窃取应用程序并使用临时分发将其发布到 AppStore
我将要求公共论坛上的用户使用临时方法参与我的应用程序 Beta 测试。因此，如果用户有兴趣测试/审查，他会向我发送 UUID，我会向他发送应用程序二进制文件。
主要问题：向任何人提供应用程序二进制文件是否安全？我在苹果 iPhone 开发者论坛上听到了一些可怕的故事，有人发现他的应用程序使用了另一个公司名称和不同的图标发布了其他人的应用程序。因此，除了公司名称和图形之外，该应用程序完全相同。他告诉我，其他人得到了他的应用程序二进制文件，将其破解并将其发布到应用商店以获取利润。
那么，如果我使用临时方式提供我的应用程序二进制文件，是否有可能窃取我的应用程序并将其发布到应用程序商店？
谢谢
I am going to ask users on public forums to take part in my app beta testing using ad-hoc method. So if user interested in testing/reviewing he sends me UUID and I send him app binary.
The main question: is it safe to give anyone app binary file? I heard some terrible stories on Apple iphone developer forums that some guy found his app published someone else using another company name and different icon. So the app was absolutely the same except company name and graphics. He told that someone else got his app binary, cracked it and post it on appstore for profit.
So is it possible to steal my app and publish it on appstore if I give my app binary using ad-hoc?
thx
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
是的，因为应用程序商店中的应用程序也可能发生同样的情况。
有一些工具可以解压签名的二进制文件，然后可以重新打包。
同样，有人可以破解 Visual Studio 以显示不同的公司名称，然后将其发布为自己的公司名称。
在这两种情况下，都会产生严重的法律后果，而且在这两种情况下实际上很少发生。
就 iPhone 应用程序而言，某人不太可能愿意窃取您的应用程序。如果您确实认为存在风险，我不建议向您不认识的随机人发送临时副本。
Yes, as it is possible for the same to occur for apps that are in the app store.
There are tools that can unpack the signed binaries which can then be repacked.
In the same light, someone could crack Visual Studio to show a different company name and then release it as their own.
In both cases, there are serious legal ramifications, and in both cases it is actually very rare to occur.
In the case of iPhone apps, it is very unlikely someone would want to bother stealing your app. If you really think there is a risk, I wouldn't recommend sending ad-hoc copies to random people you don't know.
虽然这在技术上是可行的，但 (IANAL) 我认为这种行为违反了 DMCA，为您提供了追查他们、他们从偷窃中获得的任何及所有利润等的法律依据。
While it is technically possible, (IANAL) I believe such an act is a violation of the DMCA, giving you legal ground to go after them, any and all profits they make off of what they stole, etc.
如果您觉得受到威胁，您可以向您的应用程序添加“过期系统”。检查日期是否晚于此（例如 2009 年 11 月）并删除它。我不认为有人会在破解过期故障保护后麻烦地删除您的代码签名，并用自己的身份对其进行签名。你的应用程序应该非常棒。
If you feel that threatened, you can add an "expiration system" to your app. Check if the date is later that, say November 2009 and kill it. I don't think someone will go into the trouble of removing your code signing, signing it with his own identity after he has cracked the expiration failsafe. You app should be pretty awesome.
我从未听说过无法反编译/反汇编的代码。我想这也适用于 iPhone。所以是的。
I've never heard of code that can't be decompiled/disassembled. I guess this applies to iPhone as well. So yes.
是的，从技术上讲，他们可以获取二进制文件并使用他们的密钥将其退出。他们可以将其安装在自己的设备上，或者将其提交给商店。
他们没有来源，因此进行任何形式的修复或更改（包括处理提交拒绝）将非常困难，并且证明侵犯版权并将其删除应该不难（尽管您可能需要支付一些律师费用）。
归根结底，我不会担心这个……这种事情在实践中不会发生。
Yes, technically they can take the binary and resign it using their keys. They could do that either to install it on their device, or submit it to the store.
They won't have the source, so making any sort of fixes or changes (including to deal with a submission rejection) would be remarkably difficult, and it should not be to hard to prove a copyright violation and get it taken down (though you might need to pay some lawyers).
At the end of the day I wouldn't worry about it... this sort of thing just doesn't happen in practice.