Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Android: app licensing, copy protection

I have an apk file, that is non-free

My questions is the following:

1, If Copy Protection is set to "true" on the market, the users can copy my apk file from the device or not? (rooted/non rooted) copy apk from device

2, If they can: what is the best way to make a REAL copy protection?

Thanks, Leslie

like image 884
lacas Avatar asked Nov 15 '11 21:11

lacas


People also ask

Can I have 2 copies of an app?

No worries, there's a feature on some Android phones that lets you run multiple copies of an app. This way, you can create a second copy of your favorite app, add your secondary account to it, and use that as if it's the original app you have on your phone.

How do I stop APK tampering?

Use checksums, digital signatures and other validation mechanisms to help detect file tampering. When an attacker attempts to manipulate the application, the correct checksum would not be preserved and this could detect and prevent illegitimate execution.

What is license verification app?

How does the license verification library work? It manages a connection between your app and the Android Market (now Google Play), and performs a license check with the server to see if the user has a valid license for your app (i.e. it was purchased legitimately through the market).


1 Answers

1.
Yes they can, in rooted phones: http://theandroidsite.com/2009/11/22/how-to-backup-protected-and-paid-android-applications-for-root-users/

APKs are probably stored in /data/app: Does Android keep the .apk files? if so where?
Access at least via Java code or adb shell terminal from PC.

2.
yorkw already suggested using LVL.
I'm afraid you cannot make 100% bullet-proof copy-protection and thus shouldn't put your energy into that:

  • Any user with a rooted phone can copy your APK and study it.
  • With tools like dex2jar and jd-gui one can see all source code in your APKs.
  • Is there a way to get the source code from an APK file?
  • Most of the identifiers/names in the decompiled source code are scrambled (a,b,c...) but any solid programmer can figure out what your app does.
  • Any dishonest party can copy-paste code from jd-gui to an Eclipse project, build, upload into one's Google Account, and put a price tag... smaller than yours.

My advice is to concentrate on building so good apps that no one can keep up with the pace of your innovation and development.

like image 135
Jarno Argillander Avatar answered Oct 10 '22 00:10

Jarno Argillander