Protecting in-app purchases from piracy through tweaks
summary
Analysis of 200+ apps finds paid features bypassed by easy-to-install tweaks (they’re just injected libraries), with examples ranging from YouTube Music and SoundCloud to Adobe, Evernote, Duolingo and Strava; a subset of 18 apps shows 199 methods to unlock content versus $1,800 in subscriptions, and the uploader claims 80% of active iPhones are jailbreakable. Effective defense combines environment integrity, application integrity and code integrity plus code obfuscation and runtime checks hardened against tweak patching.
AI-written summary · about
chapters (4)
related talks
15mFighting mobile apps piracy
32mAndroid iPhone Risks and Solutions
37mOutsmarting Hackers before your App gets pwn'ed
47mSecuring Android Applications
33mHacking and protection of Mobile Apps and backend APIs
36mTesting iOS Apps without Jailbreak in 2018
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
09mBypassing Jailbreak Detection