Advertise Mobile SDKs Books Events Forum News Social Networking Support Us
Follow @iphonedevsdk on Twitter

Mockup & CodeGen, iPhone & iPad
($9.99)

Make your own iPhone apps
and run them live!
(free)

Manu
($0.99)

Want your application or service advertised on iPhone Dev SDK?

Go Back   iPhone Dev SDK Forum > Business Forums > Business, Legal, & App Store

Reply
 
LinkBack Thread Tools Display Modes
Old 03-21-2009, 12:20 AM   #126 (permalink)
Registered Member
 
Join Date: Dec 2008
Location: In Your Pocket
Posts: 48
Default

If you don't want to risk flagging people as crackers and show an alert for jailbroken devices just make your app rely on an external data source that changes.

For example call a specific data source: i.e. version1.0.2.php then during the next update call version1.0.3.php... most of the cracked apps are done with stupid crackulous which doesnt even require a brain... so this is a very good method to use.

I was worried about false positives, so this is the method I utilize most often.

I just display an "please upgrade or unusable" message for the older version.. that way legitimate users simply upgrade and they can continue to use the app, while others.. the downloaders of the cracked version see a note that says oops sorry.. you didn't buy this.. get a job and then buy it
root is offline   Reply With Quote
Old 03-21-2009, 04:53 PM   #127 (permalink)
Registered Member
 
Join Date: May 2008
Location: New York City, NY
Posts: 178
Default

Thanks, yeah I could do that, version 1 one my software is already out though, so that's just gonna hang around the net forever pretty much. Updated versions I can put the version check info in. I figure people who grabbed a copy illegally weren't going to pay anyway, my app isn't a must-have game etc.

Just some numbers - it looks like 2/3 of my users are using a pirated version right now. Aren't there more deserving targets for stealing these days?

_________________________________________________
TapArtist - www.tapartist.com
markww is offline   Reply With Quote
Old 03-25-2009, 12:13 AM   #128 (permalink)
Registered Member
 
Join Date: Sep 2008
Posts: 149
Default

Well, it has happened to me.

I just released CardSnap and I noticed that I had submissions from more phones than I had sales.

The problem is that this is a server-based app and the service has to scale to meet the demand. I can't afford to have cracked versions out there, so I am going to have to implement countermeasures.

If anyone has any measures they would rather not discuss publicly please IM me.

Thanks.
ThirtyOne is offline   Reply With Quote
Old 03-25-2009, 12:16 AM   #129 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 188
Default

The same countermeasures that can't be broken by these existing scripts already have been discussed in this thread.
jsonli is offline   Reply With Quote
Old 03-25-2009, 12:23 AM   #130 (permalink)
Registered Member
 
Join Date: Sep 2008
Posts: 149
Default

This is what I am thinking of doing. Looking for feedback.

With my next release, I will add the code to identify cracked apps.

If the app is cracked, I won't let them use the service - I will give them an error message saying I can't verify the app.

Then, a few days after the update is released I will have the server return an error message to any user that tries to use an old version saying I am sorry for the inconvenience, but all users must upgrade to the latest version to use the app.

I don't want to antagonize my users, but I can't think of anything else to do.

Thoughts?
ThirtyOne is offline   Reply With Quote
Old 03-25-2009, 12:25 AM   #131 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 188
Default

Quote:
Originally Posted by ThirtyOne View Post
This is what I am thinking of doing. Looking for feedback.

With my next release, I will add the code to identify cracked apps.

If the app is cracked, I won't let them use the service - I will give them an error message saying I can't verify the app.

Then, a few days after the update is released I will have the server return an error message to any user that tries to use an old version saying I am sorry for the inconvenience, but all users must upgrade to the latest version to use the app.

I don't want to antagonize my users, but I can't think of anything else to do.

Thoughts?
That is what you should do. Others on this forum would suggest you annoy them or even brick their phones - not very good ideas if your goal is to make business.
jsonli is offline   Reply With Quote
Old 03-25-2009, 06:06 AM   #132 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 27
Send a message via Skype™ to fbradyirl
Default

Here are my thoughts on iPhone piracy.
__________________
Send Free or very cheap international SMS from your iPhone or iPod Touch.

Jelly SMS

Last edited by fbradyirl; 03-25-2009 at 06:36 AM.
fbradyirl is offline   Reply With Quote
Old 04-03-2009, 01:12 AM   #133 (permalink)
New Member
 
Join Date: Mar 2009
Posts: 44
Default

I was curious about why itunes connect ask to check point for containing encryption or not when I upload my app.
williamapps is offline   Reply With Quote
Old 04-03-2009, 07:23 AM   #134 (permalink)
Registered Member
 
Join Date: Oct 2008
Posts: 486
Default

Quote:
Originally Posted by williamapps View Post
I was curious about why itunes connect ask to check point for containing encryption or not when I upload my app.
It's nothing to do with piracy... it's against US law to export high level encryption schemes because oh noes the bag guys might get ahold of it and encrypt their messages!

