Jon,

I think we're going to have to agree to disagree.

As I see it you're not willing to factor in the difficulty level in 
cracking the system and implementing a generic method as a 
differentiating factor between the protection methods, whereas my 
viewpoint is based on the level of effort needed to break the 
AndAppStore licensing system being sufficiently high to ensure that it's 
not worth doing (part of the reason the source code for licensing checks 
is available from 
http://andappstore.com/AndroidPhoneApplications/licensing.jsp is so that 
developers can vary how it's included in their code and thus eliminate 
the possibility of attackers scanning for a constant class name or byte 
code pattern).

Thanks for putting the effort in to continue the conversation to this point.

Al.

Jon Colverson wrote:
> On Feb 28, 6:46 pm, Al Sutton <a...@funkyandroid.com> wrote:
>   
>> method), and, as far as I'm aware, there isn't a method circulating
>> which can be applied to any and every protected application to get a
>> protection free copy by following a simple set of instructions (if there
>> is I'd  welcome information on it so we can work on fixing the flaw it
>> uses).
>>     
>
> I'm not aware of one either, but I expect that a tool would emerge
> very quickly if the AndAppStore takes off when it starts being
> distributed with handsets and such. You could then tweak the system to
> stop the tool from working, but then the attacker would release a new
> version, and you'd be in an arms race.
>
> The reason why I say they're equivalent is that while the steps along
> the way may be different, the end result is the same: people who don't
> want to pay will get the apps for free. In my opinion adding extra
> hurdles just wastes the developers' time and provides a juicier
> intellectual challenge for those who are inclined to try to defeat the
> system.
>
> --
> Jon
>
> >
>   


-- 

* Written an Android App? - List it at http://andappstore.com/ *

======
Funky Android Limited is registered in England & Wales with the 
company number  6741909. The registered head office is Kemp House, 
152-160 City Road, London,  EC1V 2NX, UK. 

The views expressed in this email are those of the author and not 
necessarily those of Funky Android Limited, it's associates, or it's 
subsidiaries.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers-unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to