obfuscated text question - from a complete newbie at programming

122 views
Skip to first unread message

Chris V

unread,
Apr 1, 2018, 8:41:10 PM4/1/18
to MIT App Inventor Forum
So i have a silly question about obfuscated text.
From my understanding it is a form of encryption that scrambles text strings making it harder for hackers to "break open" the apk...
My question is in my app i have many API keys and ID's and by not making them obfuscated text, is the data SENT over the internet any less secure.??? Obviously the strings can be searched but if there is no string is that better or worse because it isnt encrypted when sent?

Thanks

TimAI2

unread,
Apr 2, 2018, 5:55:59 AM4/2/18
to MIT App Inventor Forum
This might help


Obfuscating text is really on useful on the app, it is converted to its real value when used in the app.

You would need to rely on authentication / https / ssl / similar to ensure the data you send over the internet is as secure as it can be

Alternately, pull in the authentications at run time from a web source, so that they are not actually "in the app"

Chris V

unread,
Apr 2, 2018, 7:47:49 AM4/2/18
to MIT App Inventor Forum
Hi Tim,
Thanks for the response.
That was my impression. Like i said i am completely new to the security aspect.
I am using https on all my web calls out  from the app. And the strings that are "hard coded" are generic and 'useless' to a hacker as they are generic strings that can be found online.
So i guess having the user populate their own strings is the safest method, and since my app also does not store the strings after the app is closed.
That was my approach to security for my app.
Thanks!
Reply all
Reply to author
Forward
0 new messages