App bundle protection - signed bundle *may* be modified [closed] - iphone

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
Maybe you all know that .app bundle is easily accessible for reading via such tools like iExplorer (surpirise for those who thought only iTunes File Sharing allows to access data on iPhone). Maybe you've also read iOS Programming Guide, section entitled 'Installing App-Specific Data Files as First Launch'. Related paragraph estates:
"... Because iOs apps are code signed, modifying files inside your bundle invalidates your app's signature and prevents your app from launching in the future. ..."
That's obivously false, at least to some point.
I've tried to modify several files within SEVERAL free third-party apps purchased from AppStore and sucessfully modified content of several files. Voala, app launched without any problem. The thing is, that I've used iExplorer mentioned above, no hacking, cracking, jail-breaking. Just a development-enabled device, and published, reviewed apps.
What should I do?

The code signing is only verified when the app is installed on the device through iTunes, Xcode, the iPhone Configuration Utility, etc. So the wording of the programming guide is a little misleading.
This probably comes down to performance - there are some very large apps out there and having to verify the checksum of all the application's resources every time it is launched would take too long.
And the point of code signing is not really to prevent tampering, but to detect tampering. Or more correctly, it's simply a way to state that you built this specific binary with these specific resources. The attacker could completely remove the code signing if they wanted.
So there will always be ways to modify an application's resources or even code through debugging, etc. You can't really protect against this.

Related

Universal App Rejected and Some IAP get rejected again and again [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
I have an app that buttons and images and icons set for only representational purposes. My friend is making better ones and so my app is not finished yet but apple said that I have 30 days to submit a binary or my app will be deleted from the iTunes connect. So i uploaded my binary and here is the rejection message.
10.6: Apple and our customers place a high value on simple, refined, creative, well thought through interfaces. They take more work but are worth it. Apple sets a high bar. If your user interface is complex or less than very good it may be rejected
10.6
We found the following issues with the user interface of your app:
It would be appropriate to add additional functionality to the application in order to enhance the user’s experience. For ideas on how to improve
the user’s experience, you may wish to review the User Experience
Guidelines section of the iOS Human Interface Guidelines.
It would also be appropriate to differentiate, either in the Application Description or in the app, which purchases are consumable and which ones are non-consumable.
For technical assistance, you may wish to consult with Apple Developer Technical Support. Depending on your questions, be sure to include any crash logs, screenshots, or steps to reproduce the issues you’ve encountered.
These examples identify types of issues discovered in your app but may not represent all such issues. It would be appropriate to thoroughly evaluate your app to address these types of issues.
When I add icons, images and button images after my friend finishes them, my app would be approved right ? Is this the message that I should get from 10.6 ? And what does this message mean with
It would also be appropriate to differentiate, either in the Application Description or in the app, which purchases are consumable and which ones are non-consumable.
I have one non-consumable IAP and that is pro version IAP. All the others are consumable. I think it is clear that pro version is non-consumable because it has a restore button.
Last thing I want to ask is, since I uploaded a binary my app won't get deleted from iTunes connect right? My app is rejected but I uploaded a binary in time, anyone knows about this ?
Apple will not review incomplete or in test apps as the app store is not the place for testing. Really you should not create an app on iTunes connect until you are ready to submit to the app store.
I would suggest that most likely the app will not get deleted as you have submitted a binary but don't count on it especially as the version you submitted is incomplete and Apple may decide that therefore you still haven't submitted a proper app and delete it all the same
Even if you contact Apple they will not tell you if the app will be approved when the buttons are added. It is their policy to only review what you put in front of them and not to speculate on what will get through.
There are no guarantees that your app will get through the app store when the buttons are added, but you stand a much better chance as your app is complete. It will also depend on if you have followed all of Apple's rules and are not trying to do anything illegal.
I will be tempted to put your non consumable item in a separate section to clearly mark it and make it easier to get the app approved.

Publish app to App Store using someone else's Mac? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
I have built an app using HTML5 / JavaScript, and it works well as a mobile web app, bu tI would like to publish it to the Apple App Store.
I don't own a Macbook, so I'll be relying on using a friend's Macbook. Will I encounter any unforeseen problems with setting up Xcode and iTunes connect etc. when the Macbook I'm using is registered with someone else?
Not having done this before, I'd prefer to get it right the first time, so I'm just wondering if anyone else has found any 'gotchas' while trying to do this?
Thanks for the advice.
You will need to request developer keys from your friend's Mac. This means his Mac will have the private keys in his keychain. For your own safety, you'll want to copy those private keys somewhere safe (your own flash drive, Dropbox, etc) and then delete them from your friend's Mac.
Additionally, every time you want to update your App(s) you'll need to restore these keys.
This is not counting the time you'll spend downloading and installing the developer tools if your friend doesn't already have them installed on his Mac.
Trust me, key management is not something any iOS developer enjoys and by attempting this on an "untrusted" system you're potentially opening yourself up to additional effort and/or security risks.
I'd highly recommend you look at purchasing your own Mac.
However, if that is not an optional at all, at bare minimum insist that your friend setup a new account for you. Use this account for deploying your app. After you're done, backup your entire keychain (this way you won't accidentally miss anything important), and then have your friend delete your profile. This is the safest way to do this on someone else's Mac.
See http://support.apple.com/kb/PH4077 for information about backing up your keychain on OS X.
This is certainly possible. I recommend creating a new user account on your friend's Mac. This will let you have your own environment separate from your friend's. All certificates and private keys will be in your personal login keychain (any provisioning profiles will be system wide, but unusable without the keys and certificates).
Instead of placing the keys and certificates on your login keychain I recommend creating another keychain and putting that stuff there. Protect that keychain with a different password.

