Search Unity

  1. The Unity Pro & Visual Studio Professional Bundle gives you the tools you need to develop faster & collaborate more efficiently. Learn more.
    Dismiss Notice
  2. Improved Prefab workflow (includes Nested Prefabs!), 2D isometric Tilemap and more! Get the 2018.3 Beta now.
    Dismiss Notice
  3. Want more efficiency in your development work? Sign up to receive weekly tech and creative know-how from Unity experts.
    Dismiss Notice
  4. Participate with students all over the world and build projects to teach people. Join now!
    Dismiss Notice
  5. Build games and experiences that can load instantly and without install. Explore the Project Tiny Preview today!
    Dismiss Notice
  6. Improve your Unity skills with a certified instructor in a private, interactive classroom. Watch the overview now.
    Dismiss Notice
  7. Want to see the most recent patch releases? Take a peek at the patch release page.
    Dismiss Notice

Has anyone tried reading / modifying the saved Remote Settings file on client side?

Discussion in 'Unity Analytics' started by Zarashi99, May 29, 2018.

  1. Zarashi99

    Zarashi99

    Joined:
    Jun 11, 2015
    Posts:
    7
    Background: Just like the case presented in this issue with Remote Settings, I would like to use Remote Settings to hide my server base URL and some other authentication infos. I couldn't just put those values in PlayerPrefs and even more so directly into the code as values of static variables (since obfuscation is a big no-no as per this) and even if I encrypt my data, it'd be useless since potential crackers can see how it's being decrypted.

    Now, according to this doc: "The web service from which Unity downloads the Remote Settings configuration is read-only, but is not secured. This means that the configuration could be read by third-parties. You should not put sensitive or secret information into your Remote Settings. Similarly, the saved settings file could be read and modified by end-users (although any modifications are overwritten the next time a session starts with an available Internet connection)."

    The question: Has anyone tried reading and/or modifying that saved settings file (on the built game) on client-end side? I'd like to test how not-so secure Remote Settings is.
     
    Last edited: May 29, 2018
  2. ap-unity

    ap-unity

    Unity Technologies

    Joined:
    Aug 3, 2016
    Posts:
    1,049
  3. Zarashi99

    Zarashi99

    Joined:
    Jun 11, 2015
    Posts:
    7
    Holy crap! Thanks for the link to the manual.

    And thank you so very much for passing the feedback to the Unity dev team. <3
    You rock! :)