Categories: Tech & Society

How Apple Is Fighting iOS In-App Purchase Hack

On Friday, Apple issued a brief statement that it was looking into a published workaround that lets iOS users get in-app purchase content for free. It doesn’t look like Apple has found a true solution yet. But it’s certainly been busy this weekend, including taking down the original demonstration video on YouTube and getting PayPal to block donations.

The workaround was published last week by Alexey Borodin, a Russian hacker who demonstrated in a (now inaccessible) video on YouTube that with the installation of two certificates and a tweak to an iPhone’s Wi-Fi settings, he could bypass the step that requires payment for extra content within some iOS apps. (Macworld has more detail on how he’s doing it.)

By Friday afternoon, an Apple representative told us the company was “investigating.”

Here’s what Apple has done since then, according to The Next Web:

Over the weekend, Apple began blocking the IP address of the server used by Russian hacker Alexey V. Borodin to authenticate purchases.

It followed this up with a takedown request on the original server, taking down third-party authentication with it, also issuing a copyright claim on the overview video Borodin used to document the circumvention method. PayPal also got involved, placing a block on the original donation account for violating its terms of service.

What Apple hasn’t done? Actually gotten in touch with Borodin, according to the report.

And Borodin isn’t backing down, he says he has responded to Apple’s manuevers by moving his server to another (unnamed country) and is using a different PayPal account to gather donations for his project. So, while Apple is attempting to contain this security breach, developers can’t rest easy yet — the problem has not yet been solved.

Via: GigaOm

Prateek Panda

Prateek is the Founder of TheTechPanda. He's passionate about technology startups and entrepreneurship and enjoys speaking to new founders every day. Prateek has also been consistently regarded as one of the top marketing experts in the region.

Recent Posts

AI Launches: Fintech, software development, search, no code, skilling, ecommerce, data storage, data center & AI research

The Tech Panda takes a look at recent launches in the superfast field of Artificial…

10 hours ago

Empowering businesses with Unified Device Management: Streamline security & productivity across platforms

In a modern business, device diversity is not just an operational reality; it is the…

2 days ago

Can taxes cool down AI & crypto’s power hunger? The IMF’s betting on it

We already know that because of the electricity used by high-powered equipment to “mine” crypto…

2 days ago

All our eggs in one cloud: When AWS sneezed & the Internet caught a cold

The recent service outage that Amazon Web Services (AWS) experienced in the US brought several…

5 days ago

Can AI help manage the new threat to our environment caused by AI?

Can we make data centers smart and green? Warning about AI’s electricity consumption speed was…

7 days ago

New tech on the block: Fintech, crypto, cleantech, blockchain & cybersecurity

The Tech Panda takes a look at recent tech launches. Fintech: ICICI Bank & Visa…

1 week ago