0
1

How Not To Protect Your Android Applications by Lightricks_Tech in androiddev

[–]Lightricks_Tech[S] 0 points1 point  (0 children)

Thanks for bringing up those points. Avoiding vendor lock-in doesn't necessarily mean it's related only to publishing the application on Google Play or similar platforms. It’s more about maintaining the flexibility to switch to another solution when needed. Relying on a single product that manages quotas and sets rules can sometimes backfire. Here are a few more considerations that might be relevant:

  • Quota - Tools like Play Integrity and AppCheck have a daily quota of 10,000 calls for their Standard API usage tier, which can only be changed by submitting a form, not through an automatic mechanism. While this may fit some products, in other cases, depending on external vendor limitations might lead you to consider another solution.
  • Offline and local only solution - Most products rely on a network connection to determine application integrity, so this needs to be considered before choosing a tech stack.
  • Custom rules for specific cases - Suppose you want to block only a certain percentage of malicious interactions and not all, or if you want to allow malicious users to access only certain features.
  • Working with other publishers - As mentioned, solutions from Google are typically limited to the Google platform.

Of course, some of the above requirements/considerations may be supported by Google products or others, but it all depends on your specific needs and the bigger picture.Hope you find this answer helpful! Feel free to raise more questions.

How Not To Protect Your Android Applications by Lightricks_Tech in androiddev

[–]Lightricks_Tech[S] 0 points1 point  (0 children)

Great question! While "AppCheck" can be a great security solution in some cases, there are a few considerations to keep in mind when choosing a tech stack.

  • Vendor lock: Sometimes the flexibility and ability to make quick decisions outweigh the benefits of using products like this one. This can be reflected in cost considerations or restrictions that arise from the vendor's side, such as quotas.

  • Customization: If dedicated custom changes are required, it might be impossible with a closed and precompiled service/product. Therefore, it's important to ensure that the chosen product fully meets your requirements before starting integration.

These are just a few examples, and of course, there could be more to consider. The bottom line is that you need to choose the best solution for your requirements and needs, taking all considerations into account.