I think that an easy way to tamper-proof apk would be: 1) Android Market computes a checksum for the apk when the apk is uploaded 2) In the License Response (eg. in one extra), Android Market send this value 3) The aplication computes the same checsum of itself. If the values don`t match, just finis()
This could be very easy to do for Android Market developers... Regards, Jose On Aug 24, 8:16 pm, Trevor Johns <trevorjo...@google.com> wrote: > FYI: We have a blog post up on this topic. It covers many of the points I > made earlier, but I figured it's worth pointing out. > > http://android-developers.blogspot.com/2010/08/licensing-server-news.... > > -- > Trevor Johns > Google Developer Programs, Androidhttp://developer.android.com > <http://android-developers.blogspot.com/2010/08/licensing-server-news....> > > On Tue, Aug 24, 2010 at 8:26 AM, a1 <arco...@gmail.com> wrote: > > > But I'm not sure that native code is any harder to patch, and there > > > are still identifiable syscalls or calls back up to java for i/o to > > > show where it tries to accomplish verification. > > > First of all it's much harder to bypass especially if you are dealing > > with optimized code and you will have to do it at least twice (for arm > > abi and armv7 abi). Event toolchain setup is more complicated. > > > -- > > Bart Janusz (Beepstreet) > > > -- > > You received this message because you are subscribed to the Google > > Groups "Android Developers" group. > > To post to this group, send email to android-developers@googlegroups.com > > To unsubscribe from this group, send email to > > android-developers+unsubscr...@googlegroups.com<android-developers%2bunsubscr...@googlegroups.com> > > For more options, visit this group at > >http://groups.google.com/group/android-developers?hl=en -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
