How to make iOS App Secure from Jailbroken Device?

How to detect JailBroken Device?

Thanks to the mobile era we have mobile apps for everything these days. Every business from a barbers shop to huge retailers has apps so that they can be closer to their customers. On one hand, we really leverage this convenience but on the other hand, there are risks of exposing a lot of confidential information while using these apps. And it becomes very vital when dealing with payments and other sensitive information. As a developer of these apps, it is our responsibility to put checks to make sure privacy and security are not compromised. Here is a comprehensive list of security best practices. But this article focuses on detecting if an iOS device is jailbroken. 

JailBroken detections techniques basically fall under these categories

1. File Extension Checks

If a device is jailbroken, there are some files that exist in the system. One common file is Cydia. Let take a look at the code below how we would check for the existence of these files


2. URI Schemes

iOS App allows registering for different schemes that allow opening our app directly from a weblink. If a device is jailbroken we can check for the existence of cydia:// scheme. Below is code that checks for the existence for the URI scheme


3. Sandbox Check

JailBroken device alters the sandbox behavior of the app. Basically, the app can access or affect things outside of its sandbox. So we check by writing a file outside our sandbox and if we succeed then the device is jailbroken. This is how it will look in code.


4. Dynamic Linker Check

Dynamic Linking provides a way for executables to take advantage of code provided by other libraries without compiling and be able to ship that code in the executable file. This greatly helps executables to reuse code without including a copy of these different libraries. On the other hand, static linking will include all code the executable needs are shipped with it.

usually Anti jailbroken detection tools are loaded as dynamic libraries. iOS dynamic linker dyld loads all the dynamic libraries. So we can check the presence of anti-jailbreak-detection tools by looking at the names and numbers of libraries loaded into the current process. If an anti-jailbreak-detection tool is running, we know the device is jailbroken.

Conclusion

JailBroke device detection definitely adds a layer of security to your app. But by no way or means, the list above is enough to do that. End of the day, as a good developer we need to practice all the good security practices to secure our iOS app. 






Popular posts from this blog

How to make an iOS App Secure?

Image
This is mobile era and pretty much everything these days can happen from our smart phone. Thanks to millions of apps out there which help us in accomplishing anything we want. Whether it is maintaining your schedule (calendar) to managing financial information on the go, all things can be done by mobile apps running on our smart phones. Since these apps have access to so much of confidential information, as developer when we make an app we need to follow highest security standards so that information is not accessed by someone who is not entitled for it.  When it comes to iOS devices there are more than billion active devices that use iOS apps on daily basis.  Here I am compiling the different security practices that an iOS developer should always keep in mind while developing apps. 1. Enable ATS in mobile apps  With launch of iOS 9 and ELCapitan Apple launch ATS (Apple Transport Security) which forces apps to only connect to secure network. This means any connection that application m
Read more

System Design Interview For Mobile Engineers

Image
Introduction As you gain seniority in Software Engineering, the system design interview becomes the most important interview. This interview is focused on your ability as an engineer to look at and understand the design of an application from a holistic level. You are expected to start from a high-level view and then do a deep dive into individual components. In this article, I have shared my recipe to approach the system design interview problem by going through an example. Sounds interesting?... Keep reading I find the system design interview interesting because they are most realistic, holistic, and involve great communication skills.  Approaching a System Design Problem So I watched different kinds of system design interviews tutorials and made  my own custom script that made sense to me as a mobile developer. By no way or means, this is a comprehensive list, this is just something that has worked for me. So here is the rundown of different sections I used to tackle the system desi
Read more

How to make iOS app secure from screenshot and recording?

Image
  Thanks to the mobile era we have mobile apps for everything these days. Every business from a barbers shop to huge retailers has apps so that they can be closer to their customers. On one hand, we really leverage this convenience but on the other hand, there are risks of exposing a lot of confidential information while using these apps. And it becomes very vital when dealing with payments and other sensitive information. As a developer of these apps, it is our responsibility to put checks to make sure privacy and security are not compromised. One of the ways is to detect/prevent screenshot and screen recording action and taken an action or inform the user to take appropriate action.  Use Cases Here are some use cases where screen capture and screen recording can expose sensitive information: 1. Login information can be recorded Any app that requires a login to get access to sensitive information. We need to make sure that only the intended person can log in. If screen recording or sc
Read more