Categories: Tech & Society

How Apple Is Fighting iOS In-App Purchase Hack

On Friday, Apple issued a brief statement that it was looking into a published workaround that lets iOS users get in-app purchase content for free. It doesn’t look like Apple has found a true solution yet. But it’s certainly been busy this weekend, including taking down the original demonstration video on YouTube and getting PayPal to block donations.

The workaround was published last week by Alexey Borodin, a Russian hacker who demonstrated in a (now inaccessible) video on YouTube that with the installation of two certificates and a tweak to an iPhone’s Wi-Fi settings, he could bypass the step that requires payment for extra content within some iOS apps. (Macworld has more detail on how he’s doing it.)

By Friday afternoon, an Apple representative told us the company was “investigating.”

Here’s what Apple has done since then, according to The Next Web:

Over the weekend, Apple began blocking the IP address of the server used by Russian hacker Alexey V. Borodin to authenticate purchases.

It followed this up with a takedown request on the original server, taking down third-party authentication with it, also issuing a copyright claim on the overview video Borodin used to document the circumvention method. PayPal also got involved, placing a block on the original donation account for violating its terms of service.

What Apple hasn’t done? Actually gotten in touch with Borodin, according to the report.

And Borodin isn’t backing down, he says he has responded to Apple’s manuevers by moving his server to another (unnamed country) and is using a different PayPal account to gather donations for his project. So, while Apple is attempting to contain this security breach, developers can’t rest easy yet — the problem has not yet been solved.

Via: GigaOm

Prateek Panda

Prateek is the Founder of TheTechPanda. He's passionate about technology startups and entrepreneurship and enjoys speaking to new founders every day. Prateek has also been consistently regarded as one of the top marketing experts in the region.

Recent Posts

Once more with feeling: An ambitious bid to build a digital Disneyland for fans

This entrepreneur, who entered the startup ecosystem when he was only thirteen years old, wants…

5 days ago

From UPI to Web3: How India’s fintech wave is reshaping the future of payments

India’s fintech sector is accelerating at breakneck speed, with digital payments becoming the new default…

1 week ago

AI Launches: SaaS, content management, ecommerce, cybersecurity, logistics, entertainment, & investment

The Tech Panda takes a look at recent launches in the superfast field of Artificial…

2 weeks ago

M&A: The art of the deal

The Tech Panda takes a look at recent mergers and acquisitions within various tech ecosystems…

2 weeks ago

AI companion: From comfort to concern, are we flirting with “Addictive Intelligence”?

Strange are the ways in which Artificial Intelligence (AI) has been offering us humans companionship.…

2 weeks ago