Does that mean a hacker could potentially decompile, change some values in the cleartext lua, and recompile?
1 Like
Does that mean a hacker could potentially decompile, change some values in the cleartext lua, and recompile?
Well, sure, this would make it easier.
However, remember that we’re talking about iOS here, which is a closed platform, and it’s very hard to get the .ipa in the first place. And then what will they do with the .ipa?
Also note that we’re not adding this as a default, but for those cases where you need it.
4 Likes
OK thanks for the clarifications!
1 Like
That is very easy using Apple Configurator 2 from Mac App store.
Then rename .ipa to .zip unpack it, etc.
1 Like
Nice, I didn’t know about that tool!
1 Like
That’s one of the reasons I suggested compiling Lua to C. Compiled C code is quite good against hacking.
Finally!!!
Björn WIN!
Old rejected (!!!) version of my game was approved by apple review team without any warnings, e-mails or contacts.
But … it’s too bad that this is an outdated and half-working version of the game 
Thank you Björn, you are the best 
11 Likes
Earlier this evening I talked to the contact we now have in the Apple review team. He told me they were now confident that the app wasn’t doing anything malicious and that the additional information we shared about Defold helped them.
We will still proceed with the planned changes to bob.jar where you will be able to package an application with Lua scripts included in clear text. If anyone gets stuck in the review process in the future this new option will help.
We also published a brief overview on our archive format and why we have decided to use an archive instead of individual files:
19 Likes