[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-04 Thread Bob Kerns
Thanks! I look forward to poking around, looking at how it does register allocation, etc. For Java byte codes, I use this decompiler, which produces source code which is usually compilable: http://java.decompiler.free.fr/ It even integrates nicely into Eclipse. In my experience, it usually even

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread Hekki
Could you clarify what you are trying to achieve ? What are you trying to protect and from whom ? Yahel -- You received this message because you are subscribed to the Google Groups Android Developers group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread Al Sutton
Use an secured intermediary. (i.e. Your app - App on your server - End point). It takes up more resources but it ensures that nobody who has your app can get access to the details, and also allows you to update the login details without the need to force an app update on all your users. Al. On

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread Anna PS
Thank you all for the answers. I was hoping to upload videos to Youtube via a shared account (so I didn't have to ask the users for their own login details on the client-side - I can't just use ACTION_SEND because I need to supply developer tags etc). It's clearly not a good idea to put the login

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread Bob Kerns
Re: shared library in C: Not hard at all. Re: packet sniffers and man-in-the-middle -- not if you use the HTTPS protocol properly. That's why it exists. On the other hand, with physical access to the device, you could replace the HTTPS libraries and get the same result. Re: JDASM -- that works

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread fadden
On Mar 3, 6:09 am, Bob Kerns r...@acm.org wrote: Re: JDASM -- that works on standard Java byte codes -- which aren't present on the device. Still... I don't know of one that reads Dalvik's byte codes, but I don't know of any reason it would be any harder to write. Try Smali:

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-03 Thread Al Sutton
As a side note I thought I'd check you're aware that if you're allowing others to upload to your youtube account you will be responsible for what they upload, so if they upload offensive, copyrighted, or other material which breaches youtubes TCs you'll bear the brunt of any action taken by

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-02 Thread Menion
Hi, can you imagine how hard is then to decompile shared library written in C? Or is this even possible? Thanks On Mar 2, 9:17 pm, Greg Donald gdon...@gmail.com wrote: On Tue, Mar 2, 2010 at 12:23 PM, Anna PS annapowellsm...@googlemail.com wrote: So I would like to store a username and

[android-developers] Re: Security question: can Android source be decompiled and read?

2010-03-02 Thread Dan S
On Mar 3, 6:14 am, Menion menion.as...@gmail.com wrote: Hi,   can you imagine how hard is then to decompile shared library written in C? Or is this even possible? Thanks On Mar 2, 9:17 pm, Greg Donald gdon...@gmail.com wrote: On Tue, Mar 2, 2010 at 12:23 PM, Anna PS