[android-developers] Obfuscating code

2013-03-01 Thread dashman
So I'm trying to obfuscate my code

I'm using reflection to get the package name.

i also plan to use proguard.

i understand variables xxx and yyy will be abfuscated by proguard.


android.content.pm.PackageManager xxx= 
(android.content.pm.PackageManager)yyy.invoke( context );

but if the code is decompiled, will the decompiler be able to assign xxx to
a PackageManager variable.

also

packageInfo.signatures;

i understand packageInfo will be modified by proguard - what about 
signatures property.

if nothing is done about that - the user could just search for that keyword.

Help appreciated - I think this is an important issue for Android 
developers.




-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] Obfuscating code

2013-03-01 Thread Mark Murphy
On Fri, Mar 1, 2013 at 10:22 AM, dashman erjdri...@gmail.com wrote:
 but if the code is decompiled, will the decompiler be able to assign xxx to
 a PackageManager variable.

Yes, the person reading the decompiled code will see that what you
refer to as xxx is a PackageManager. The name xxx is obscured, but not
its type.

 packageInfo.signatures;

 i understand packageInfo will be modified by proguard - what about
 signatures property.

Since that class definition does not exist in your project, ProGuard
cannot change it.

 if nothing is done about that - the user could just search for that keyword.

Correct.

-- 
Mark Murphy (a Commons Guy)
http://commonsware.com | http://github.com/commonsguy
http://commonsware.com/blog | http://twitter.com/commonsguy

_The Busy Coder's Guide to Android Development_ Version 4.6 Available!

-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [android-developers] Obfuscating code

2013-03-01 Thread dashman

Mark,

I think you should write a toolkit to protect Android apps.

Looks like it has to be done in native code - an app along with a how-to 
documentation


-- 
-- 
You received this message because you are subscribed to the Google
Groups Android Developers group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
Android Developers group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-developers+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.