Wednesday, February 5, 2014
How do you protect yourself program interface
Hello everyone
In the development, he often went to request data to the server through the interface given, then we are how to hide or encrypt their interface does not expose it
I tried it proguard confusion, but the string type interface seems ineffective
Apk decompile their own discovery interfaces exposed
Everyone is how do ah?
Reply:
See the interface it does not matter, the important data through md5 encryption can not it?
Reply:
You have to find a Java obfuscator more NB: http://www.dewen.org/q/1314
I had some decompile Android, and found some simply can not be decompiled, confusion better.
Reply:
Yesterday nothing to do every day to cool a bit decompile run apk, the code looks very clear, but I really did not find him inside the interface does not know by what means hidden
Reply:
You can call interface first string encryption, decryption and then place again, with proguard, basically people can not read
Reply:
Interface is open access interface in addition to the need to Sign a key
I realized this:
After the user logs in, a key assigned to the client, the client after each request (data load) are required for this key,
If you did not bring access key belongs to an illegal operation,
If the key is not on, indicating that the user is already on the other phone log, a new key generation, key to set aside old,
The server checks the key, with an interceptor solved
Client key parameters are put on each visit.
Encryption and decryption methods are too cumbersome, and if it is a company's application, or a written procedure, but fortunately treatment,
If it is open to the rest of the interface, the problem is a lot of
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment