Class.forName is just as easy to identify as getPackageManager.getPackageInfo...
IIRC, the script I was referring to earlier could handle reflection... -- K 12 апреля 2012 г. 20:54 пользователь Latimerius <[email protected]>написал: > 2012/4/12 Kostya Vasilyev <[email protected]>: > > This is one of those things that can be easily circumvented by a script. > > > > getPackageManager and checkSignature are easy to identify, and making the > > latter return SIGNATURE_MATCH should be really easy. > > Do you know by any chance how much protection it would give you if you > called them via reflection? > > I know this is something widely recommended and it makes sense, too, > but not really being a Java coder yet (my background is in C/C++ > mostly), I can't evaluate just how much more difficult it is to find a > call performed via reflection in Java byte code. > > -- > You received this message because you are subscribed to the Google > Groups "Android Developers" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/android-developers?hl=en > -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
