In-App Hacker Back At It, This Time With OS X

Cult of Mac writes, This hurts more than just Apple. Now that Apple is fixing the in-app purchasing exploit that Russian hacker Alexei Borodin brought to light this week, it seems as if he’s at it again. This time, however, it’s an in-app purchasing hack that works in the Mac App Store. The method here is similar as the one Borodin used in iOS, with the user installing some fake security certificates and then pointing the Mac’s DNS servers at a false server run by Borodin. The remote server then pretends to be the actual Mac Store and verifies the purchase, bypassing the real system for in-app...

Continue reading In-App Hacker Back At It, This Time With OS X at Cult of Mac