Basically if you do have strong encryption used in your app somewhere you need to file a bunch of paperwork about it all, which can add weeks or more to your review time. I've read about this type of thing with SSH apps for example...
__________________
ChronoSoft - Rogue Touch Available now in the App Store! ... Version 1.5 available now!
CommanderData is offline   Reply With Quote
Old 04-03-2009, 02:02 PM   #135 (permalink)
Pro. Game Developer
iPhone Dev SDK Supporter
 
Join Date: Feb 2009
Location: żLa Islas Hermosas?
Posts: 2,178
Default

I'm not sure how many other here follow Jeff LaMarche's blog, but he has a post up today on this topic. There is a code snippet posted for the SignerIdentity check, for those who haven't already figured out how to so this on their own. Also, be sure to read the comments section for some additional sage advice. Link: iPhone Development: Anti-Piracy Snippet
Kalimba is offline   Reply With Quote
Old 04-07-2009, 04:24 AM   #136 (permalink)
New Member
 
Join Date: Mar 2009
Posts: 44
Default

Quote:
Originally Posted by CommanderData View Post
It's nothing to do with piracy... it's against US law to export high level encryption schemes because oh noes the bag guys might get ahold of it and encrypt their messages!

Basically if you do have strong encryption used in your app somewhere you need to file a bunch of paperwork about it all, which can add weeks or more to your review time. I've read about this type of thing with SSH apps for example...
Make sense. Thx Commander
williamapps is offline   Reply With Quote
Old 04-07-2009, 05:12 AM   #137 (permalink)
Registered Member
 
Join Date: Jan 2009
Posts: 43
Default

LOL, I'm actually happy right now....we'll see how long this lasts.

My application showed up on some russian site the other day....actually it showed up on several sites, but they were placing it on rapidshare.

I emailed rapid share and they took down the links.( 3 total...2 down 1 to go)

ITs also on the main crack site but I'm working on that.

But they are complaining because the app starts up and then shuts down....hmmm, do they think maybe its because of the checks I placed in the app for jailbreak? Idiot cracker didnt even stop to think about running the application after he 'cracked' it.

My new version not only does the 4 different checks, but it also does the following:
Once it knows its been cracked, it phones home with the uid and the ip address.

It then goes to the app store and asks them to buy it.

Every level it does a random type of check as well....if the hackers start jumping over the checking code...they'll have to do it in 10+ places (exact number with held )


Yes, I got ticked of the crackers....an hour of my time will give them a headache of several house....plus.

I see no performance hit at all during gameplay.....worth it in my book.

I have ideas on other ways to detect that an applications was hack but so far I know of 4 ways.....I'm going to work on this.
__________________
www.seashellgames.com
Scott Stahurski is offline   Reply With Quote
Old 04-08-2009, 11:31 AM   #138 (permalink)
Registered Member
 
Join Date: Mar 2009
Posts: 62
Default

Couldn't Apple just do a simple check every so often with your itunes store user account and if there was an app on your iPhone that you didn't purchase from the store it deletes/disables it?
danny43 is offline   Reply With Quote
Old 04-12-2009, 02:45 AM   #139 (permalink)
Registered Member
 
Join Date: Feb 2009
Posts: 57
Default

After reading this thread you guys have me rattled.

If i just release my app on itunes, without any of this code it will be cracked and pirated no doubt? Is that what im reading?

No matter if it is a business related app.

If this is the case, whats the most basic preventive measures i could put in place, to just stop a machine from cracking it. I understand if a hacker wants it they will get it, but i dont want my app to just be left like a car with the keys in it.
Coaster is offline   Reply With Quote
Old 04-15-2009, 12:48 PM   #140 (permalink)
Registered Member
 
tawpie's Avatar
 
Join Date: Jul 2008
Posts: 347
Default

Quote:
Originally Posted by Scott Stahurski View Post
I emailed rapid share and they took down the links.( 3 total...2 down 1 to go)

ITs also on the main crack site but I'm working on that.
Scott:

Would you be willing to share the contact for emailing requesting a takedown? That would help everyone!

Thanks
__________________
"Hardware will break. Software comes broken" Unknown
Calc-12E <-- ditch your old calculator.
CPR•Choking <-- Review your training, just in case. (Free)
All of Nature NW <-- scrolls in x and y, with pinch zoom AND scrollable text to boot. It can be done ('taint easy tho)
tawpie is offline   Reply With Quote
Old 04-15-2009, 01:29 PM   #141 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 188
Default

Quote:
Originally Posted by Scott Stahurski View Post
LOL, I'm actually happy right now....we'll see how long this lasts.

