This article explains how to enable and configure code obfuscation in HarmonyOS applications using DevEco Studio, covering compiler options, rule files, HAR building modes, debugging obfuscated stack traces, and third-party hardening requirements for app security.
This article explains how modern ticketing systems achieve millisecond‑level response times under massive concurrent demand by combining client‑side defenses, API‑gateway signature verification, Redis atomic stock decrement, and message‑queue buffering, ensuring fairness, preventing bots, and protecting backend services from overload.
This article describes the security upgrade of the 58 Daojia work‑side Android application, covering code and resource obfuscation, signature protection, emulator and root detection, anti‑hook measures, and advanced Dex‑shell and DEX‑VMP techniques, with practical Gradle and Kotlin examples.
This article explains Android app security risks and introduces static taint analysis, its theoretical foundations, key concepts, and practical tools such as FlowDroid, MobSF, AppShark, and PATDroid for detecting privacy leaks and vulnerabilities.
A recent exposé reveals that many facial‑recognition systems capture the entire camera view and send images to backend staff for manual review, exposing users—often in vulnerable moments—to privacy breaches and sparking widespread concern across social media.
This article presents Xu Ming, head of risk control at Jimu, sharing comprehensive insights and practical experiences on combating black‑gray market fraud within the Jimu app, covering the platform’s risk points, common challenges, overall anti‑fraud strategy, detailed operational tactics, and reflective thoughts on future improvements.
This article explains practical anti‑debugging methods for Android applications—covering Java tools like Proguard and debugger checks, as well as NDK strategies such as ptrace, file‑node monitoring, Inotify, SO hash verification, and timing analysis—to raise reverse‑engineering difficulty.
This article presents a detailed overview of Android app security threats, the essential components of an Android project, the full APK build and decompilation process, and a range of reverse‑engineering tools and protection strategies—including Smali analysis, SO manipulation, and signing bypass—to help developers safeguard their applications against piracy and data tampering.
This article explores Android’s sandbox mechanism, detailing how Linux‑based UID/GID permissions, file system rules, and permission groups control app isolation and access, with practical insights into adb shell behavior and permission granting.
