Play-Integrity on +5 Security Researchhttps://overkazaf.github.io/blogs/tags/play-integrity/Recent content in Play-Integrity on +5 Security ResearchHugozh-cnTue, 25 Aug 2026 15:03:51 +0800把 classes.dex 藏起来就安全了？主流加固方案的真实防线https://overkazaf.github.io/blogs/posts/android-apk-hardening-packer-vmp-rasp-mainstream/Tue, 25 Aug 2026 14:50:00 +0800https://overkazaf.github.io/blogs/posts/android-apk-hardening-packer-vmp-rasp-mainstream/从构建期混淆、DEX/SO 加壳、函数抽取、VMP、RASP，到 APK 签名、Play Integrity、设备注册和服务端风控，系统比较国内外主流 Android APK 加固方案、工程流程、真实安全边界与选型方法。一个 Canvas 当然认不出你：海内外主流 Web / Android 设备指纹与风控体系全景https://overkazaf.github.io/blogs/posts/device-fingerprinting-web-android-mainstream-platforms/Tue, 25 Aug 2026 10:30:00 +0800https://overkazaf.github.io/blogs/posts/device-fingerprinting-web-android-mainstream-platforms/沿着信号采集、设备注册、可信验证、画像归并、业务图谱、风险处置和对抗反馈这一条主线，比较海内外主流 Web / Android 设备风控方案、抖音系注册流程、Play Integrity 架构及其可被规避的边界。