4 ms·
I think there's an evident need for someone to do a deep analysis of this app's behavior. Both with interception/MITM and possibly disassembly if that's even po
by uniqueuid 4y ago
I think there's an evident need for someone to do a deep analysis of this app's behavior. Both with interception/MITM and possibly disassembly if that's even possible ATM.
I remember trying to disassemble a facebook APK years ago and that was way too involved even then (because of countermeasures).
Perhaps using frida on android is a saner approach these days.
- schleck8 4y agoThe same people who analyzed Pegasus did that, but Douyin obfuscates its code so a lot of activity is inconclusive https://citizenlab.ca/2021/03/tiktok-vs-douyin-security-privacy-analysis/ https://citizenlab.ca/2021/03/tiktok-vs-douyin-security-priv...
- uniqueuid 4y agoMany thanks, the citizen lab does awesome work. Great to see this. [edit]: Awesome to see that they publish their reports on github and even include frida components https://github.com/citizenlab/tiktok-report-data https://github.com/citizenlab/tiktok-report-data