3 Ways to Secure Your React Native App - React Native - October 2019

[@maximtoyberman8204]

Great lecture ! public key pinning was added today to react-native-ssl-pinning

[@armada6199]

great video, thanks so much for the information

[@cloudkungfu]

Awesome talk! Definitely helped me understand how security is a cumulative effort 💯

[@adamalexander5216]

24:01 tearing up there fam? 😏 loll informative video btw thanks

[@surajvijay1937]

Wonderful talk. Really helpful

[@leoamato6113]

Awesome explanation 🤩

[@SepSol75]

Brilliant talk!

[@tininottiny8685]

thank you!

[@rhiannonmonks1117]

Thanks again Christian. My extra piece of advice to add to this would be - never pay your existing developers for an entire sprint to do a penetration test on the app they built. Rookie mistake by me, very criminal behaviour to even entertain the idea and take £5k from me for 2 weeks work, which funnily enough returned that there was 'nothing wrong with the security on our app'. The main reason for this, is they were actually trying to steal the API from me, but implying I didn't care about security or user data, so of course making any recommendations to improve that would have been counter intuitive to their plans!

[@SunilKumar-rp3gk]

Can you please share the sample code that you have shown for javascript obfuscation?

[@Iliasbhal]

This guy should do a lot more talks!

[@xdankitjain]

Thank you so much for sharing such valuable information in a really simplified way

[@charlyKoerbe]

really good and helpful talk

[@testingchannel7312]

Do you have react-native-obfuscating-transformer sample project or any video tutorial to implement?

[@drixbarsali]

where can i find examples of the obfuscate.sh?

[@ibrahim.ozdogan]

@Drix Barsali, Have you found or prepared obfuscate script? I tried something but it didn't work for my project.

[@drixbarsali]

@@ibrahim.ozdogan yes tried too.. but not able to implement... In the end the client choose for a paid solution

[@jalexander9929]

@@ibrahim.ozdogan how about you? were you able to find?

[@ibrahim.ozdogan]

@@jalexander9929 Yes Alex. Due to the fact that there is not enough resources on the internet, it was hard to implement. But after a lot of tries, it's done. This the link - stackoverflow.com/questions/64265280/how-to-obfuscate-code-in-react-native-for-ios - that I've asked a question to StackOverflow in order to find a solution and helped me indeed.

[@jalexander9929]

@@ibrahim.ozdogan you are right, about it not being easy to implement! but thanks ill check it out

[@saxenavedant61]

Awesome

[@denisolsem8418]

You should still be able to pin the certificate itself and avoid bricking your app if you build a mechanism for updating it via push notifications.

[@lokeshl8857]

Awesome video ✌️

[@adamalexander5216]

Never got the obfuscation to work on my projects so I just did my own obfuscation on parts of my code that I wanted to protect. (Which wasn’t much) Using base64 encoding and decoding and meaningless identifier names.

[@jbb459]

Currently, Cydia apps called A-Bypass and Liberty can bypass almost all jailbreak detection. Anybody know any strategy to prevent that?

[@manurana]

Slides ?

[@chrischown]

docs.google.com/presentation/d/1LQcVEEMVFH2ESRLP6RW7MJoub_vjD0e1M62ZaRfW-bg/edit?usp=sharing

[@shemilhashan7066]

@@chrischown thanks for the video. but I'm finding it difficult to find obfuscate.sh file. can you point where I can get it?

[@rich007p]

After I copied the code for Android obfuscation in the obfuscate.gradle file I tried to build the app and I got this issue "Could not get unknown property 'apkDir' for task ':app:unzipAPK' of type org.gradle.api.tasks.Copy. " Any reason for it??

[@shemilhashan7066]

do you have obfuscate.sh file?

[@shemilhashan7066]

where can I find obfuscate.sh ??