Android中Binder安全性和还原逆向中被混淆的AIDL接口

1、逆向发现某APP通过某Service定义AIDL接口，通过Binder对外提供可以操作的API：

package com.***.plugin; import android.app.Service; import android.content.Context; import android.content.Intent; import android.os.IBinder; public class PluginInterfaceService extends Service { private final b bZC; public PluginInterfaceService() { super(); this.bZC = new j(this); } private String TD() { return w.fT(l.getCUID(((Context)this))); } private String TE() { return w.chiperEncrypt.AESB64Encrypt(this.TD(), "UTF-8"); } private String TF() { return w.bOG.getUid(); } private String TG() { return aj.bPE[1]; } private String TH() { String v0 = "keyboard"; if(w.bOe.getFlag(249