android - what is app LICENSE KEY for? -
i've start reading implementing in-app billing in android app , documentation says
protect google play public key
to keep public key safe malicious users , hackers, not embed in code literal string. instead, construct string @ runtime pieces or use bit manipulation (for example, xor other string) hide actual key. key not secret information, not want make easy hacker or malicious user replace public key key.
so how dangerous if else knows public key , can ?
what can done secret keys?
per report, android applications contained thousands of leaked secret authentication keys, in turn can used malicious users gain unauthorized access server resources through amazon web services , compromise user accounts on facebook.
reference:
https://www.quora.com/how-worried-should-android-users-be-about-the-secret-keys-found-in-google-play
Comments
Post a Comment