Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
In-app purchasing exploit discovered for OS X apps
Posted by Philipp Esselbach on: 07/21/2012 10:05 AM [ Print | 0 comment(s) ]
Apple Insider posted a story that the same Russian hacker who crafted the iOS in-app purchasing workaround, the so-called "In-Appstore for OS X" uses a similar receipt-spoofing method to bypass Apple's validation system to get paid content for free, reports The Next Web.
Alexey Borodin's newest exploit uses the same DNS server routing and receipt spoofing method outlined in previous reports to fool apps into validating dubious in-app purchases.
The system requires a user to install local certificates on their Mac and route purchases to a specially-created DNS server hosted by Borodin. The server, set up to be a replica of the Mac App Store, then sends back a spoofed receipt verification.
The system requires a user to install local certificates on their Mac and route purchases to a specially-created DNS server hosted by Borodin. The server, set up to be a replica of the Mac App Store, then sends back a spoofed receipt verification.
In-app purchasing exploit discovered for OS X apps
