Russian Hacker Bypassed Apple’s In-App Purchasing Mechanism

According to 9to5Mac, a Russian hacker has published a relatively simple method that allows users to obtain in-app purchases from many iOS apps for free.

The method, which doesn’t require a jailbreak, involves installation of two certificates on the user’s iOS device and changing DNS entry in wi-fi settings. Then users can perform purchases of in-app content as usual.

Apart from the theft of in-app content from developers, the hack also poses risks to those who use the method, as some of their own private information is sent to the hacker’s servers during the process of in-app purchasing. So users are strongly recommended not to use this method.

The developer has already been evicted from his host and has reportedly moved to a new host. The website is currently down, but it remains unclear whether the site is down due to high traffic or other steps taken to prevent his activities.