Huge fan of the team, tons of actual security experience (ie. competed multiple times at Defcon CTF) and definitely a huge market need. Great job guys!
Huge problem in the Android Eco-system. Really glad to see this exist. If you've got an Android app, I can't imagine why you wouldn't get this implemented for peace of mind and to prevent your users from being hacked.
This is the easiest way to add security to Android apps that I’ve seen so far, and does a good job of protecting against source code analysis through app decompiling. The coolest feature though, is being able to see if anyone is trying to hack my app and being able to shut the app down on a device level.
@marymin@silverdel Id love to hear about the greatest android security fails and security wins you've seen. Feels like you've probably got some great stories from developers (no need to name names)
@staringispolite - In our market research we come across a lot of apps that are vulnerable. 85% or more of Google Play apps can be decompiled and the source code extracted with little effort in just a few minutes. And that's a lot of Android security fails. The latest one we saw was a dating app that had the Parse id and secret key hard-coded into the client side (which meant I could access the backend with those credentials if I wanted to). As for wins, my team took on the Telegram security challenge when they launched secret chats, and it was just not worth our time to crack it - it's not impossible, just would have taken many weeks to break and by that time Telegram would have come out with a new version. That's what security is about, making it as difficult as possible so people would rather go after something else.
Also, Stagefright and Stagefright 2.0 was a massive security fail. There are so many unknown zero-day vulnerabilities floating around the hacker community that still hasn't come to light. Better to be safe than sorry.
Hi everyone, we're noticing people signing up and not redeeming the Product Hunt promo code. That promo code gives you a full 2 month trial and puts you on a higher response level with my team.
After you log in, click User Info from the top right, then scroll down and enter the following code into the "Register Promo Code" section: K-OG0-967A-PXFK-k-SZ6
Thank you, and please let me know if you have any further questions!
Hi everyone, I'm Min Hong, founder of AppSolid. We came up with this product after realizing there wasn't an easy way to prevent hackers from reverse engineering code from an app. We looked at Proguard and Dexguard for our own app, and source code obfuscation just wasn't enough (plus that makes crash logs hard to read), and solutions like Arxan cost a lot of money and required weeks of our time to integrate into the app. We thought, "Why not create a shield that goes around the app to protect it, and is easy to use?" And that's how we came up with AppSolid.
We're extending our free trial to two months just for Product Hunt users - please try out and let us know what you think!
I've been doing security software for 20+ years, competed at DEFCON 5 times, and happy to answer any questions/feedback that you might have. Ask me anything!
I can think of a number of game developers that need something like this... I've heard stories of games like Tap Heroes having entire games ripped off (difficulty algorithms and all) due to app decompilations by dev shops in China that will reskin and rerelease in an instant.
@rage - This is sadly true, and not only for games. Dev shops that rip off apps will post in other Android stores aside from Google Play - fragmentation of markets is a huge thing in China, India and other parts of the world. That means that you lose the chance to enter new markets, and these people don't pay for dev costs, so they can outspend you in UA all day long.
Take a look at the Lilith vs uCool case - Lilith planted an easter egg and was able to show on video that uCool had stolen their game source code. Heroes Charge is still making a lot of money in the US. :)
Glad to see Min's and his team's work getting featured here. Definitely a much needed service in the realm of mobile security with all of the attention to holes in the Android OS as of late.
Farmstead