News for hackers. Stuff that matters.
Re:Reverse-engineering the Starbucks ordering API by micaksica on Wednesday July 12, 2017 @11:14PM (#14758465)
The standard way of frustrating decompilers for Android applications is with heavy obfuscation using ProGuard [1] or DexGuard. [2] IMO, DexGuard is a real pain in the ass to reverse around. If you aren't dealing with heavy obfuscation, decompiling APKs is trivial using jadx. [3]

In general I have found that most smaller app developers don't obfuscate at all, and often you can find hardcoded keys/secrets in these smaller applications.

[1] https://developer.android.com/studio/build/shrink-code.html

[2] https://www.guardsquare.com/en/dexguard

[3] https://github.com/skylot/jadx

Re:Reverse-engineering the Starbucks ordering API by djmips on Friday July 14, 2017 @07:48AM (#14769057)
One reason is they have to test and potentially debug the obsfucated build which is a lot of extra work!