Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-28 Thread AndroidYourself
I want to do the same... LVL makes no sense, because its to easy to skip 
this check.

But checks are absolutely necessary, because after a few hours you are 
published a new app, the whole world is downloading it from apk sites. You 
have to implement an individually check that have to be cracked manually 
by a cracker, not by a easy to use Crack-Tool. This needs a few weeks/month 
to publishing this at APK sites :)

And when the old App-Version is cracked... you will publishing a new 
version with a little bit modified parameters and new functions... and this 
needs again cracking time. Its not uncrackable, but it annoys the APK 
downloaders, because they have to wait again and again for a new crack. So 
I think the most people will buy this app, because they absolutely want 
this app ;-)

But I have the same question... how I can ask the Google Play Server for an 
Order-Number that entered the user in a Pop-Up Window to check this Order 
is paid?
I've read a few days long mass of API documents, but its not working. Is 
there working complete sample code with PHP?


On Saturday, July 27, 2013 7:52:53 AM UTC+2, TreKing wrote:


 You don't really. Anyone that is determined enough to crack your app 
 eventually will. The question is how much time and effort do you want to 
 spend trying to put these checks and validations.

 I don't think you can do what you're asking, so your best option is to use 
 LVL as is.


 -
 TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago 
 transit tracking app for Android-powered devices
  

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-28 Thread Kristopher Micinski
Why don't you just learn how to defeat the crack tool. I do in fact know
what you're talking about, since I've written one of these crack tools. If
you write and obfuscate your app correctly, these tools won't work. Your
solution will be crackable too, so there's no sense in wasting your time:
your app will be cracked if it's popular enough, there are sort of ways to
prevent this (using am account system on the server, etc...) but at the end
of the day it's not at all easy for an amateur to make their app crack
proof.

Kris
On Jul 28, 2013 8:58 AM, AndroidYourself mon...@2aba.de wrote:

 I want to do the same... LVL makes no sense, because its to easy to skip
 this check.

 But checks are absolutely necessary, because after a few hours you are
 published a new app, the whole world is downloading it from apk sites. You
 have to implement an individually check that have to be cracked manually
 by a cracker, not by a easy to use Crack-Tool. This needs a few weeks/month
 to publishing this at APK sites :)

 And when the old App-Version is cracked... you will publishing a new
 version with a little bit modified parameters and new functions... and this
 needs again cracking time. Its not uncrackable, but it annoys the APK
 downloaders, because they have to wait again and again for a new crack. So
 I think the most people will buy this app, because they absolutely want
 this app ;-)

 But I have the same question... how I can ask the Google Play Server for
 an Order-Number that entered the user in a Pop-Up Window to check this
 Order is paid?
 I've read a few days long mass of API documents, but its not working. Is
 there working complete sample code with PHP?


 On Saturday, July 27, 2013 7:52:53 AM UTC+2, TreKing wrote:


 You don't really. Anyone that is determined enough to crack your app
 eventually will. The question is how much time and effort do you want to
 spend trying to put these checks and validations.

 I don't think you can do what you're asking, so your best option is to
 use LVL as is.

 --**--**
 --**---
 TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago
 transit tracking app for Android-powered devices

  --
 --
 You received this message because you are subscribed to the Google
 Groups Android Developers group.
 To post to this group, send email to android-developers@googlegroups.com
 To unsubscribe from this group, send email to
 android-developers+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/android-developers?hl=en
 ---
 You received this message because you are subscribed to the Google Groups
 Android Developers group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to android-developers+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.




-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-28 Thread Michael Leung
i think using your license service is the best. We built that kind of
service too.


On Mon, Jul 29, 2013 at 2:18 AM, Kristopher Micinski krismicin...@gmail.com
 wrote:

 Why don't you just learn how to defeat the crack tool. I do in fact know
 what you're talking about, since I've written one of these crack tools. If
 you write and obfuscate your app correctly, these tools won't work. Your
 solution will be crackable too, so there's no sense in wasting your time:
 your app will be cracked if it's popular enough, there are sort of ways to
 prevent this (using am account system on the server, etc...) but at the end
 of the day it's not at all easy for an amateur to make their app crack
 proof.

 Kris
 On Jul 28, 2013 8:58 AM, AndroidYourself mon...@2aba.de wrote:

 I want to do the same... LVL makes no sense, because its to easy to skip
 this check.

 But checks are absolutely necessary, because after a few hours you are
 published a new app, the whole world is downloading it from apk sites. You
 have to implement an individually check that have to be cracked manually
 by a cracker, not by a easy to use Crack-Tool. This needs a few weeks/month
 to publishing this at APK sites :)

 And when the old App-Version is cracked... you will publishing a new
 version with a little bit modified parameters and new functions... and this
 needs again cracking time. Its not uncrackable, but it annoys the APK
 downloaders, because they have to wait again and again for a new crack. So
 I think the most people will buy this app, because they absolutely want
 this app ;-)

 But I have the same question... how I can ask the Google Play Server for
 an Order-Number that entered the user in a Pop-Up Window to check this
 Order is paid?
 I've read a few days long mass of API documents, but its not working. Is
 there working complete sample code with PHP?


