|
Written by Wayne
|
|
Sunday, 22 July 2012 05:12 |
|
While Apple was hard at work coming up with a fix for Russian hacker Alexey Borodin’s iOS in-app purchasing exploit, the wily hacker has unveiled a similar exploit for in-app purchases on Mac OS X. The latest hack, which affects OS X 10.7 and above (earlier versions don’t support in-app purchases), also relies on tricking Apple’s very basic receipt system for in-app purchases. Borodin’s latest exploit method doesn’t differ too much from his original iOS hack: You simply need to install two system certificates, change your DNS settings to point to his server, and use a new app call "Grim Receiper." The app is the only unique element of the Mac OS X hack, and it serves to keep track receipts for you to reuse, according to Borodin’s explanation. Basically, Borodin is taking advantage of Apple’s shortsightedness when it comes to in-app purchases. Instead of tying purchases directly to customer’s user accounts or devices...Get better informed by paying a visit to Our Forum.
|
