4 ms·
haven't read that article yet, but my point is that if Google is acting as a payment gateway, they should probably provide some means to verify purchases with t
by micampe 16y ago
haven't read that article yet, but my point is that if Google is acting as a payment gateway, they should probably provide some means to verify purchases with the server, not tell you to obfuscate your code to prevent people from reverse engineering the keys and algorithms.
- rst 16y agoThat's how their licensing verification stuff works. The problem is that someone could copy your app's code (the .APK file) and alter it to not communicate with the server, or ignore its response. There's nothing the licensing code or library can do once it the attacker has gone in and disabled it; their main suggested defense, for now, is obfuscating the code so that alteration is hard to do.