iPhone Piracy Protection Code 2 - Another Tutorial

[kazbluesky]

Fantastic ! I'm really looking forward to the next tutorial. Thanks Schmoopi

[kazbluesky]

Any news?

[Mutix]

Hi,

First of all, I'd like to thank everyone from the iphonedevsdk community for sharing all their knowledge. I have learned a lot from these forums, and have nearly always found an answer to questions I had regarding iOS development.

I'm in the same boat as a lot of people here, have released my first app a few weeks ago, and, despite it not being a general public app, it has already been cracked and put on appulous.

It has been cracked by an automated cracking program (there's a text file in the .ipa package that actually mentions this: "[...] Cracked by [...] using Clutch 1.1 RC2.").

So I'm looking into implementing some anti piracy checks to try and turn the cracked app into a demo version for the future updates.

I have implemented a few techniques in this thread, but have a few questions:

Originally Posted by Damian

And here it is

if(fabs([infoModifiedDate timeIntervalSinceReferenceDate] - [pkgInfoModifiedDate timeIntervalSinceReferenceDate]) > 600) {	
		 //Pirated
	}
if(fabs([infoModifiedDate2 timeIntervalSinceReferenceDate] - [pkgInfoModifiedDate timeIntervalSinceReferenceDate]) > 600) {	
		 //Pirated
	}

This doesn't seem to work, on simulator or on device (SDK 4.3).

The second check:

fabs([infoModifiedDate2 timeIntervalSinceReferenceDate] - [pkgInfoModifiedDate timeIntervalSinceReferenceDate]) > 600

always seems to return true ?

Anyone else getting this ?



Also, concerning the encryption check: does this entail that we need to declare that our app uses some form of encryption when we submit it to Apple (thus leading to a lot of red tape procedures etc) ?


I also just wanted to double check about the info.plist filesize. This check works fine when I run the app on my devices, although I have noticed that the file size changes if it's being run in the simulator.

Is the file size (on the device) going to be the same as the debug one when using the release scheme ?



Many thanks,

Regards

[Quasha]

Thnak you very much for thiis fantastic and really great thread with the great tutorial.

[PuchkoffDevelopment]

Does this code really work?
My app got cracked with piracy protection implemented.

[dany_dev]

the code "work" but this don't mean that is uncrackable, and however depend on what you exactly written....maybe you just copy\pasted and something gone wrong.....

[Gamepro65]

Not sure if it has been mentioned yet but the simulator detection code is a little off. Not sure if its an XCode 4 thing but my simulator gid is 20, not 10. Simple change will make this code work as it was intended.

[fast]

and with this code:

 NSString *filePath = @"/Applications/Cydia.app";
     if ([[NSFileManager defaultManager] fileExistsAtPath:filePath]) {   
     
     NSUserDefaults  *defaults         = [NSUserDefaults standardUserDefaults];
     NSArray         *languages        = [defaults objectForKey:@"AppleLanguages"];
     NSString    *currentLanguage  = [languages objectAtIndex:0];
     NSLog(@"Codice lingua %@", currentLanguage);
     
     
     if( [currentLanguage isEqualToString:@"it"] ) {	
     UIAlertView *alert = [[UIAlertView alloc] initWithTitle:@"Attenzione!"
     message:@"L'applicazione ha identificato questo dispositivo com jailbroken"
     delegate:nil
     cancelButtonTitle:@"OK"
     otherButtonTitles:nil];
     
     [alert show];
     [alert release];
     
     } else {
     
     UIAlertView *alert = [[UIAlertView alloc] initWithTitle:@"Warning!"
     message:@"The app detect yuor iPhone is Jailbroken!"
     delegate:nil
     cancelButtonTitle:@"OK"
     otherButtonTitles:nil];
     
     [alert show];
     [alert release];     
     }
}

[hzc]

Regarding the function to test if the binary executable file is encrypted, is the binary encrypted before or after an Apple reviewer starts testing? If after, then the app will fail the encryption test and the reviewer will most likely reject the app.

Has anyone submitted an app with the encryption test? How did that fare?

[samurle]

Originally Posted by hzc

Regarding the function to test if the binary executable file is encrypted, is the binary encrypted before or after an Apple reviewer starts testing? If after, then the app will fail the encryption test and the reviewer will most likely reject the app.

Has anyone submitted an app with the encryption test? How did that fare?

I would take a wild guess and say that apps are not reviewed with Apple's DRM encryption.

Assuming DRM encryption (LC_ENCRYPTION_INFO) is only applied at the very last moment when
a person buys and downloads an app from the AppStore, as it needs your deviceID for encoding,
I would guess the reviewer has direct access to your app, and doesn't need to do all of this.

And, if DRM encryption (guessing) interferes with Apple's testing tools, that may be one
reason why apps are not reviewed with encryption.

[Shmoopi]

Originally Posted by hzc

Regarding the function to test if the binary executable file is encrypted, is the binary encrypted before or after an Apple reviewer starts testing? If after, then the app will fail the encryption test and the reviewer will most likely reject the app.

Has anyone submitted an app with the encryption test? How did that fare?

If you do the encryption check, it will give a false positive if an Apple reviewer tests your app. Unfortunately there is no way to get around that

On a side note:
I'm looking for beta testers for my paid Anti-Piracy Library. If you'd like to give it a shot, please message me. Thanks!

[Shmoopi]

New tutorial is up! Check it out in the tutorials section

[xefil]

Originally Posted by hzc

Regarding the function to test if the binary executable file is encrypted, is the binary encrypted before or after an Apple reviewer starts testing? If after, then the app will fail the encryption test and the reviewer will most likely reject the app.

Has anyone submitted an app with the encryption test? How did that fare?

<>
Sorry I've not seen the answers.
Also it means this check could not be implemented. If the encryption-signature is applied after, we never are able to verify if the app is signed or not or better, Apple would not approve the app because until it's not signed if I put a exit on the encryption check, apple review would fail and maybe the App would not approved?

Thank's a lot for the help!

X3f