Recently, I stumbled with this topic in my mind for few days.
I understand that obfuscation is not the best protection against reverse engineering. I wonder if there is another method that make it harder for reverse engineering, especially in mobile apps.
In android environment, it is easier to reverse engineer an APK due to Java Nature. In IOS, I would care less about obfuscation, except for Jailbroken devices.
My question here:
- Obfuscation is always reversible. Is there any method that can help make it harder for reverse-engineering?
- Does it help if we update the APK with new released mapping obfuscation every month? How long usually hackers will be able to reversed engineered obfuscated APK?Let say that I don't really care about the code itself, but I more concern with specific data that I may need to hard coded them in APK.
- Lastly, is there anything preventive action we can take with Jailbroken phone? For example, make the app is not downloable from app store if it is jailbroken.