2012/4/12 Kostya Vasilyev <[email protected]>:
> This is one of those things that can be easily circumvented by a script.
>
> getPackageManager and checkSignature are easy to identify, and making the
> latter return SIGNATURE_MATCH should be really easy.

Do you know by any chance how much protection it would give you if you
called them via reflection?

I know this is something widely recommended and it makes sense, too,
but not really being a Java coder yet (my background is in C/C++
mostly), I can't evaluate just how much more difficult it is to find a
call performed via reflection in Java byte code.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to