Skip to content

Anti-Tamper Mechanism

To ensure the stability of the component library and protect intellectual property, TechUI has created an original multi-layered anti-tamper system based on Wasm Guards.

This mechanism is designed to ensure the Integrity of the component's operating environment. Any reverse engineering directed at the core code, forced destruction of authorization information within the DOM structure, or bypassing of authorization logic may trigger the system's circuit-breaker protection.

TechUI promises: Under normal use, no circuit-breaker mechanisms will be triggered, and the guard verification is seamless during use.

Core Principles

TechUI has migrated core rendering algorithms, authorization verification logic, and state machines from JavaScript to WebAssembly modules written in Rust.

  • Black-box Operation: Binary code compiled from Wasm is difficult to read and debug, naturally blocking most cracking methods based on source code modification.
  • Memory Isolation: Critical variables are stored in Wasm linear memory, making it impossible for ordinary browser plugins or scripts to modify them directly via the window object.
  • Two-way Anchoring: The JS layer and Wasm layer maintain millisecond-level heartbeat communication. Once the DOM or JS layer is modified (such as tampering with authorization information), the Wasm layer immediately perceives this and stops computation; the reverse is also true.

Circuit-Breaker Mechanism

The following actions are determined by the system to be "tamper attacks" and will immediately trigger defense mechanisms:

  • DOM Structure Destruction
    • In Free or Authorized status, TechUI renders signature identifiers or authorization information into comments at the end of the DOM (these are not displayed on the page but can be viewed via debugging tools).
    • Violating Operation: Removing this information DOM node via JS code.
  • Tampering with Browser Title
    • When a project license is obtained, the system title document.title is in a locked state.
    • Violating Operation: Attempting any tampering behavior on document.title via JS code.
  • Improper License Use
    • Using a license for the wrong component library.
    • Violating Operation: For example, using a Scifi license for Base or Prime.
  • And more... (not all cases are listed)

⚠️ Circuit-Breaker Alarm

When tampering or other violating behaviors are detected, TechUI will trigger the circuit-breaker mechanism, directly removing the entire DOM element and issuing an alarm message!

Troubleshooting

Currently, the TechUI author has tested various environments and found no instances of false positives.

If you are certain that you have not performed any tampering but the components have entered a circuit-breaker state, please perform a preliminary investigation by changing environments or systems, or disabling browser plugins.

Once the problem is identified, please contact our security team via the following method.

Developer's Note: We have spent countless days and nights polishing these components. The anti-tamper mechanism is not intended to be an enemy to developers, but to protect the business model that allows TechUI to be continuously maintained. Thank you for your understanding and support.

Released under the MIT License.