Hot answers tagged

83

I used to be a full-time binary reverse engineer, and I still spend about 80% of my time reverse-engineering software (legally). There are some good answers here already, but I wanted to add a few touches. Legal Aspect I'm not a lawyer. But as far as I'm concerned (and many others too), reverse-engineering doesn't really become legally enforceable until you'...


32

Once someone has a copy of your app, they can do anything with it. Your security model has to assume that nothing in your app is secret, and that actions that look like they have been made by your app might actually be malicious. As an approximation, a native app is about as secure as a web app. That means that you must not store any API tokens or similar in ...


14

Never trust the client. Make sure that anything you need to keep private is stored on the server and requires user-specific credentials to access.


12

Will this work and I'd so how risky is it to future problems? Yes it will work, and how risky it is depends on how good your implementation is. This is perfectly acceptable if done correctly. I have successfully integrated PHP and C, when PHP was simply too slow to do certain niche tasks in real time (IIRC, PHP is 7 times slower than its C counterpart). ...


6

1. On app level Running an app on multiple servers isn't terribly hard. There are techniques which are difficult to understand and implement, but there are also some basic techniques any one can use. Learn those basic techniques. If it's not enough, then yes, you'll have to find a freelancer or to hire a developer. 2. On infrastructure level Running ...


6

Don't know what you app is, but have you considered/would a data driven model work for you - the app would not need to change and the data can be downloaded of servers you provide and manage. Maybe a (yet another) DSL would be of use. Another alternate is how locked into Apple are you? Build you business on Android - then you have the choice to use a store/...


6

Is this something to really worry about? This is very dependent on the product. A lot of the time, someone doing it will "cost" you $30 a month—who cares if four or five (or most likely zero!) people do it? You can monitor the situation over time and make changes if necessary. It's a bit like profiling code; engineers make notoriously bad ...


5

No. There is no such thing as a flawless program, so don't aim for that. What you should aim for in for a first release is good/thorough documentation, some automated tests, one or more places for people to tell you about any problems they have or features they'd like to see, and a clear/prominent description of what your program library is and is not ...


5

No. Those are different Platforms, So they are Different APPs!! I think even if you sell on the Android APP store you can still also list your app in the Amazon Android App store. Read the Terms of service to sure, as it can change any moment.


5

Ok, Here is the secret Truth about It... The Data in your app in worth more than the App it self! The reason you can't find that data is because it has value, more value than any set of code accessing it, it would be cheaper to buy the Code base to seamless web than to buy it's database of restaurant, menus and pricing. You will just have to build your ...


5

Security doesn't come from the client, but in how you implement your web service. Ensuring that you only accept transactions from your own client does little to improve security. Safe web service operation requires that the service operate independently from the client, and that there are no service APIs that can cause harm to the service or other users of ...


5

The usual approach is to simply provide a session token back to the client via headers or cookies if they failed to provide one, or provided an invalid one. This is especially necessary for web clients where the session can time out while they're on a page somewhere. This ensures you have your session immediately, without going to the "authenticate" end-...


5

If one builds an app with 64-bit support using current versions of Xcode, it is no longer compatible with iOS devices running iOS 5.0 or earlier. Perhaps a developer wants to separately support customers who have already downloaded/purchased the app on those old devices by maintaining the old app's complete toolchain, unmodified by any new commits or tools (...


4

In case of the first small practice project, I would just start coding right away and try out the different things, that you can do with the iOS SDK. But since you already have one year of experience, you might as well skip that part. Design or Code first? Always design first and then start development. You will likely not save any time on the design, with ...


4

It's a totally different application event process. PhoneGap uses JavaScript event callbacks that are designed to be generic across multiple devices, whereas Android is activity based which is native to the OS. iOS has something simular but I can't comment on that. Android knows which activity to start when the application is loaded, and execution of that ...


4

It looks like they are two different subscriptions; I was able to make two separate registrations, and they both accepted the same "display name," and there are two different prices. Really, they should have just made this one single store. The Windows Phone App Store is $99 per year, although they say they will credit you back $91 if you apply in the next ...