My application showed up on some russian site the other day....actually it showed up on several sites, but they were placing it on rapidshare.

I emailed rapid share and they took down the links.( 3 total...2 down 1 to go)

ITs also on the main crack site but I'm working on that.

But they are complaining because the app starts up and then shuts down....hmmm, do they think maybe its because of the checks I placed in the app for jailbreak? Idiot cracker didnt even stop to think about running the application after he 'cracked' it.

My new version not only does the 4 different checks, but it also does the following:
Once it knows its been cracked, it phones home with the uid and the ip address.

It then goes to the app store and asks them to buy it.

Every level it does a random type of check as well....if the hackers start jumping over the checking code...they'll have to do it in 10+ places (exact number with held )


Yes, I got ticked of the crackers....an hour of my time will give them a headache of several house....plus.

I see no performance hit at all during gameplay.....worth it in my book.

I have ideas on other ways to detect that an applications was hack but so far I know of 4 ways.....I'm going to work on this.
They just strip the DRM and optionally change instances of "SignerIdentity" in the executable to some other equal-length string.

For some reason this information never seems to stick, and we keep coming up with crazy anti-piracy that a) makes your own code messier b) adds complexity which can potentially cause bugs for real users.

The actual info.plist check is so simple - let's keep it at that until we can't anymore.
jsonli is offline   Reply With Quote
Old 04-16-2009, 01:37 AM   #142 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 812
Default

Quote:
Originally Posted by Scott Stahurski View Post

Every level it does a random type of check as well....if the hackers start jumping over the checking code...they'll have to do it in 10+ places (exact number with held )


Yes, I got ticked of the crackers....an hour of my time will give them a headache of several house....plus.

I see no performance hit at all during gameplay.....worth it in my book.

I have ideas on other ways to detect that an applications was hack but so far I know of 4 ways.....I'm going to work on this.
The real question is whether you get more sales out of it.
johnqh is offline   Reply With Quote
Old 04-16-2009, 01:37 PM   #143 (permalink)
Registered Member
 
Join Date: Jan 2009
Posts: 43
Default

Well, my update to the application with the anti piracy measures in it was just released yesterday.

I had about 6 upgrades including the cracker.....how do I know this? My anti piracy phoned home last night. While I did not get his IP address I did get his device ID. His ip showed as local host 127.0.0.1.

Makes me think of another update that I can do and place a really nice message for this cracker on the next update. I'm sure I could get really nasty but just sending them off to the itunes store to buy the application is enough I think.




For the rapid share info

rapidshares email address is on its webpage

Quote:
Required information

Please note that we only follow up messages that meet the following requirements: abuse@rapidshare.com.

* Please provide us with your name, address and telephone number.
* Explain which copyrighted material is affected.
* If it a case of files with illegal contents, please describe the contents briefly in two or three points.
* Please provide the exact and complete RapidShare download link of the file
* Give details of the address of the webpage that published the link.
* If there are several RapidShare links, please include all links with complete details in your message. Please do not send any attachments. Simply insert the details in text format into the message.
(Example: RapidShare: Easy Filehosting).
* Please ensure that you can receive further enquiries from us at the e-mail address you are writing from.
* Please only write to us in English or German.

Notice

Anonymous or incomplete messages will not be dealt with.
Thank you for your understanding.
Make sure you provide all of this information.

it usually takes them a day to take it down.
__________________
www.seashellgames.com
Scott Stahurski is offline   Reply With Quote
Old 04-17-2009, 07:23 AM   #144 (permalink)
Registered Member
 
Join Date: Mar 2009
Posts: 27
Default

Quote:
Originally Posted by Scott Stahurski View Post
Well, my update to the application with the anti piracy measures in it was just released yesterday.

I had about 6 upgrades including the cracker.....how do I know this? My anti piracy phoned home last night. While I did not get his IP address I did get his device ID. His ip showed as local host 127.0.0.1.
you probably didn't caught the cracker cause these guys usually don't test their releases before posting at those warez sites. (that's the reason so many pirates are wondering why the apps crash ) it's almost sure you got the udid of the pirate who installed the cracked version first
Franzl is offline   Reply With Quote
Old 04-17-2009, 09:05 AM   #145 (permalink)
Registered Member
 
Join Date: Jan 2009
Posts: 43
Default

WOW...with my new version, I now have 20 distinct persons who have been trying my application with a cracked version. Problem is, I can find anywhere where the new version was cracked.

I d/l an upgrade last night as a test, just to make sure that I didnt mess any code up, and found that the new version works fine for non-jailbroken phones.

