Apple offers developers a workaround for in-app purchasing exploit

apple app store apps

In an unusual move, Apple is offering iOS application developers a workaround for the exploit that enables iOS users to make free in-app purchases. Apple says the exploit will be fixed in the forthcoming iOS 6.0, but in the meantime Apple is explicitly giving developers permission to tap into private Apple iOS APIs to verify certificates that purport to be from the App Store. Historically, Apple has summarily rejected iOS applications that rely on accessing any private API.

The exploit, which gained notoriety last week, was developed by Russian hacker Alexey Borodin, although there’s really nothing from stopping other motivated individuals from using the same approach. Borodin forged security certificates that claim to be from Apple, then set up his own DNS servers to respond as if they were Apple’s App Store. When applications tried to make in-app purchases, Borodin’s exploit essentially hijacked the process and provides spoofed receipts so the apps will unlock or access additional features or content.

Apple’s workaround is not exactly painless for developers — they will have to update their existing iOS applications to be able to validate store receipts — but at least it’s a solution that can be deployed now and support in-app purchasing prior to iOS 6. Similarly, if applications have not saved their store receipts, they will not be able to validate purchases.

Apple has steadily recommended that developers using in-app purchases follow “best practices” and validate receipts using their own servers or services independent from the App Store to avoid these kinds of man-in-the-middle attacks. Of course, developers should also take care their their own validation process cannot be attacked in a similar manner.

Mobile

Apple's iOS 13 will reportedly offer a systemwide Dark Mode and windowed apps

iOS 12 was a relatively large update to Apple's iPhone, but iOS 13 could be even bigger. Rumors have begun circulating about what we should expect from iOS 13, which suggest a much more productive operating system for both iPhone and iPad.
Deals

It’s time to check out the best Apple Watch deals for April 2019

The Apple Watch has surged to prominence in recent years. If you're in the market for an iOS wearable, we've sniffed out the best Apple Watch deals available right now for all three models of this great smartwatch.
Deals

Need a new tablet? Here are the best iPad deals for April 2019

In the wide world of tablets, Apple is still the king. If you're on team Apple and just can't live without iOS, we've curated an up-to-date list of all of the best iPad deals currently available for April 2018.
Mobile

Apple adds Confirm Subscription prompt on iOS to prevent accidental sign-ups

Apple added a Confirm Subscription prompt for in-app subscriptions. This will help prevent accidental sign-ups for iOS device owners, and will also protect them against apps that try to trick users into confirming in-app subscriptions.
Social Media

How to download Instagram Stories on iOS, Android, and desktop

Curious about how to save someone's Instagram Story to your phone? Lucky for you, it can be done -- but it does take a few extra steps. Here's what you need to know to save Instagram Stories on both iOS and Android.
Gaming

Apple Arcade reportedly supported by investments of more than $500 million

Apple Arcade will reportedly be supported by investments worth more than $500 million. Apple is also said to be offering incentives to developers if they decide to release their games as mobile exclusives for Apple Arcade.
Home Theater

Beats Powerbeats Pro: Everything you need to know about the earphones

Apple will release a fully wireless pair of earphones in May from its Beats brand. The Powerbeats Pro earphones have impressive features to compete with the AirPods, along with a litany of other options. Here's everything we know.
Mobile

Apple has a weird issue with its second-generation Pencil

Apple has a bizarre issue with its second-generation Pencil. The company says that if it's in charging mode and is positioned close to a car's key fob, interference can prevent the device from unlocking the vehicle.
Deals

Decluttr is offering a refurbished iPhone 6 for as little as $120

Decluttr announced a deal on its "good" condition iPhone 6. Through Decluttr, you can get the device for as little as $120, which is an excellent deal on the phone. The iPhone 6 may be a few generations old, but it's still a great device.
Computing

MacOS update may include external display support for iPads

Apple's upcoming MacOS is rumored to include a new native external display support feature. Code-named "Sidecar" the new feature is expected to allow MacOS computers to send app windows to external displays like iPads.
Deals

Apple’s MacBook laptop is on sale for just $800 for a limited time

If you have your heart set on a MacOS-powered laptop, B&H has a sale on Apple's MacBook that takes the price down to $800. Only select models are on sale right now, but you can score up to a $600 savings if you act quickly.
Mobile

You've spent a grand, now don't skimp on a screen protector for your iPhone X

Wondering how to protect your new iPhone X against scratches and drops? Look no further than our list of the best iPhone X screen protectors, which includes screen protectors designed to reinforce your phone's front panel.
Mobile

Apple and Qualcomm settle all disputes, reach six-year agreement on chips

Apple and Qualcomm have announced that they have settled all disputes between them around the world -- and not only that, but have also agreed to a six-year agreement for Qualcomm to supply Apple with chips.
Deals

Looking to upgrade? These are the best iPhone deals for April 2019

Apple devices can get expensive, but if you just can't live without iOS, don't despair: We've curated an up-to-date list of all of the absolute best iPhone deals available for April 2019.