,
3 tweets,
1 min read
Read on Twitter
The key is the threat model. If your threat model is good, you will be able to answer to these questions:
- Do I care if an attacker can see the network requests?
- Do I care if my user is using a rooted device?
- Do I care if an attacker can see the network requests?
- Do I care if my user is using a rooted device?
Whatever your threat model you should always obfuscate your code. It’s not a bullet proof protection but it will slow down an attacker:
- to steal your intellectual property
- to understand how your app is working
- to steal your intellectual property
- to understand how your app is working
So how to be a better Android developer? Attack your app! You have to understand what an attacker is able to do
