If I need to include a 3rd Party SDK to connect to a wireless printer from within my iOS app, I suppose it’s running in the same memory space of my code. How can I make sure that the SDK doesn’t do any sneaky things in the background to steal user data within the app? Is there any network monitoring I can use to verify the network traffic of the app? Thanks!
Share
That’s very hard to detect (unless you can analyze the source code).
You can run it in your iOS Simulator and analyze the network traffic with a [network sniffer].
But still then: the app could only upload data when certain criteria are fulfilled (like it’s between 01:00 and 04:00 in the night or whatever).
You could use IDAPro or another arm capable disassambler to reverse engineer your library and analyze what the library does exactly.
If you are lazy, you can open the library in a hex editor and search after text “http://” and look for possible url’s. BUT THE LIBRARY COULD HIDE/crypt URL’s! So. This is only for a lazy quick check.
Still remember: without reviewing the source-code you can never be absolutely sure about that.
So. Go for opensource libraries! 🙂
1.