React-Native app reverse engineering and obfuscation - apk

Is react-native expo generated apk obfuscated?
exp build:android
How can I retrieve my react native JS source code back using that apk? Do I need dex to java compilers for this purpose?
Looking for your valuable suggestions as I am concerned about the security of my react native app and trying to compare obfuscated vs non-obfuscated code

There is no need to decompile the app using dex to java tools.
If you generate a production build it will be minified, but this is far from being a high level obfuscation which you can try to achieve with react-native-obfuscating-transformer
You can find the js bundle by opening the apk with a zip archive manager. The bundle will be at:
/assets/index.android.bundle
In anycase, any client side code should be treat as unsafe, if you need security use your backend to handle it.

Related

Image component flickering when navigating between pages React Native + Expo

I'm currently working on an app that has a database that stores the link to the image sources (it's not locally stored) and then in the app, I use that link for the source.
I get a white flickering when navigating and so far, all the solutions I've found are either not compatible with expo (react-native-fast-image) or not compatible with image links (using defaultSource).
Has anyone solved image flickering on Expo with a image not stored locally?
Today, we are pleased to announce that with the arrival of Expo SDK 42, you can now create custom development clients in the cloud using EAS Build, or locally with the new Expo run commands.
You can try it out today:
Create a new project: expo init
Install the packages: expo install react-native-fast-image expo-dev-client
Build the native app:
In the cloud with eas build -p all --profile development (expo build does not support custom builds)
Or locally with expo run:ios and expo run:android (note: see https://expo.fyi/prebuild-cleanup for information on the generated files)
To be clear, react-native-fast-image will not have been added to the Expo Go app that you download from the App Store or Google Play Store.
We still consider this feature to be completed because users can now create a custom client app that includes this library, without needing to write any native code.
We hope you enjoy, and we have big plans to continue improving this workflow going forward!
(с) Brent Vatne https://expo.canny.io/feature-requests/p/react-native-fast-image

Can I debug react native app(debug version) without having source code?

Recently I have created react-native debug apk.
I have given this apk to my testing team , testing team want to debug this apk, but they don't have source code, so they unable to debug apk.
They just want to see performance and api calls.
Is react native app possible to debug without having source code??
I have created app by following below url.
Build and Install unsigned apk on device without the development server?
Error:
https://ibb.co/7GZ1MQB
Why don't they start the APK with Android-Studio. There you have some handy tools to profile and you have logcat to see all actions which happends within the app.
No need for the reactNative - SourceCode.

Using Angular libraries in Nativescript code sharing project

I'm trying to migrate an Angular app to a shared codebase with Nativescript using the new #nativescript/schematics, however, I'm having problems importing my Angular library when building the mobile version of the app. I used the angular-cli to create the library (ng generate library).
For the web version, all I had to do was build the library separately using ng build library-name which then allowed me to import it into the main application.
How can I build a mobile version of the library that can be imported into the main application when running tns run ios --bundle? I've already migrated the components and module of the library with appropriate *.tns files.
Any help is appreciated
I had the same problem. Nativescript cli do not have this feature where we can build an angular library into npm package and use it in other projects.
I tried a workaround and it worked for me. Write a script to copy all of your project files into another directory and replace all *.tns.ts, *tns.html and *.tns.scss. files with *.ts, *.html and *.scss respectively. Then build these files using regular ng command. You can add a build configuration for the same in angular.json file to build from the copied directory. I hope it helps.
I'm sorry this is just a hyperlink answer but the space required to answer this, in my opinion, is way too large. I just finished finalizing a repo I've been working on to do exactly this. I have a whole slew of angular web libraries that I now want to make available for use on mobile using NativeScript. I have put everything I have learned so far into this repo and I hope it helps you too.
Thanks for the final push/idea #Rohit, a script for doing what he suggests is in the test-lib/gulpfile.js of this repo.

Running an Android app that has a dependency of another app in Google ARC

Experimenting with Google Chrome ARC, I'm trying to run my application which has a dependency of another application (in particular, my application is using some library functions from OpenCV, and it needs the "OpenCV Manager" app to be installed on the device in order to work).
Is it possible to tell ARC that the 2 apps are connected (I got the APKs of both apps), or every app is entirely isolated and can't know about other apps?
Your packaged APKs in your CRX file are isolated from those in any other CRX file, with the special exception of any APKs inside the ARC runtime CRX file.
You may be able to package the OpenCV manager APK in with your app (inside the same CRX file). It sounds like the license terms would allow it (but require a copyright notice). Since it would be bundled, you would lose out on automatic updates, which may or may not be a problem for you.
We definitely have integration tests which bundle two APKs together like this. However I'm not sure we have done much testing around having a service APK (like OpenCV Manger) with a normal app APK, so you may run into additional issues.
Note that ARC tries to start the main activity in the last APK installed (listed in the metadata file), so the OpenCV APK should be listed first.

Can you install Google Protocol Buffers on Heroku?

Context
I'm new to Heroku, and fairly new to Google Protocol Buffers.
Steps Taken
Searched Stack Overflow
Searched Heroku help
Searched Google
Question
Is there way to install the Google Protocol Buffers on the Heroku platform?
You do not need to "install" Protobufs to use it at run-time. Just bundle the Protobuf Python code and the code generated by the Protobuf compiler together with your application's other code. The compiler (protoc) is only needed to generate code; it is not used when your application actually runs. So, there should be no problem.
If you want to use the experimental C-extension-backed implementation (which is off by default), you will also need to include the .so file implementing the extension. I am not personally very familiar with C extensions so I'm not sure exactly where you're supposed to put it, but again, you should be able to bundle it with your application without installing anything. I am also not very familiar with Heroku so I do not know if they will let you run C extensions -- I know that AppEngine, in comparison, does not allow extensions.

Resources