85
votes
Accepted
How do app developers protect their app when a user decompiles it?
I used to be a full-time binary reverse engineer, and I still spend about 80% of my time reverse-engineering software (legally).
There are some good answers here already, but I wanted to add a few ...
- 1,142
32
votes
How do app developers protect their app when a user decompiles it?
Once someone has a copy of your app, they can do anything with it. Your security model has to assume that nothing in your app is secret, and that actions that look like they have been made by your app ...
- 134k
14
votes
How do app developers protect their app when a user decompiles it?
Never trust the client. Make sure that anything you need to keep private is stored on the server and requires user-specific credentials to access.
- 408
9
votes
Accepted
App Development in a remote server
You could use a desktop virtualization software like Citrix. That way their personal computers are just dumb terminals while the actual development environment runs on a server your control.
But keep ...
- 23.3k
6
votes
How do app developers protect their app when a user decompiles it?
Is this something to really worry about?
This is very dependent on the product. A lot of the time, someone doing it will "cost" you $30 a month—who cares if four or five (or most likely ...
- 368
6
votes
Accepted
RESTful API with session tokens.. ehh?
The usual approach is to simply provide a session token back to the client via headers or cookies if they failed to provide one, or provided an invalid one. This is especially necessary for web ...
- 2,837
6
votes
Accepted
Why do some app makers limit their app to certain regions?
The dating app may be a good example here. First, when you start you typically do not have a lot of resources so immediate brought interest may bring the system to its knees and give users a bad ...
- 18.3k
5
votes
Accepted
What would cause a company to need to move their app on the iOS App Store to different "app"?
If one builds an app with 64-bit support using current versions of Xcode, it is no longer compatible with iOS devices running iOS 5.0 or earlier. Perhaps a developer wants to separately support ...
- 7,958
4
votes
App Development in a remote server
There is no way to avoid giving developers access to the code. If they can see it they can always copy paste it.
That being said, there are potentially valid reasons to have code be remote. Say you ...
- 338
4
votes
Accepted
How does an app send an order to a retailer? What happens under the hood?
I am wondering how does the retailer apps works which allows user to choose an item and once user have selected & checkout, the retailer get information about order been placed.
Typically the app ...
- 105k
4
votes
Accepted
What is done when an urgent fix for an app is needed but updates have to be approved by Apple/Google etc?
Your multiplayer software consists of client which is on the mobile device and service in internet. The service you host independently on the mobile vendors.
The answer to your question is that you ...
- 2,557
4
votes
How do app developers protect their app when a user decompiles it?
As Jörg W Mittag mentioned there is the legal aspect of what you are talking about, and then the technical. As long as the app embeds critical logic and database access inside of it, someone with ...
- 46k
4
votes
Accepted
Is it unethical to figure out how much to charge by asking for a quote from another company?
Yes its unethical, you are wasting their time.
But its also impractical.
You can only do it once or twice before they stop talking to you.
The price they offer will reflect their business model and ...
- 72.4k
3
votes
GPLv2 code as a separate process in a closed-source iOS app?
Would your application function normally without the GPLv2 licensed code? If it can't, then you can't do it. You have to open your source.
The FSF interprets your application falling on its head as ...
- 199k
3
votes
How do app developers protect their app when a user decompiles it?
There are two aspects to this.
First off, what you are describing is illegal in many, if not most, jurisdictions.
Decompilation: For example, in the EU, de-compiling is only legal for purposes of ...
- 103k
3
votes
Why do some app makers limit their app to certain regions?
In some cases, legal restrictions may apply, so app developers may choose to limit availability to regions for which legalities have been checked. States and countries may have different age ...
- 15.2k
2
votes
How do app developers protect their app when a user decompiles it?
I think another part to your question is about the granularity of operations.
Your questions seems to be framed such that your app has two actions:
Cancel the plan
Set the user status to inactive
...
- 2,623
2
votes
How do app developers protect their app when a user decompiles it?
You should learn more about how to secure your database with security rules because as others said you cannot be sure the user won't access your code.
You should implement Cloud Functions for every ...
- 21
2
votes
What would cause a company to need to move their app on the iOS App Store to different "app"?
hotpaw2 gives some good possibilities but in the time since I wrote this question I stumbled across the answer for Vainglory: turns out for whatever reason the developers initially had separate iPhone ...
- 827
2
votes
Accepted
Where to do post-processing of API call when used in MobileApp
Of course this depends a lot on the actual job that needs to be done. But lets assume you need to find out if you are in Manhattan and you have queries google maps for the current location.
From ...
- 156
2
votes
GPLv2 code as a separate process in a closed-source iOS app?
The iOS App store guidelines and OS security sandbox do not allow spawning a separate process from an app, and in fact iOS reported to hunt and kill any attempts by an app to try to start additional ...
- 7,958
2
votes
Accepted
REST server user authentication
First off, the token approach seems sound for your case. One option is to encrypt user information (e.g. id) into the token. On the server side, you can then keep things stateless. Realize that no ...
- 25.9k
2
votes
Geofence triggered credit card transaction
In theory there is no reason you cant trigger a credit card transaction based on a geo-location event.
However, in practice it would probably not pass PCI compliance, which would normally require ...
- 72.4k
2
votes
Making apps communicate with each other (?)
Would this be very advanced to make and/or be extremely time consuming? I studied basic HTML and Java programming for two years in school, but that's it.
It's not very advanced, but that doesn't mean ...
- 39k
2
votes
App Development in a remote server
You can use remote desktop systems. That's not too unusual. You don't need anything fancy here, even just setting up a box and letting the developer RDP into it from outside. This is pretty common in ...
- 38.2k
2
votes
Accepted
For your application it's better to have your own online database or to use some online database service?
There are a couple of very different skills and needs at stake here:
on one side creating an app: that’s the cool part of the story. You decide when you work on your app.
on another side, operating a ...
- 75.9k
1
vote
How do app developers protect their app when a user decompiles it?
I believe you are looking for the concept of Obfuscation. It basically makes code more difficult to read by humans. There is in fact some documentation over at the flutter website on how to achieve ...
1
vote
Logic App next number
In case others are interested, we decided to use Azure Blob Storage using Containers with a HOT setting. It seems to work well in testing. We haven't gone live yet.
The .NET code uses the ...
1
vote
Logic App next number
Fun question - sounds like an interview question.
You'll need some sort of persistence. I don't think it matters much which one. I would do this:
Write '100' to disk (or read previous number from ...
- 2,877
Only top scored, non community-wiki answers of a minimum length are eligible