用户可以在iOS应用中修改NSUserDefaults键值吗？ [英] Can users modify NSUserDefaults key values in an iOS app?

问题描述

我对安全性有疑问。

我正在按照本教程，我存储了在NSUserDefaults中购买的产品。这就是为什么我想知道：

I am making an iOS app with in app purchase following this tutorial, and I store what products were bought in NSUserDefaults. That's why I wonder :

拥有越狱设备的用户可以修改NSUserDefaults键和应用值吗？

Can a user with a jailbroken device modify NSUserDefaults key and values for an app?

非常感谢你，如果你知道的话。

Thank you very much if you know about it.

Jer

推荐答案

<是的，他们可以。用户默认值相对于您的应用程序目录存储在此处：

Yes, they can. The user defaults are stored relative to your app directory here:

./MyAppName.app
./Library/Preferences/com.mycompany.MyAppName.plist

plist文件未加密或签名，因此它可以是轻松修改：

The plist file is not encrypted or signed, so it can be modified easily:

plutil -convert xml1 com.mycompany.MyAppName.plist
vim com.mycompany.MyAppName.plist

您可以查看iOS钥匙串，如@rckoenes所说，或者喜欢这个开源安全默认值替换，提供类似 NSUserDefaults 。

You can look into the iOS keychain, as @rckoenes said, or also something like this open source secure defaults replacement, which offers an interface similar to NSUserDefaults.

自iOS 8起，数据目录（以及首选项plist文件）现在位于：

Since iOS 8, the data directory (and thus the preferences plist files) are now under:

/var/mobile/Containers/Data/Application/<GUID>/Library/Preferences/

Apple参考文档

这篇关于用户可以在iOS应用中修改NSUserDefaults键值吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！