I am developing a payment processing app for Android and I want to prevent a hacker from accessing any resources, assets or source code from the APK file.
If someone changes the .apk extension to .zip then they can unzip it and easily access all the app's resources and assets, and using dex2jar ...
@TerryChia thanks buddy i have one more query from that question
how about encrypting your strings in the code and decrypting them at runtime? If you do the decryption on a remote server, like other people suggested, you don't get the problem that the decryption key is in the sources
Basically, @vignesh4303, while @Terry is right, in that you might not get back the code, you can reverse engineer anything given enough time/effort, and to a particular level of accuracy
I am searching for a decompiler for a C program. The binary is a 32-bit Linux executable. Objdump works fine, so basically I am searching for something which attempts to reconstruct the C source from the asm source.
best way to explain it is like baking a cake - you can get all of the right ingredients in the right quantities and cook them together, but you can't "uncook" the cake back into the ingredients.
a script I wrote to collect statistics on the number of open Redis instances on the internet went haywire and ended up scanning a few thousand netblocks (randomly selected) instead of 50 or so
the usual method for simple sites is to store a hash of a user's password right in their user record.
what if the password field is removed from the user table, and a password table is created. the password table would have the same password hash, but instead of the user id, the key to the table...
Oh, so you caught me performing a Nessus scan against the US-DoD /8 with the DoS plugin family, safechecks turned off, and both root and domain admin credentials? Funny story about that....
While it's a terrible event that never should have happened, I am not a member of their community nor do I know anyone there. It just doesn't involve me.
@ScottPack Honestly, I probably feel about the same. It astounds me that some people I know, who are similarly unattached to the events, are actually (literally) crying a good deal over it.
@RoryAlsop Truthfully rage is probably a bit strong. Sometimes it's hard to tell the difference between temper loss due to bitter disappointment and rage. :)
Is it a security issue not using tls-remote in OpenVPN? That is not verifying the server's common name. Is a MITM attack possible? Could this be an issue, especially with services like dyndns.org?
This question meets quality standards.
I have a computer with Linux BackTrack 5 as host and Windows XP as guest on virtual box. I am using Host-Only-Adapter to create virtual LAN and to share USB modem internet as well so that both host and guest are simultaneously connected to internet via single USB modem.
Since my WAN IP address ...
It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any remote servers normally accessed.
Is there a way to run a normal disk-based system but always have ...
It’s that most wonderful time of the year again — time for the Stack Overflow Annual Survey! So, put down that third glass of eggnog and fire up a new tab. It only takes a few minutes – and there are stickers!
As the name suggests, we’ve been doing this for a few years now (here are the 2010 results and the 2011 results for your perusal) and we always learn a lot from them. This data is used to support the advertising we sell on Stack Overflow and Server Fault. Advertising helps keep the lights on (and servers humming) around here, so if you use either (or both!) sites, we urge you to participate. …
A general question clicks in my mind, that there are many ways to bypass the security.
So, what is the highest degree of security?
I am searching for a decompiler for a C program. The binary is a 32-bit Linux executable. Objdump works fine, so basically I am searching for something which attempts to reconstruct the C source from the asm source.
It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any remote servers normally accessed.
Is there a way to run a normal disk-based system but always have ...
