Hello Lee. Regardless of whether anyone purchases AAL, it has been a worthwhile investment for us. It took several days (almost a week) for crackers to decompile Screebl Pro and find a way to circumvent AAL. Typically it takes about 90 secs from the time that we publish to the market for the various warez sites to start tweeting the location of the download. I have a feeling that the open source market api is involved in that scenario for sure.
As you've said, AAL is not fail proof, but I continue to improve it, and my latest releases will make it even more challenging to reverse engineer. AAL is a big stumbling block, but a market API alone is not worthy of a Google anti-piracy solution. They will need to do the same as AAL but also go much further to guarantee that apks aren't modified (e.g., cracked). One way to to do this would be to have the platform calculate a hash of the installed apk and validate that against what was purchased on the market. This is going to require deep integration in the platform and the market to kick it in the arse for good. Loving the feedback! On May 7, 6:09 am, Lee <[email protected]> wrote: > As an aside, why don't google provide their own official API to allow > apps to check with the market whether they've been purchased or not ? > > Perhaps it's the 'any security which can be conceivably broken is > useless' line ? > > I would be happy with any protection mechanism which forced my apk to > be hacked in order to install it on a non-rooted phone, instead of the > current 'just copy it over, it'll work fine' situation. > I don't need 100% security. > > Lee > > -- > You received this message because you are subscribed to the Google > Groups "Android Developers" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group > athttp://groups.google.com/group/android-developers?hl=en -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
