You don't need to decompile anything to achieve what I'm describing. Your 
APK can have another APK as a "payload" and simply execute its own activity 
before starting the one from another APK. I won't get into details simply 
because I don't want to give anybody the wrong ideas, but it is easy to do.

But that is besides the point. The point here is this: now that I know this 
is being done with my app, who, if anybody at Google can take the knockoff 
down? At best, it is stealing from me. At worst, it is planting Trojans...




On Monday, January 28, 2013 12:36:14 PM UTC-5, Nobu Games wrote:
>
> I noticed that Proguard is able to produce obfuscated code which makes Java 
> Decompiler <http://java.decompiler.free.fr/> crash.
> It's a reasonable step to obfuscate any app (also free ones) in order to 
> make it harder to figure out where to apply these changes or how to crack 
> them.
>
> More advanced protection steps are described 
> here<http://www.google.com/events/io/2011/sessions/evading-pirates-and-stopping-vampires-using-license-verification-library-in-app-billing-and-app-engine.html>.
>  
> To sum it up: on top of code-obfuscation you need to add hidden 
> self-integrity checks to your app that try to validate the package 
> signature.
>
>
> On Monday, January 28, 2013 11:27:00 AM UTC-6, Johan Appelgren wrote:
>>
>> Just decompile, add ad activity, change manifest and recompile. Haven't 
>> tried but can probably be automated for most apps.
>
>

-- 
-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Android Developers" group.
To unsubscribe from this group, send email to 
android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to