資安討論 - HackMD

# 資安討論 ## JS ``` <script src="https://code.jquery.com/jquery-3.6.1.min.js" ></script> ``` ``` echo $PATH ``` ## Android ### https://play.google.com/store/apps/datasafety?id=com.facebook.katana ### visibility #### https://www.geeksforgeeks.org/how-to-toggle-password-visibility-in-android/ ``` implementation 'com.google.android.material:material:1.7.0' ``` ### https://stackoverflow.com/questions/32843350/how-to-change-the-hint-size-of-textinputlayout ``` <style name="TextLabel" parent="TextAppearance.Design.Hint"> <item name="android:textSize">16sp</item> </style> ``` ### ``` https://www.uuu.com.tw/Course/Show/1882/EC-Council-Web-%E6%87%89%E7%94%A8%E7%A8%8B%E5%BC%8F%E5%AE%89%E5%85%A8%E8%AA%B2%E7%A8%8B ``` # android anti screenshot ``` window.setFlags(WindowManager.LayoutParams.FLAG_SECURE, WindowManager.LayoutParams.FLAG_SECURE) ``` ### view jacking #### https://developer.android.com/topic/security/risks/tapjacking ## https://developer.android.com/reference/tools/gradle-api/4.2/com/android/build/api/dsl/SigningConfig ``` apksigner verify --print-certs application-development-release.apk ``` ## https://developer.android.com/reference/tools/gradle-api/4.2/com/android/build/api/dsl/SigningConfig ## signing ``` apksigner verify --print-certs application-development-release.apk ``` ## https://stackoverflow.com/questions/59248088/how-can-i-sign-my-app-with-apk-signature-scheme-v3-and-v4 ## 1. 手動簽 ``` zipalign -v -p 4 app-production-debug.apk my-app-unsigned-aligned.apk ``` ## 2. sign ``` apksigner sign --ks release-keystore.jks --out my-app-release.apk my-app-unsigned-aligned.apk ``` ## 3. verify ``` apksigner verify --verbose my-app-release.apk ``` ## iOS ## ``` https://stackoverflow.com/questions/56722915/how-to-correctly-add-javamail-and-activation-dependencies-to-ant-build-xml-file ```