I recommend ignoring the timestamp (and retry count) if the last non-
retry response you've received was a "licensed" response. Yes it could
theoretically be taken advantage of, but it can really reduce the
number of false positives. I used to do this and the only false
positives are when people reset/switch roms/whatever and use a new
google account (so not really a false positive).

But in a recent update I accidentally did something to sometimes
require the timestamp (I have my own LVL-copy that doesn't require
Google Market that I use for direct purchases, and I made a change
there). Then it seems at the end of last month a handful of LG Optimus
phones changed the date incorrectly (???). Users on these devices were
locked out but if they set the date to the correct date then the
problem was resolved. (Naturally some users had the problem with other
apps too, not just mine). Weird. It was only a handful of users that
emailed me about it, but I was used to never getting actual false
positives, due to ignoring the time stamp before, that it was quite
surprising.

I've still had a few other reports from users on other devices so I do
plan on ignoring the timestamp again in my next update. The pirates
don't really attack LVL at that level anyway, they look for where the
allow/deny decisions are made and make their smali changes there.

-Kevin

On Jun 6, 6:19 am, Zsolt Vasvari <zvasv...@gmail.com> wrote:
> Recently, I've been getting a lot messages from users about how I am
> asking for the network to be enabled to verify the license using LVL.
> I throw up this message whenever I cannot contact the licensing
> server.  I haven't had any complaints until the last couple of weeks,
> so I investiagated the issue.  I am using the Google provided license
> validity stamp.  It seems like the timestamp Google is now returning
> only shows the license to be valid for no more then ONE HOUR.
>
> One hour is useless, I might as well just use the Strict licensing and
> validate the license every time I start the app.  I would have
> expected the license to be good for days.
>
> Has anyone else seen this happening?

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to