Can anyone tell me if jailbroken phones get the itunes update if a file is updated? That is, do the pirated applications check for new versions in the store?

I have not had one complaint about things not working...did I really have this may pirates?
__________________
www.seashellgames.com
Scott Stahurski is offline   Reply With Quote
Old 04-17-2009, 01:52 PM   #146 (permalink)
Registered Member
 
Join Date: Mar 2009
Posts: 27
Default

Quote:
Originally Posted by Scott Stahurski View Post
WOW...with my new version, I now have 20 distinct persons who have been trying my application with a cracked version. Problem is, I can find anywhere where the new version was cracked.

I d/l an upgrade last night as a test, just to make sure that I didnt mess any code up, and found that the new version works fine for non-jailbroken phones.

Can anyone tell me if jailbroken phones get the itunes update if a file is updated? That is, do the pirated applications check for new versions in the store?

I have not had one complaint about things not working...did I really have this may pirates?
Luckily the iTunes servers save which apps you have bought so no pirate is able to download updated versions from AppStore by owning a cracked one

20 pirates is quite low. there have been developers with hundreds of pirates using their apps.
Franzl is offline   Reply With Quote
Old 04-19-2009, 06:35 PM   #147 (permalink)
Registered Member
 
Join Date: Oct 2008
Posts: 166
Default

Quote:
Originally Posted by Franzl View Post
20 pirates is quite low. there have been developers with hundreds of pirates using their apps.
Hell, a lot of people would be happy with hundreds. I had over 1,000 pirated downloads on my first day alone, and my installed base is made up of about 90% pirated copies.

Scott Stahurski: It was cracked and passed around bittorrent a bit as a huge collection of recently-cracked apps, which typically precedes it making it to well-known sites. It made it to Appulo.us on the 18th.
__________________
Sproing - Updated September 17th, now with online high scores and challenges using Scoreloop!

Last edited by gizmotoy; 04-19-2009 at 06:38 PM.
gizmotoy is offline   Reply With Quote
Old 04-19-2009, 06:39 PM   #148 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 188
Default

Quote:
Originally Posted by Scott Stahurski View Post
WOW...with my new version, I now have 20 distinct persons who have been trying my application with a cracked version. Problem is, I can find anywhere where the new version was cracked.

I d/l an upgrade last night as a test, just to make sure that I didnt mess any code up, and found that the new version works fine for non-jailbroken phones.

Can anyone tell me if jailbroken phones get the itunes update if a file is updated? That is, do the pirated applications check for new versions in the store?

I have not had one complaint about things not working...did I really have this may pirates?
You aren't supposed to disable your app simply because the phone is jailbroken. A user can have such a phone and still legitimately purchase your app.
jsonli is offline   Reply With Quote
Old 04-20-2009, 02:36 PM   #149 (permalink)
Registered Member
 
Join Date: Jan 2009
Posts: 43
Default

Quote:
Originally Posted by jsonli View Post
You aren't supposed to disable your app simply because the phone is jailbroken. A user can have such a phone and still legitimately purchase your app.
I dont check to see if the iphone is jailbroken.....I dont care about that (even though apple does)

I do check if the application is cracked. Big difference. I dont think I ever stated that.

Good! I'm glad to hear that the jailbroken phones can still buy and run iTunes applications. Maybe thats why my increase in sales in the last few days.

Ive had over 100+ cracked applications tried to run. I would say about 1/10 of them are buying the application. Free advertisement!!!!
__________________
www.seashellgames.com
Scott Stahurski is offline   Reply With Quote
Old 04-21-2009, 12:43 PM   #150 (permalink)
Registered Member
 
tawpie's Avatar
 
Join Date: Jul 2008
Posts: 347
Default

Quote:
Originally Posted by Scott Stahurski View Post
For the rapid share info
Grazie. Much appreciated.... should have been able to find that myself!
__________________
"Hardware will break. Software comes broken" Unknown
Calc-12E <-- ditch your old calculator.
CPR•Choking <-- Review your training, just in case. (Free)
All of Nature NW <-- scrolls in x and y, with pinch zoom AND scrollable text to boot. It can be done ('taint easy tho)
tawpie is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



» Advertisements
» Online Users: 258
18 members and 240 guests
2WeeksToGo, ADY, BrianSlick, dacapo, Dani77, Dattee, Duncan C, headkaze, jemicha, kapps11, mer10, mgon987, Punkjumper, sneaky, timle8n1
Most users ever online was 1,187, 10-11-2011 at 08:09 AM.
» Stats
Members: 158,879
Threads: 89,228
Posts: 380,743
Top Poster: BrianSlick (7,129)
Welcome to our newest member, mgon987
Powered by vBadvanced CMPS v3.1.0

All times are GMT -5. The time now is 12:41 PM.
Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.3.0