Russian Hacker Makes In-App Purchases Free On iOS

Become a fan of Slashdot on Facebook

DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's now on IFTTT. Check it out! Check out the new SourceForge HTML5 Internet speed test! ×

Submission + - Russian Hacker Makes In-App Purchases Free On iOS (techweekeurope.co.uk)

Submitted by

judgecorp

on Monday July 16, 2012 @06:43AM

judgecorp writes: "Russian Hacker Alexey Borodin is giving free upgrades and other in-app purchases to freemium iOS apps, using a server which spoofs the receipts for in-app payments for iOS apps. It's a man-in-the middle attack, made easy by the fact that Apple uses generic messages for those receipts so they can be easily reproduced by Borodin's fake Apple server.
"

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.