Considerations about the security of the Android User Login Mechanism, android User Login

Considerations about the security of the Android User Login Mechanism, android User Login

1. It is difficult for the client to securely store data. Through decompilation and brute force attacks, almost all attacks can be cracked.

2. The server is relatively secure.

3. Combined with the above two points, the launch can control the disaster scale. Each time a client is cracked, it can only target the current client and will not affect other clients.

4. The specific solution is that the client also needs to be encrypted, but the key is obtained from the server, and each client is different.

5. In this case, even if a client is broken, as long as the server is secure, only the interests of one customer are lost, achieving disaster control.

6. I just want to give you some advice.

7. http is insecure in this province. If the system requires high security, you can use https. If the system requires low security, you can do something about md5, but do not expect to be able to defend against all attacks.

Copyright Disclaimer: This article is original or translated by the blogger and cannot be reproduced without the consent of the blogger.