4

Keep in mind that syncing "local" content from many, potentially conflicting sources is not a trivial task. Is really offline capability important? Does the risk of being offline really matters in environment you are targeting?


4

Yes its unethical, you are wasting their time. But its also impractical. You can only do it once or twice before they stop talking to you. The price they offer will reflect their business model and might not work for you. Ie they might sell stuff cheap to drag customers into another product The price they offer you wont be the same as the one they offer ...


4

I am wondering how does the retailer apps works which allows user to choose an item and once user have selected & checkout, the retailer get information about order been placed. Typically the app posts the selection to a server. The buzz words you need to know to study this are Shopping Cart and E-Commerce. Many frameworks exist that would allow Fish &...


4

As Jörg W Mittag mentioned there is the legal aspect of what you are talking about, and then the technical. As long as the app embeds critical logic and database access inside of it, someone with enough patience can reverse engineer and do the bad things you are talking about. There are different approaches you can take to protect your efforts: Use ...


4

How do app developers protect their app when a user decompiles it. In practice, they don't. AFAIK, in Europe, decompilation of a software is legally possible for interoperability purposes. Please check with your lawyer since I am not a lawyer. Be aware of the GDPR. A related legal question is patentability of software. This is discussed by the FSF, by the ...


3

There aren't any download or storage limits for your app (other than available space on the device, of course); if there were, they'd be mentioned in the iOS Data Storage Guidelines. However, you do need to consider how your data files will work with iCloud -- in particular, you should decide whether it's okay for the device to discard your downloaded data ...


3

The first three things you want to do are profile, profile, profile. To be able to effectively scale, you need to know exactly what it is that needs to be scaled up. Whats the bottleneck? Is it concurrent connections? database access? Heavy processor usage due to your code? Once you find out the problem, then you can make an informed decision about ...


3

Would Apple prioritize apps that they earn money on? There is no short way. Some advises that you may pick up here might not work as well, because there is no guaranteed solution. However, if you contact App Store for recommendation and ask openly your problem, you would definitely get the best answer or guidelines to follow. Thus, cutting corners when ...


3

In the interests of full disclosure, I work for Barnes & Noble. I do not own, nor do I plan to purchase stock of any of the companies I mention here. You're confusing publishers and distributors. There are exclusivity deals with some games as well as some distributors functioning as publishers (Valve, Sony, Microsoft). However, in the case of books you ...


3

I accidentally discovered a way, sort of... I recently updated one of my apps to use the new iOS 6 mapping features (it's a transit routing app) and the review was completed from submission to App Store in just over 24 hours. On the other hand, another unrelated app update has been waiting for a week with no action. It makes sense that Apple would ...


3

Would your application function normally without the GPLv2 licensed code? If it can't, then you can't do it. You have to open your source. The FSF interprets your application falling on its head as "The GPLv2 code is an integral part of your application, and therefore your program and the GPLv2 code are collectively considered a 'derived work.'" If your ...


2

I was wondering whether there is anything I can do to improve the speed of reviews. You can request an expedited review, but you should only do that when there's a legitimate reason that you need to get your app out there ASAP, such as a glaring security bug. Otherwise, just allow time for the review process in your schedule. being able to adapt the ...


2

Basically there are two main options: a) using canvas and raycasting b) using game engine to achieve the 3D effect in HTML5. Have a look at the following cool tutorials and posts: Creating pseudo 3D games with HTML 5 canvas and raycasting How to Create an HTML5 3D Engine Canvas tutorials HTML5 ROCKS - POSTS & TUTORIALS


2

I'd say that it depends on exactly what type of data you're trying to get access to. Using the example you provided (pizza), I'd say that using something like the Yelp APIs would prolly be up your alley, but I could be mistaken. Long story short, consider the type of information you're considering, find well-established apps/companies that already dabble in ...


Only top voted, non community-wiki answers of a minimum length are eligible