Inane Observations $ sudo fix_it
  • Investigating a proprietary Android 2FA system

    02 December 2024 | android reverse engineering obfuscation security programming java | Comment

    This article concerns an Android app used as part of a proprietary two-factor authentication (2FA) system. Investigation of the app and 2FA protocol reveals some interesting design decisions.

    Overview

    The 2FA system is similar to well-known offerings such as Duo Security and Okta Verify.… »

  • Investigating a historical Android anti-root protection system

    24 November 2024 | android reverse engineering obfuscation security programming java | Comment

    This article concerns a specialised Android app used as part of a proprietary authentication protocol, developed in the late 2010s. Given the intended use case, the app features a number of aggressive security measures – the app uses FLAG_SECURE and does not run when developer… »

  • Spoofing Android device model via Smali patching

    31 December 2023 | android reverse engineering programming java | Comment

    I recently came up against an Android application which gates certain functionality behind detecting a ‘compatible’ Android device – which mine was not. My usual approach, on a rooted device, would be to use XPrivacyLua to spoof the device information returned to the application, but… »

  • GUIDE: Exporting Encrypted bitcoin-qt Wallets into MultiBit

    24 November 2013 | bitcoin windows guide linux btc java mac | Comment

    Introduction

    Bitcoin is awesome. Unfortunately, migrating between Bitcoin clients is not. It's especially annoying when the recommended method of exporting with pywallet, importing into BlockChain.info, exporting as an aes.json and importing into MultiBit is 1) incredibly confusing and 2) doesn't actually work.
    So, here… »
  • Hand-Crafting a Linux Computer Virus… in Java!

    10 November 2013 | linux java | Comment

    It's a computer virus… for Linux… in Java. That's right, I've broken the Internet.

    (app.exec is a shell script, hello.exec and hello2.exec are compiled C programs)

    Disclaimer

    There won't be any code in this post, nor will there be detailed plans for how to implement… »
  • GUIDE: Directly Executable JAR File

    18 August 2013 | guide linux java | Comment

    Java is great, but having to type java -jar program.jar gets annoying. Why can't you run it like any other program, with ./program.jar? Well, you can, and it's incredibly simple!

    echo '#!/usr/bin/java -jar' | cat - Program.jar>Program
    chmod +x Program

    Tada! That's it! Program.jar… »

  • Home
  • Git (Archives: GitLab, GitHub)
  • Research
  • Music
  • Posts
    • May 2025 (3)
    • December 2024 (2)
    • November 2024 (2)
    • September 2024 (2)
    • August 2024 (1)
    • More…
  • Tags
    • medicine (25)
    • copyright (20)
    • opentally (20)
    • drm (19)
    • encryption (12)
    • monash (12)
    • mathematics (11)
    • statistics (10)
    • proportional representation (8)
    • python (8)
    • victoria (8)
    • law (7)
    • meeting procedure (7)
    • ptv (7)
    • public transport (7)
    • rust (7)
    • defective by design (6)
    • digital rights management (6)
    • creative commons (4)
    • webassembly (4)
    • metro trains (3)
    • paediatrics (3)
    • politics (3)
    • 2fa (2)
    • c (2)
    • graphics (2)
    • mfa (2)
    • pdf (2)
    • victorian electoral commission (2)
    • android (5)
    • security (18)
    • cryptography (12)
    • programming (12)
    • voting systems (8)
    • med in review (11)
    • music (10)
    • parliamentary procedure (7)
    • totp (2)
    • reverse engineering (20)
    • obfuscation (12)
    • single transferable vote (19)
    • ebook (16)
    • elections (12)
    • java (6)
    • linux (33)
  • Lee Yingtong Li
  • blog@yingtongli.me
  • My CV · CV of Failures
@RunasSudo

Most material on this website is available under an open licence. See https://yingtongli.me/blog/copyright.html for details.