Do you obfuscate the URLs that contact the Android Market Licensing server? If you do not, the first thing that the crackers will do is replace your server URLs with bogus ones with a a hex editor, and your whole system is dead in the water. Please advise.
On Jul 27, 1:53 pm, Trevor Johns <trevorjo...@google.com> wrote: > It's implemented in the library. > > Cache contents are protected using a swappable Obfuscator class. We include > a standard obfuscator implementation that encrypts cache data using AES-256 > and an application-specific key, along with a copy of the device ID. This > prevents tampering with cache data, or replaying it across > applications/devices. Developers are also free to implement their own > Obfuscator if they so choose. (The cache itself contains timestamp data, so > there's no point in replaying the cache data for the same application on the > same device.) > > -- > Trevor Johns > Google Developer Programs, Androidhttp://developer.android.com > > > > On Tue, Jul 27, 2010 at 1:31 PM, Kostya Vasilyev <kmans...@gmail.com> wrote: > > Is caching implemented in the library or in the Market app? > > > I am concerned about potential abuse, such as replacing cache contents. > > > -- > > Kostya Vasilyev --http://kmansoft.wordpress.com > > > 28.07.2010 0:23 пользователь "Trevor Johns" <trevorjo...@google.com> > > написал: > > > Developers can chose whether to implement response caching or not. > > > Assuming caching is enabled, we require a network connection for the first > > license check, but then the user can go offline for a period of time before > > requiring another license check. > > > -- > > Trevor Johns > > Google Developer Programs, Android > >http://developer.android.com > > > On Tue, Jul 27, 2010 at 1:19 PM, Kaj Bjurman <kaj.bjur...@gmail.com> > > wrote: > > > > I saw that entry, ... > > > -- > > You received this message because you are subscribed to the Google > > Groups "Android Developers" g... > > > -- > > You received this message because you are subscribed to the Google > > Groups "Android Developers" group. > > To post to this group, send email to android-developers@googlegroups.com > > To unsubscribe from this group, send email to > > android-developers+unsubscr...@googlegroups.com<android-developers%2Bunsubs > > cr...@googlegroups.com> > > For more options, visit this group at > >http://groups.google.com/group/android-developers?hl=en -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
