Thanks for your thoughts Brill.  However, your solution is not very
secure because it can be circumvented by anyone with root access.   An
attacker would just copy the paid app from a rooted phone and
distribute it at will.  At least if LVL is incorporated correctly into
the code then the app must be cracked to disable the licensing check.


On Jan 6, 8:58 pm, Brill Pappin <br...@pappin.ca> wrote:
> You miss my point.  I'm saying don't depend on LVL for this feature.  
>
> Sent from my Acer Android device
>
> Zsolt Vasvari <zvasv...@gmail.com> wrote:
> >You absolutely want to modify the LVL classes.  Not modifing your
> >class is an invitation for automated cracking of your app.
>
> >http://android-developers.blogspot.com/2010/09/securing-android-lvl-a...
>
> >On Jan 6, 2:27 pm, Brill Pappin <br...@pappin.ca> wrote:
> >> I like that concept... it would certainly save me some hassle :)
>
> >> But, you maybe don't need to modify the LVL classes.
>
> >> All you really need is some way to check that they paid for something.
> >> Why not set up a content provider that contains the license details
> >> (you could actually do multiple levels of license then) and simply
> >> fail gracefully if the provider was not present?
>
> >> Another way would be to have the paid app write the license key to a
> >> shared preferences location when run.
>
> >> I agree that LVL should be able to do all this, but I think Google is
> >> simply not interested in improving LVL to work *with* the market.
>
> >> I'd be interested in developing a solution as well.
> >> What I was looking for was paid levels of license (all LVL would
> >> really need to do is return a licensing level instead of a boolean).
>
> >> - Brill Pappin
>
> >> On Jan 5, 7:27 pm, andfan22 <andfa...@gmail.com> wrote:
>
> >> > Hi all
>
> >> > Just wondering if I can use LVL to check that the user is licensed to
> >> > use a DIFFERENT app from the current one -- ie. one with a different
> >> > package name.
>
> >> > Why would I want to do this?  I'm developing an app which I'm
> >> > considering publishing using a free + pro license model.  The main app
> >> > would be a free, ad supported app.  To turn off ads the user would
> >> > purchase a pro license key from the market (published as a paid app
> >> > containing no functionality).  The user would continune to use the app
> >> > that was downloaded for free, which checks if the paid app is
> >> > installed, and if so it disables ads.   I prefer this model to a fully
> >> > featured paid app model, as it eliminates the need to migrate data
> >> > from the free version to the paid when the user upgrades.
>
> >> > Under this model I would like the free app to check if the paid app is
> >> > installed, and if so the free app would then use LVL to check if the
> >> > user has purchased the paid app via the market.  Will it be possible
> >> > for the free app to pass the package name of the paid app to LVL, and
> >> > to get back a result confirming whether the paid app has been
> >> > purchased or not?
>
> >> > Looking at the LVL source code I suspect I can do this by modifying
> >> > the constructor of LicenseChecker to set mPAckageName to a supplied
> >> > argument rather than setting it to mContext.getPackageName().
>
> >> > Are there any gotcha's I may be missing?
>
> >> > Thanks ...- Hide quoted text -
>
> >> - Show quoted text -
>
> >--
> >You received this message because you are subscribed to the Google
> >Groups "Android Developers" group.
> >To post to this group, send email to android-developers@googlegroups.com
> >To unsubscribe from this group, send email to
> >android-developers+unsubscr...@googlegroups.com
> >For more options, visit this group at
> >http://groups.google.com/group/android-developers?hl=en

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to