So then the check for the checksum could be removed... same problem.
Peter

On 22 Okt., 07:50, Jose <toco...@gmail.com> wrote:
> I think that an easy way to tamper-proof apk would be:
>
> 1) Android Market computes a checksum for the apk when the apk is
> uploaded
> 2) In the License Response (eg. in one extra), Android Market send
> this value
> 3) The aplication computes the same checsum of itself. If the values
> don`t match, just finis()
>
> This could be very easy to do for Android Market developers...
>
> Regards,
> Jose
>
> On Aug 24, 8:16 pm, Trevor Johns <trevorjo...@google.com> wrote:
>
>
>
> > FYI: We have a blog post up on this topic. It covers many of the points I
> > made earlier, but I figured it's worth pointing out.
>
> >http://android-developers.blogspot.com/2010/08/licensing-server-news....
>
> > --
> > Trevor Johns
> > Google Developer Programs, Androidhttp://developer.android.com
> > <http://android-developers.blogspot.com/2010/08/licensing-server-news....>
>
> > On Tue, Aug 24, 2010 at 8:26 AM, a1 <arco...@gmail.com> wrote:
> > > > But I'm not sure that native code is any harder to patch, and there
> > > > are still identifiable syscalls or calls back up to java for i/o to
> > > > show where it tries to accomplish verification.
>
> > > First of all it's much harder to bypass especially if you are dealing
> > > with optimized code and you will have to do it at least twice (for arm
> > > abi and armv7 abi). Event toolchain setup is more complicated.
>
> > > --
> > > Bart Janusz (Beepstreet)
>
> > > --
> > > You received this message because you are subscribed to the Google
> > > Groups "Android Developers" group.
> > > To post to this group, send email to android-developers@googlegroups.com
> > > To unsubscribe from this group, send email to
> > > android-developers+unsubscr...@googlegroups.com<android-developers%2Bunsubs
> > >  cr...@googlegroups.com>
> > > For more options, visit this group at
> > >http://groups.google.com/group/android-developers?hl=e

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to