[android-developers] Re: APK Signature Certificate Check

2011-11-10 Thread Zsolt Vasvari
If they unpack, modify, resign and redestribute your app, they are certainly capable of removing any checks you may put in there to verify any of those things you are mentioning. On Nov 11, 10:21 am, Sheado chad...@gmail.com wrote: Hi All, Sorry if this has already been answered, but searching

Re: [android-developers] Re: APK Signature Certificate Check

2011-11-10 Thread Chad Ata
Good point Zsolt, They seem to only be modifying the xml, so I'm hoping it's just a simple operation they're running. I'm not big on DRM, but this could potentially cost us money in this case (since a few thousand have already downloaded the tweaked version - and they could potentially hit our

[android-developers] Re: APK Signature Certificate Check

2011-11-10 Thread Zsolt Vasvari
Back in my C64 days, I remember that the best protections (DRM) involved very subtle behavior changes. The app simply crashing were the easy ones to remove. But when you had enemies not appearing, or the collision detection going wonky, those could be tough. What I am trying to say is, if you

[android-developers] Re: APK Signature Certificate Check

2011-11-10 Thread BCS
base64 encode is only a transmission tool to slip over ascii lines ~ we have some general approaches here which could lead to useful ideas but any implementation as strong as jarsigner and keytool has built in power that can be applied to the work at hand - though I would dismiss reports of LVL

[android-developers] Re: APK Signature Certificate Check

2011-11-10 Thread gjs
Backspaces in C64 file names were tricky to handle ;-) On Nov 11, 3:37 pm, Zsolt Vasvari zvasv...@gmail.com wrote: Back in my C64 days, I remember that the best protections (DRM) involved very subtle behavior changes.  The app simply crashing were the easy ones to remove.  But when you had