 On Saturday, July 27, 2013 7:52:53 AM UTC+2, TreKing wrote:


 You don't really. Anyone that is determined enough to crack your app
 eventually will. The question is how much time and effort do you want to
 spend trying to put these checks and validations.

 I don't think you can do what you're asking, so your best option is to
 use LVL as is.

 --**--**
 --**---
 TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago
 transit tracking app for Android-powered devices

  --
 --
 You received this message because you are subscribed to the Google
 Groups Android Developers group.
 To post to this group, send email to android-developers@googlegroups.com
 To unsubscribe from this group, send email to
 android-developers+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/android-developers?hl=en
 ---
 You received this message because you are subscribed to the Google Groups
 Android Developers group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to android-developers+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.



  --
 --
 You received this message because you are subscribed to the Google
 Groups Android Developers group.
 To post to this group, send email to android-developers@googlegroups.com
 To unsubscribe from this group, send email to
 android-developers+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/android-developers?hl=en
 ---
 You received this message because you are subscribed to the Google Groups
 Android Developers group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to android-developers+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.






-- 
Regards,
Michael Leung
http://www.itblogs.info - My IT Blog
http://diary.skynovel.info - My Blog
http://www.michaelleung.info - My Homepage

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-28 Thread Nikolay Elenkov
On Mon, Jul 29, 2013 at 8:23 AM, Michael Leung michaelchi...@gmail.com wrote:
 i think using your license service is the best. We built that kind of
 service too.

An online service (Purchase Status API) is available for in-app
billing. IAB has its faults,
but is more flexible than paid apps, so you might consider using it.

http://developer.android.com/google/play/billing/gp-purchase-status-api.html

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-28 Thread gauri
Thanks to all.

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-26 Thread gauri
I want to block users who are using backed up copy of my app i.e. without 
purchasing from Google Play.
I found that it is possible to repackage apk by modifying it.
If repackaging is done in such a way that the license verification check is 
skipped then user of that app will be able to access all features in paid 
app without payment.
In such case, how do I block unauthorized users?

On Friday, July 26, 2013 1:10:50 AM UTC+5:30, TreKing wrote:


 On Thu, Jul 25, 2013 at 4:40 AM, gauri gauri...@gmail.com 
 javascript:wrote:

 But I want do verification from my server which will directly communicate 
 with Google Server.


 Why?


 -
 TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago 
 transit tracking app for Android-powered devices
  

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-26 Thread Kristopher Micinski
So the solution is to not use LVL?

...

That just sounds like a bad idea to me, since this is what LVL was
designed to do.

Kris

On Fri, Jul 26, 2013 at 9:29 AM, gauri gauri.v...@gmail.com wrote:
 I want to block users who are using backed up copy of my app i.e. without
 purchasing from Google Play.
 I found that it is possible to repackage apk by modifying it.
 If repackaging is done in such a way that the license verification check is
 skipped then user of that app will be able to access all features in paid
 app without payment.
 In such case, how do I block unauthorized users?

 On Friday, July 26, 2013 1:10:50 AM UTC+5:30, TreKing wrote:


 On Thu, Jul 25, 2013 at 4:40 AM, gauri gauri...@gmail.com wrote:

 But I want do verification from my server which will directly communicate
 with Google Server.


 Why?


 -
 TreKing - Chicago transit tracking app for Android-powered devices

 --
 --
 You received this message because you are subscribed to the Google
 Groups Android Developers group.
 To post to this group, send email to android-developers@googlegroups.com
 To unsubscribe from this group, send email to
 android-developers+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/android-developers?hl=en
 ---
 You received this message because you are subscribed to the Google Groups
 Android Developers group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to android-developers+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.



-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-26 Thread TreKing
On Fri, Jul 26, 2013 at 8:29 AM, gauri gauri.v...@gmail.com wrote:

 In such case, how do I block unauthorized users?


You don't really. Anyone that is determined enough to crack your app
eventually will. The question is how much time and effort do you want to
spend trying to put these checks and validations.

I don't think you can do what you're asking, so your best option is to use
LVL as is.

-
TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago
transit tracking app for Android-powered devices

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] How to communicate with Google Server for Android App License Verification?

2013-07-25 Thread TreKing
On Thu, Jul 25, 2013 at 4:40 AM, gauri gauri.v...@gmail.com wrote:

 But I want do verification from my server which will directly communicate
 with Google Server.


Why?

-
TreKing http://sites.google.com/site/rezmobileapps/treking - Chicago
transit tracking app for Android-powered devices

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.