I'd like to know why the following (any maybe more files) by user "infinitely" would contain files within the APK file that are password protected ?

Code: Select allhttp://forum.mobilism.org/viewtopic.php?f=427&t=579747

Code: Select allhttp://forum.mobilism.org/viewtopic.php?f=438&t=579694

I did ask in both threads, but someone deleted them.
I've also tried to PM "infinitely", but there's no option to do it.

Are there any security risks in installing such files or what is the reason ?
The previous versions of the apps, didn't contain any password protection.

Thanks.

[MickyFoley]

infinitely did something really oldschool. Maybe so old, less people would know about.

Anyways: The trick is to tell the unzip-program, that the files are protected, even if they aren't. It's a simple header-hack to cheat the detection. There is no encryption @all . There is a simple way to circumvent it. Reversers will know and that's enough i think. Some idiots were getting infinitelys apps to pre them on sites (Mobile-0day) and maybe branded them, to make it look like, they did it.

So yeah: You can install the files without a problem, but without a bit knowledge, you won't get them extracted, what is good i think.

Thanks for the reply and explanation