Posts from December 2024

• Investigating a proprietary Android 2FA system

  02 December 2024 | android reverse engineering obfuscation security programming java | Comment

  This article concerns an Android app used as part of a proprietary two-factor authentication (2FA) system. Investigation of the app and 2FA protocol reveals some interesting design decisions.

  Overview

  The 2FA system is similar to well-known offerings such as Duo Security and Okta Verify.… »