And even if you skip the "request refund" step, we'll see a large number of
license checks for a single account in our logs.

So, not only can we disable that account, but we'll also know who was
responsible. :P

-- 
Trevor Johns
Google Developer Programs, Android
http://developer.android.com

On Tue, Aug 3, 2010 at 3:43 AM, Mark Carter <mjc1...@googlemail.com> wrote:

> As soon as you request a refund then the license server will return
> NOT_LICENSED for that Google account.
>
>
> On 3 August 2010 12:37, andreas.walt...@googlemail.com <
> andreas.walt...@googlemail.com> wrote:
>
>> On Jul 31, 11:21 pm, keyeslabs <keyes...@gmail.com> wrote:
>> > ... someone to crack the
>> > app.  The process looks something like this:  decompile the apk using
>> > a freely available open source tool, find the code that invokes the
>> > licensing check, skip it, recompile and repackage the apk.
>>
>> Isn't there is a much simpler way to circumvent the whole thing due to
>> a security leak in the LVL process? (Please tell me I'm wrong!):
>>
>> 1) create a new google account, e. g. my.wa...@googlemail.com
>> 2) switch your Android phone to this account
>> 3) Buy app, copy apk, request refund
>> 4) Upload apk to warez server
>> 5) Sell google account and password to interested downloaders. (e. g.
>> at a 50% discount compared to the original market price).
>>
>> The reason for this is that the license check is google-account-based,
>> not device-based. Any device being linked to the google account the
>> app has been purchased with will run the app. The licensing mechansim
>> will change nothing in this behaviour.
>>
>> Andreas
>>
>> --
>> You received this message because you are subscribed to the Google
>> Groups "Android Developers" group.
>> To post to this group, send email to android-developers@googlegroups.com
>> To unsubscribe from this group, send email to
>> android-developers+unsubscr...@googlegroups.com<android-developers%2bunsubscr...@googlegroups.com>
>> For more options, visit this group at
>> http://groups.google.com/group/android-developers?hl=en
>>
>
>  --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to android-developers@googlegroups.com
> To unsubscribe from this group, send email to
> android-developers+unsubscr...@googlegroups.com<android-developers%2bunsubscr...@googlegroups.com>
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
>

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to