We've all heard that cracked apps are bad. Bad for the developers and bad for the end users. I've recently experienced this with an app I've been working on with a friend. It's his wallpaper app that I built and update while he handles making the walls. It's a paid app on the Play Store, btw.
This morning I get a message and screen shots from him of his app that's been uploaded to one of those sites that host cracked apps. Needless to say he wasn't happy and he's pursuing it now. This site also had their own Android app so I downloaded it to my computer and decompiled it to view the code and this is what I found.
As you can see in the picture the almost endless list of permissions. If that's not enough to make you cringe, then look at the red box at the bottom where it say's android:debuggable="true" . Why is this so important? Simply put ...
Besides stealing, you can compromise yourself just by installing apps like these. That's why we've always suggested staying away from these sites. But in the end it's your call. Trying to download an app that costs a dollar might actually cost you a lot more
This morning I get a message and screen shots from him of his app that's been uploaded to one of those sites that host cracked apps. Needless to say he wasn't happy and he's pursuing it now. This site also had their own Android app so I downloaded it to my computer and decompiled it to view the code and this is what I found.
As you can see in the picture the almost endless list of permissions. If that's not enough to make you cringe, then look at the red box at the bottom where it say's android:debuggable="true" . Why is this so important? Simply put ...
SourceImportant: Ensure that you disable debugging for your app if using WebView to display paid for content or if using JavaScript interfaces, since debugging allows users to inject scripts and extract content using Chrome DevTools. To disable debugging, use theWebView.setWebContentsDebuggingEnabled() method
Besides stealing, you can compromise yourself just by installing apps like these. That's why we've always suggested staying away from these sites. But in the end it's your call. Trying to download an app that costs a dollar might actually cost you a lot more