Re: [android-developers] Dynamically loading a jar file at runtime
On Mon, Jun 11, 2012 at 2:11 AM, Reddy devireddy@gmail.com wrote: I have a requirement that i need to download a jar file dynamically at runtime and use a function present in the jar. I would expect that this would not be possible, for what should be obvious security concerns. - TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago transit tracking app for Android-powered devices -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
Re: [android-developers] Dynamically loading a jar file at runtime
That's right, this is currently a bad idea for security reasons... What do you want to do? That might inform more about what you should be doing, and perhaps we can give some advice as to a possible compromise.. (This is possible, using a DexClassLoader, though at the current time you should almost never use that..) kris On Mon, Jun 11, 2012 at 2:30 PM, TreKing treking...@gmail.com wrote: On Mon, Jun 11, 2012 at 2:11 AM, Reddy devireddy@gmail.com wrote: I have a requirement that i need to download a jar file dynamically at runtime and use a function present in the jar. I would expect that this would not be possible, for what should be obvious security concerns. - TreKing - Chicago transit tracking app for Android-powered devices -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
Re: [android-developers] Dynamically loading a jar file at runtime
*Hi Kristopher Micinski, can u please explain me how i can do this using DexClassLoader. The usecase is like this. 1. Jar files contains some encryption/decryption algorithms. 2. Algorithms should not present in the application. 3. Need to download at runtime and use it to complete the process. Also please suggest if you have some alternative solution for the same. Regards, Murali * On Tuesday, June 12, 2012 12:08:23 AM UTC+5:30, Kristopher Micinski wrote: That's right, this is currently a bad idea for security reasons... What do you want to do? That might inform more about what you should be doing, and perhaps we can give some advice as to a possible compromise.. (This is possible, using a DexClassLoader, though at the current time you should almost never use that..) kris On Mon, Jun 11, 2012 at 2:30 PM, TreKing treking...@gmail.com wrote: On Mon, Jun 11, 2012 at 2:11 AM, Reddy devireddy@gmail.com wrote: I have a requirement that i need to download a jar file dynamically at runtime and use a function present in the jar. I would expect that this would not be possible, for what should be obvious security concerns. - TreKing - Chicago transit tracking app for Android-powered devices -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
Re: [android-developers] Dynamically loading a jar file at runtime
On Tue, Jun 12, 2012 at 1:00 AM, Reddy devireddy@gmail.com wrote: Hi Kristopher Micinski, can u please explain me how i can do this using DexClassLoader. The usecase is like this. 1. Jar files contains some encryption/decryption algorithms. 2. Algorithms should not present in the application. 3. Need to download at runtime and use it to complete the process. Also please suggest if you have some alternative solution for the same. Regards, Murali What happens when someone pulls the code from the vm and extracts your algorithm, cracks it, and then cripples your decryption strategy? As I've said before, at the present time, there are limited uses for DexClassLoader, and (because of the counterexample I just demonstrated) this isn't a good rationale. Remember, on a rooted phone, you can no longer assume your code will stay in isolation, I routinely take the vm and extract running code .. kris -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
