.keweon.center

45.32.183.39

2001:19f0:7402:a61::39

Since i'm in the UK, I should use this one?

I should put "45.32.183.39" not "k1ns-lon-001.keweon.center" etc?

Then anything connected to my router on my network has keweon protection?

I'm also still really confused about doing this on my android phone. You say you don't need tod o anything with a VPN, but that DNS changer program says it has to use a VPN, and I already use PIA VPN, so there is conflict and it won't work.

Edit: Also anyone know how to test if this is working? like, does anyone have a website with a load of ads I can check etc?

Edit 2: Just loaded youtube app and there's an ad right on the top.
[Android Software/Hacking General [Developers Only]] MrT69:
It seems you also need to set the IPv6 DNS Address. To check if you device is connected just open the browser and type:

http://i.hate.ads or http://i.love.keweon

If you have a blank site it's working. If you want to see if the cerrificate is working just open the sites above with https.

When you set keweon on the router and on mobile device you use the VPN then this should work. You will also have protected everything which is connected to the router.

What DNS Server you should use it's up to you. You need to play around which one is the fastest for you. If you have found this then use it.

I guess you have Merlin firmware installed on the router when it's an Asus. As far as I remember there is no option to set DNSv6 Addresses.
[Android Software/Hacking General [Developers Only]] paradoxiumwind:
Yeah it's AsusWRT-Merlin, I'm not too bothered about IPv6,, I mean, nothing uses it anyway right? there's no need to even enable it is there?
[Android Software/Hacking General [Developers Only]] MrT69:
This depends if you have an IPv6 address or not.

I'm actually only have an IPv4 access. I'm not able to play around with IPv6.

On my ASUS I have changed the DNS on the WAN Interface. Nothing more is required to do with Merlin and then it's working withing the entire Network.
[Android Software/Hacking General [Developers Only]] paradoxiumwind:
Thanks. Moved house this week and my router is still at home so using neighbours wifi but as soon as I can I'll just change the DNS on the router.

When you say find the best secondary DNS server for you, how do you check the speeds etc? I just figured since I'm in the UK I should use the UK one.

After doing this, can I then just uninstall nano adblocker in chrome on my PC and anything 'static' connected to the network? or do I still need an adblocker in the browser to filter certain elements etc like social buttons and crap like that?#

My laptop is actually my main driver these days, I use PIA VPN on it, installing the certificate and then carrying on using the VPN is kosher right? No security leaks or anything like that?

Thanks again, you are very active / helpul in here and have probably answered the same questions about a million times but still take the time. When I've got some free cash I'll throw a donation your way, have a paypal address for that or anything?

Thanks again.
[Android Software/Hacking General [Developers Only]] surya790:
This is out of topic.... But I'm just curious. Is individual privacy worth it? Huge companies are interested in data and statistics about different groups of people, not individuals. No one is going through our data on a selective basis.
[Android Software/Hacking General [Developers Only]] problemathic:
check this bro https://prnt.sc/i20jix ADS ?
[Android Software/Hacking General [Developers Only]] MrT69:
The only ads I see is from Facebook. When I block this domain than the ad is gone. And Facebook is dead. I guess that's not a good idea.

I have seen the main page code. So many Javascript crap. Need a deeper investigation but this needs to be done manually.
[Android Software/Hacking General [Developers Only]] problemathic:
in my sceeenshot its not facebook ads. wait ill upload it. its a google play store app.

https://i.imgur.com/c.jpg

here bro take a look.
[Android Software/Hacking General [Developers Only]] MrT69:
I need anyway a manual investigation on it.

Right now I'm in the office. I will do it @ home. ?
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Just disable/uninstall it in magisk then reboot . Or disable the certificate in " TRUSTED CREDENTIAL " in Settings if you want to disable the certificate only and use the dns manager
[Android Software/Hacking General [Developers Only]] MrT69:
Can you let me know what is blocked?

Send a PN please.
[Android Software/Hacking General [Developers Only]] problemathic:
PN stands for?
[Android Software/Hacking General [Developers Only]] MrT69:
It should be PM. Private Message ?
[Android Software/Hacking General [Developers Only]] problemathic:
Wait bro. im busy updating my buddy laptop. Having fresh install and start from the scratch :( ill try the msi certificate for windows :)
[Android Software/Hacking General [Developers Only]] ttocs99:
Hi just tried this and stupid question how do i know if its working?
[Android Software/Hacking General [Developers Only]] MrT69:
Linux or Windows AFTER you set the keweonDNS Server:

1.Open Command line

2. Type "nslookup"

3. Type "0.start.bz" (it's an ZERO)

The IP Address should be 5.189.169.177

It might happens that you change the DNS Server Adresse and see no changes. That's because of DNS caching. Reboot your Router and PC. The Router reboot is only required if you set the DNS on your Router.

There are several other ways to clean the DNS cache within an easy way. But reboot is always the most simple method.

Enjoy it.
[Android Software/Hacking General [Developers Only]] ttocs99:
Im using a android device i have installed dns changer and set uk dns but atill have adds any suggestiins
[Android Software/Hacking General [Developers Only]] MrT69:
I guess its the same **** with the FritzBox.

Make sure you have IPv6 within the DNS changer enabled and you also have to set the IPv6 DNS Server Address.

Let me know the result.

The HTTPS certificate is not required but I recommend it to use. It's only for all the HTTPS crap and it will make your AdBlocked device faster and the web sites looks much more pretty.
[Android Software/Hacking General [Developers Only]] ttocs99:
Thanks for that it did the trick
[Android Software/Hacking General [Developers Only]] MrT69:
Great. Love that feedback.

Enjoy it and have nice evening. ?
[Android Software/Hacking General [Developers Only]] ttocs99:
And you pal,cheers