How to order application coding from Freelancer and checking it for malware?

[Camp59]

So I'm in a middle of ordering an application programming for a smartphone. How can I be sure that there isn't any malicious code inserted there that could steal my data or information, co sidering the info added to the app will provide some decent value?

The developer knows this as well, so what to do in such situation? The app cost is just 1000 $ and I'm afraid they might steal the information afterwards.

Should I hire a separate developer to take a look at the application for exploits or malicious code?

Thanks.

 

[jazzc]

Unless you can read/understand the code you can't do much. If you're technical otherwise, you could sniff the network traffic and see if the app calls home with your data. And then of course, you'll need to compile your own binary because a malicious actor can give you a clean source code but different binary.

 

[TomTheCat]

Find a friend, that knows another programming language, if he doesn't know Java, so he can take a look at it. Also, when you do this, give him parts of the code, not the full code.

 

[Camp59]

Unless you can read/understand the code you can't do much. If you're technical otherwise, you could sniff the network traffic and see if the app calls home with your data. And then of course, you'll need to compile your own binary because a malicious actor can give you a clean source code but different binary.

Find a friend, that knows another programming language, if he doesn't know Java, so he can take a look at it. Also, when you do this, give him parts of the code, not the full code.

Yeah I dont have such a friend unfortunately.

I need to find a service who can do this, the code itself is almost worthless, as it's cheap application, but since I plan to add tons of social media accounts in it, I'm afraid to lose those.

Can you tell me such service name in English? I think there is a specific term for this than just a pentester?

Regards.

 

[TomTheCat]

Can you tell me such service name in English? I think there is a specific term for this than just a pentester?

The specific term is 'mobile developer'. Since you said the code is almost worthless, I suggest you hire someone on Freelancer, Upwork, that will look over the code and tells you how to compile it. If he says the code is okay, and you learn how to compile it (it's not a tech savvy thing - just a few buttons, after the project is created/imported), then you should be fine.