Iphone App Release with possible Patent or Licence issues [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Me and My friend had an app idea. I have been working on the app for a while, now it is finished and we want to release it on App Store. I have never published/released an app before.
Few weeks ago another app has been released by an enterprise company and their app is too similar to our app. The way their app works is almost identical to our app. Also incredible similarities on interface.
My question is if I try to release my app, what is the possibility of rejection of the app by App store with the reason of Possible duplicate of another app. Or rejection with any reason because two apps are almost identical.
Has anyone experience that kind of situation before?
Enterprise company's App has been stated Patent Pending on company website.
First and foremost, ask a lawyer if you want to be sure.
Secondly, you can submit your app and find out what Apple says. There are thousands of duplicate apps on the App store. If the app looks eerily similar to your app, just make sure whoever designed your app didn't "borrow" from their app, or work on the project, etc.
Also, patent pending means very little in the real world, as is. It just means the company applied for a patent (stating that and not having applied is illegal). When, and only when a patent is approved, can legal action be taken. And it also can't be enforced retroactively.
Lastly, be prepared. If it's a big enterprise that put the app out and they think you're copying, etc, just get your ducks in a row. Find the date you registered you app name, created documentation, all that fun stuff. And good luck.
This probably isn't the legal advice you are looking for, but you should just submit your app even if it bares a striking resemblance to another app. If people didn't release products that are similar to another where would be no Facebook and no Android. Become successful with your product, then fight any legal battles that will follow because others are jealous of your success.
If Apple rejects it, then address the reason why it was rejected and try again.

Will my app stay in the app store after I stopped paying developer fee to Apple? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about programming within the scope defined in the help center.
Closed 5 years ago.
Improve this question
I have found another question
where the marked answer, from June 2010 is "Your apps will be removed" however, another person answers that apps will not be removed, and claims as recent as February this year to be sure of this.
I think Apple support pages are very vague on this matter.
Is there anyone out there who knows for sure what happens?
(I hope this behavior is okay (re-asking the same question in a new post) - ideally a bump of that thread would have been my choose, but I don't know how to do that, or if it is possible on Stack Overflow. I don't have enough reputation to comment or edit the other question.)
No.
See http://developer.apple.com/support/ios/program-renewals.html:
If I don't renew my membership will my
application(s) still function for
those customers who have already
installed my application(s) from the
App Store?
Yes. Although you will lose App Store
distribution, your application(s) will
still function for customers who have
installed your application(s) from the
App Store on their device(s).
It makes commercial good sense for Apple to stop featuring your app in their store when you're not paying the yearly fee, since the infrastructure used to host your app would still be an ongoing cost for them.
Also, if Apple didn't purge non-paying customer's apps, over time the app store would become a huge aggregation of unmaintained apps which would dwarf newer higher quality apps. Remember that Apple often releases updates to iOS which requires updates and tweaks to existing apps -- for them to keep stale unmaintained apps around just doesn't make any sense at all.
Today I got this reply from Apple Developer Support:
As for your inquiry regarding to program renewal, please know that we advise you that your application will be removed from the App Store upon your expiration date unless you renew. If you'd like to continue to distribute your application on the App Store beyond your current expiration date, you'll need to renew into the Program before your current Program expires.
i can confirm that your app will be removed from the apple app store if you do not renew you apple developer program account. it just happened me, what a bummer. Hope this helps clarify this question

Is there any way to put an .exe application on an iPhone or blackberry [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I am working for Bentley leathers and I we have a password calculator (.exe) and I am wondering if I could put it on my iPhone or the compagny BlackBerry so that way it would be easier then to have a ton of paper with me.
No since the operating systems are not windows, why don't you create a password protected website with the same functionality so that you can access that from any device with a browser
Assuming you mean a Windows .exe, no you can't, the iPhone and Blackberry apps run off their own operating systems.
I think yes on the iPhone, but it requires it to be jailbroken.
There used to be a program called iDos of Dosbox (i thing Dosbox) on the app store, It was removed because you could upload, download and run exe files directly from the app (to get the exe's you used that itunes file sharing thing used in those flash drive apps).
They released it as Idos for about a day of 2 but than got deleted (i have no idea why im talking about idos).
Final Answer...
in the new idos (again deleted), they got rid of the ability to run exe's, but if you got the first version of it called "DOSBOX" on cydia, you could probally run some simple exe's on your iPhone (you could also use installous or use app sync to get a cracked .ipa file of Dosbox.
NOTE: I have not tested this! all i know is that when i saw the newer version on dosbox (Idos) on the top 25 list in the app store, i got it. I google searched on how to get more games for it and all these sites had all this "RETURN OD DOSBOX!!!" stuff.
I then read you could us exe's on the original.
Get Portable .NET from http://ininjas.com/repo/
It lets you run Windows .NET exe files from within mobileterminal. To run:
clrwrap program.exe
To compile C# files:
cscc -o output.exe code.cs
Original post (by me):
http://ininjas.com/forum/index.php?topic=84.0
I suppose that password calculator is a software to generate session passwords for the intranet/vpn/whatever.
You can't launch it on Blackberry or on iPhone but your company can order development of this tool for someone and after that distribute it inside the company. I know at least one company who already did it for iPhone. You can order this development. For sure a lot of people will be glad to do that (bu you should go to the Jobs section with this offers). But developer will need a specification with description of password generation.