给电视上的视频 App 去广告，我撞上了它的签名自检
起因家里电视上那个视频 App 的开屏和贴片广告，我忍了很久，终于动手想把它去掉。 先把边界说清楚：自己设备上自用，不去碰它的会员体系和付费内容。我想处理的只是广告。 结果这半天，广告一个没去掉，倒是把”客户端安全”这件事看明白了一大截。 一、先看清广告是从哪来的拆开包看了一圈，第一个发现就跟我预想...
写作热力图
加载中...
加载中...
少
多
2026
WeChat Reading Membership Expired, So I Built My Own E-Ink Reader
On October 2nd, my WeChat Reading membership expired. I didn’t renew. It’s not that I begrudged the money — it’s that every time I used it on my e-ink...
微信读书会员到期，我给自己写了个墨水屏阅读器
10 月 2 日，我的微信读书会员到期了，我没续。 不是舍不得那点钱，而是我在墨水屏上用它的每一次，都在跟它较劲：想划线，得跟两个小圆点手柄打架；想知道自己读了多少，它连个数据页都没有。 会员到期的第二天，我把攒了半个月的念头落了地——给自己写了个墨水屏阅读器。 微信读书在我的汉王上难用在哪我的阅...
Reverse-Engineering a Hardened Client's Request Signing with unidbg (Study Notes)
OriginA certain App’s API includes a set of parameters that look very much like signatures (kps_wg, sign_wg, vcode — a style common to Alibaba-family ...
用 unidbg 摸清一个加固客户端的请求签名（学习笔记）
起因某个 App 的接口里带着一组长得很像签名的参数（kps_wg、sign_wg、vcode 这一类，阿里系客户端常见风格）。我最初的直觉是： 这些都是”客户端身份校验”，换个 UA 假装成官方客户端，是不是就能绕过限速？ 花了两天把链路摸了一遍，结论完全相反。这篇只记方法和踩坑，不点名具体 ...
2026
Removing Ads from a TV Video App — I Ran into Its Signature Self-Check
OriginThe splash-screen and pre-roll ads in my TV’s video app had been irritating me for a long time. I finally decided to remove them. Let me set bou...
WeChat Reading Membership Expired, So I Built My Own E-Ink Reader
On October 2nd, my WeChat Reading membership expired. I didn’t renew. It’s not that I begrudged the money — it’s that every time I used it on my e-ink...
WeChat Reading Membership Expired, So I Built My Own E-Ink Reader
On October 2nd, my WeChat Reading membership expired. I didn’t renew. It’s not that I begrudged the money — it’s that every time I used it on my e-ink...
Reverse-Engineering a Hardened Client's Request Signing with unidbg (Study Notes)
OriginA certain App’s API includes a set of parameters that look very much like signatures (kps_wg, sign_wg, vcode — a style common to Alibaba-family ...
Reverse-Engineering a Hardened Client's Request Signing with unidbg (Study Notes)
OriginA certain App’s API includes a set of parameters that look very much like signatures (kps_wg, sign_wg, vcode — a style common to Alibaba-family ...