[pilif]

Yes. Unpack the .ipa file (it's just a ZIP archive) and then use any ARM disassembler on the actual binary.

It'll be harder, but not impossible to do (as we've seen by the twitter app API secret leaking some time ago).

[josso]

Wouldn't you need to decrypt, on a jailbroken device, it to get something useful out of the assembly? Or is that not needed for disassembling?

[smackfu]

The binaries are not encrypted, they're just signed.

[0x0]

Is that a new thing? Last I checked, the executable was heavily encrypted in the code section..

[pugz]

The binaries are indeed encrypted, as evidenced by running "otool -l <binary>|grep cryptid". Why do you think otherwise?

[smackfu]

Sorry was just wrong.

[benmanns]

How does one get to the .ipa file?

[fragmede]

it's in the iTunes directory on your computer