Skip to main content
86 votes
Accepted

How do app developers protect their app when a user decompiles it?

I used to be a full-time binary reverse engineer, and I still spend about 80% of my time reverse-engineering software (legally). There are some good answers here already, but I wanted to add a few ...
the_endian's user avatar
  • 1,152
32 votes

How do app developers protect their app when a user decompiles it?

Once someone has a copy of your app, they can do anything with it. Your security model has to assume that nothing in your app is secret, and that actions that look like they have been made by your app ...
amon's user avatar
  • 135k
14 votes

How do app developers protect their app when a user decompiles it?

Never trust the client. Make sure that anything you need to keep private is stored on the server and requires user-specific credentials to access.
Solomon Ucko's user avatar
9 votes
Accepted

App Development in a remote server

You could use a desktop virtualization software like Citrix. That way their personal computers are just dumb terminals while the actual development environment runs on a server your control. But keep ...
Philipp's user avatar
  • 23.4k
6 votes
Accepted

Why do some app makers limit their app to certain regions?

The dating app may be a good example here. First, when you start you typically do not have a lot of resources so immediate brought interest may bring the system to its knees and give users a bad ...
Martin Maat's user avatar
  • 18.5k
6 votes

How do app developers protect their app when a user decompiles it?

Is this something to really worry about? This is very dependent on the product. A lot of the time, someone doing it will "cost" you $30 a month—who cares if four or five (or most likely ...
Artelius's user avatar
  • 368
6 votes
Accepted

RESTful API with session tokens.. ehh?

The usual approach is to simply provide a session token back to the client via headers or cookies if they failed to provide one, or provided an invalid one. This is especially necessary for web ...
Kevin Fee's user avatar
  • 2,837
5 votes
Accepted

What would cause a company to need to move their app on the iOS App Store to different "app"?

If one builds an app with 64-bit support using current versions of Xcode, it is no longer compatible with iOS devices running iOS 5.0 or earlier. Perhaps a developer wants to separately support ...
hotpaw2's user avatar
  • 7,968
4 votes

How do app developers protect their app when a user decompiles it?

How do app developers protect their app when a user decompiles it. In practice, they don't. AFAIK, in Europe, decompilation of a software is legally possible for interoperability purposes. Please ...
Basile Starynkevitch's user avatar
4 votes
Accepted

What is done when an urgent fix for an app is needed but updates have to be approved by Apple/Google etc?

Your multiplayer software consists of client which is on the mobile device and service in internet. The service you host independently on the mobile vendors. The answer to your question is that you ...
max630's user avatar
  • 2,587
4 votes

App Development in a remote server

There is no way to avoid giving developers access to the code. If they can see it they can always copy paste it. That being said, there are potentially valid reasons to have code be remote. Say you ...
Ethan McCue's user avatar
4 votes
Accepted

How does an app send an order to a retailer? What happens under the hood?

I am wondering how does the retailer apps works which allows user to choose an item and once user have selected & checkout, the retailer get information about order been placed. Typically the app ...
candied_orange's user avatar
4 votes
Accepted

Is it unethical to figure out how much to charge by asking for a quote from another company?

Yes its unethical, you are wasting their time. But its also impractical. You can only do it once or twice before they stop talking to you. The price they offer will reflect their business model and ...
Ewan's user avatar
  • 77.4k
4 votes

How do app developers protect their app when a user decompiles it?

As Jörg W Mittag mentioned there is the legal aspect of what you are talking about, and then the technical. As long as the app embeds critical logic and database access inside of it, someone with ...
Berin Loritsch's user avatar
3 votes

How do app developers protect their app when a user decompiles it?

There are two aspects to this. First off, what you are describing is illegal in many, if not most, jurisdictions. Decompilation: For example, in the EU, de-compiling is only legal for purposes of ...
Jörg W Mittag's user avatar
3 votes

Why do some app makers limit their app to certain regions?

In some cases, legal restrictions may apply, so app developers may choose to limit availability to regions for which legalities have been checked. States and countries may have different age ...
Hans-Martin Mosner's user avatar
2 votes
Accepted

For your application it's better to have your own online database or to use some online database service?

There are a couple of very different skills and needs at stake here: on one side creating an app: that’s the cool part of the story. You decide when you work on your app. on another side, operating a ...
Christophe's user avatar
  • 78.6k
2 votes

App Development in a remote server

You can use remote desktop systems. That's not too unusual. You don't need anything fancy here, even just setting up a box and letting the developer RDP into it from outside. This is pretty common in ...
GrandmasterB's user avatar
  • 39.4k
2 votes

How do app developers protect their app when a user decompiles it?

I think another part to your question is about the granularity of operations. Your questions seems to be framed such that your app has two actions: Cancel the plan Set the user status to inactive ...
Paddy's user avatar
  • 2,623
2 votes

How do app developers protect their app when a user decompiles it?

You should learn more about how to secure your database with security rules because as others said you cannot be sure the user won't access your code. You should implement Cloud Functions for every ...
deltastar's user avatar
2 votes

What would cause a company to need to move their app on the iOS App Store to different "app"?

hotpaw2 gives some good possibilities but in the time since I wrote this question I stumbled across the answer for Vainglory: turns out for whatever reason the developers initially had separate iPhone ...
Tom Kidd's user avatar
  • 817
2 votes

Geofence triggered credit card transaction

In theory there is no reason you cant trigger a credit card transaction based on a geo-location event. However, in practice it would probably not pass PCI compliance, which would normally require ...
Ewan's user avatar
  • 77.4k
2 votes

Making apps communicate with each other (?)

Would this be very advanced to make and/or be extremely time consuming? I studied basic HTML and Java programming for two years in school, but that's it. It's not very advanced, but that doesn't mean ...
Caleb's user avatar
  • 39.2k
2 votes
Accepted

REST server user authentication

First off, the token approach seems sound for your case. One option is to encrypt user information (e.g. id) into the token. On the server side, you can then keep things stateless. Realize that no ...
JimmyJames's user avatar
  • 27.7k
1 vote

How do app developers protect their app when a user decompiles it?

I believe you are looking for the concept of Obfuscation. It basically makes code more difficult to read by humans. There is in fact some documentation over at the flutter website on how to achieve ...
Niels Willems's user avatar
1 vote

Logic App next number

In case others are interested, we decided to use Azure Blob Storage using Containers with a HOT setting. It seems to work well in testing. We haven't gone live yet. The .NET code uses the ...
Thomas A. Johnson's user avatar
1 vote

Logic App next number

Fun question - sounds like an interview question. You'll need some sort of persistence. I don't think it matters much which one. I would do this: Write '100' to disk (or read previous number from ...
Martin K's user avatar
  • 2,917
1 vote

Are universal apps any less efficient than platform-specific apps?

There are no apps that natively run on Windows, Linux and MacOS as a single binary. There are a couple approaches to multiplatform applications: Use a runtime that runs on multiple platforms, for ...
Martin K's user avatar
  • 2,917
1 vote

REST server user authentication

Don't really know the full use case but this really screams using a session to me. Normally these are implemented with a unique ID sent to the client in the form of a cookie and stored on the server ...
pllee's user avatar
  • 1,212
1 vote

Android Apps: How can I view an apps code/files?

You can obtain the source code of applications a few ways. Check if the application is open source Contact the developer and request source code Reverse engineer the application Reverse engineering ...
Clint's user avatar
  • 121

Only top scored, non community-wiki answers of a minimum length are eligible