Monday, November 3, 2008

Being Even More Subversive

In my previous installment I mentioned being subversive in the behaviour you take toward the kids that pirate your software. This goes double for your code too.

How so?

Well, it would be sufficient for an automated cracking script to search for strings in your application bundle that matched 'SignerIdentity' and alert the cracker. An apt cracker would use this to find any code references to this string and investigate its purpose. It would not be a challenge for him to alter your code so that it didn't function correctly but allowed your application to continue without pause.

What now?

Instead of using 'SignerIdentity' in its entirety, you have a few options:
  1. Iterate over all keys in infoDictionary and check them against the length of SignerIdentity
  2. You know the number of keys in Info.plist so act on that
  3. Iterate over all values in infoDictionary and check the values
Ad nauseam.

You can combine this with other strategies like performing your IPA crack check every 3 executions, only once, or at random. It's up to you and the scheme for detection is limited only by your imagination.

There are over 5000 paid applications ripe for the cracking on the App Store. Between homework and masturbating, there is no way for every single pirated application to be checked for IPA crack checks.

Now that we have the basic strategy in place, we've laid the foundation for some very impressive and interesting applications. This will make for some fun times on the App Store.

Please, if you're interested in what I write, please post a comment and tell your friends about me. I crave the attention.

10 comments:

Anonymous said...

How about we talk about some techniques other than SignedIdentity? :)

iPhoneCrackDetector said...

I will. In due time.

Anonymous said...

Is this method [still] viable? I have read that the SignedIdentity is only needed for installation, which seems to suggest that the original plist could be reinstated and the app would never know the difference.

Looking forward to future entries!

iPhoneCrackDetector said...

It all depends on the due diligence of the copier.

guangming said...

cell phonesCheap cell phonesDiscount Handbags On Sale-Beautycasa Online : - Hermes Handbags Miu Miu Handbags Fendi Handbags Prada Handbags Balenciaga Handbags Chloe Handbags Marc Jacobs Handbags Jimmy Choo Handbags Mulberry Luxury Handbags Christian Dior Handbags Hermes Wallet Gucci Handbags FREE GUCCI WALLET Difference the amount Designer Handbags Chanel Handbags Burberry Handbags Louis Vuitton Wallet ecommerce, open source, shop, online shopping

gmmmocom said...

Are you fighting in Final Fantasy XIV for FFXIV Gil or Final Fantasy XIV Gil?
Can you suffer yourself being called newbie in FFXIV Gil game?
Are you seeking unofficial Buy FFXIV Gil cheats or Final Fantasy XIV guides in order to make Final Fantasy XIV Gil faster?
Can you get millions of Cheap FFXIV Gil in one day?
Even if you know how to farm Buy Final Fantasy XIV Gil you have to prepare enough Final Fantasy XIV Power Leveling first to buy height class Final Fantasy XIV Items, to upgrade your Final Fantasy XIV characters.
FF14 Gil Then why not Buy FFXIV Gil from us?
In Final Fantasy XIV it's the fastest way FF14 Gil,for you to get rich. We are online 24 hours a day ready and 7 days one week to power up your FFXIV Gil accounts with FFXIV Gil. Here is the best place for the Final Fantasy XIV Online players to buy your Final Fantasy XIV Gil.
We are the professional website in FFXIV GIL sale.FFXIV GIL here,We are professional FFXIV Power Leveling online. We update price every single day to make sure we are the lowest in the market.(we don't compare price with scam sites which uses unbelievable low price to deceive.)
Our slogan:Cheapest price, Fastest delivery, Best service! Final Fantasy Xiv Gil
In the 2 years we are in this field , FFXIV Gilbuilt many business with tens of thousands of customers. They are very satisfied with our service.So if you want to get a log of Cheap FFXIV Gil ,no doubt ,come to our website to buy. Our customer service is ready for you on line now!(WWW,GM MMO,COM Sell FFXIV Gil)

dfadf said...

Microsoft Office
Office 2010
Microsoft Office 2010
Office 2010 key
Office 2010 download
Office 2010 Professional
Microsoft outlook
Outlook 2010
Windows 7
Microsoft outlook 2010

CHEAPSOCCERUNIFORM said...

I am so excited about this page. Thanks for the wonderful post .I bookmarked this site for further reading.
Now it will be very cold in winter, in order to keep warm yourself, moncler company has provide jackets for you, so it is better to own moncler jackets yourselif as soon as possible. Eeveryone love fashion clothing, polo ralph lauren is very popular all over world, that is my dream to get ralph lauren.We know Ray Ban by America soldier, all of them wear ray ban sunglasses when they walk on the road, it is fashionable for you. Most of people like to wear jeans, it is very modern when wearing true religion jeans in the street.

Cheapsocceruniforms said...

There are many brand from France, also including herve leger, and most of womens stars love wearing herve leger dress when they join in some important party. Now polo ralph lauren is very popular with youthful people, everyone want to get ralph lauren polo shirts, there are lots of online shop which are ralph lauren polo outlet, true religion jeans outlet, it will be convenient for us.

hibeyond said...

black boots

Chocolate

boots


sand boots

Chestnut

boots


gray boots

pink boots

grey boots


pink boots on

sale



Black

Ugg Boots


Chestnut Ugg Boots

Chocolate Ugg Boots

Grey

Ugg Boots


Ugg Boots

On Sale