In-App Purchase Vulnerability to Be Fixed in iOS 6; Apple Offers Best Practices to Developers - MacRumors
Skip to Content

In-App Purchase Vulnerability to Be Fixed in iOS 6; Apple Offers Best Practices to Developers

As noticed by 9to5Mac, Apple has offered developers a series of best practices to prevent the In-App Purchase vulnerability, as well as promising a full fix in iOS 6. The advisement was sent to developers in an email today.

NewImage
CNET was issued this statement by Apple:

"We recommend developers follow best practices at developer.apple.com to help ensure they are not vulnerable to fraudulent In-App purchases," Apple spokesperson Tom Neumayr told CNET. "This will also be addressed with iOS 6."

Apple issued this note to developers on the iOS Developer webpage, along with a series of suggestions to help verify that in-app purchases are legitimate:

A vulnerability has been discovered in iOS 5.1 and earlier related to validating in-app purchase receipts by connecting to the App Store server directly from an iOS device. An attacker can alter the DNS table to redirect these requests to a server controlled by the attacker. Using a certificate authority controlled by the attacker and installed on the device by the user, the attacker can issue a SSL certificate that fraudulently identifies the attacker’s server as an App Store server. When this fraudulent server is asked to validate an invalid receipt, it responds as if the receipt were valid.

News of the in-app purchase hack broke a week ago, and Apple has made several attempts to prevent users using the hack. It allows users to avoid paying for in-app purchases by using a third-party server as a "man-in-the-middle" attack. Apple now includes the UDID identifier in in-app purchase receipts in an attempt to increase the security of purchases.

Popular Stories

iPhone Duo Display Cracking

Apple Alerts Stores to iPhone Duo's Display Cracking Issue

Friday October 30, 2026 3:20 pm PDT by
In a memo shared with Apple Stores and Apple Authorized Service Providers this week, and later obtained by MacRumors, Apple provided technicians with guidance on how to diagnose and address the iPhone Duo's inner display cracking issue. If a customer reports the issue, Apple advised technicians to inspect the iPhone Duo and repair or replace it in accordance with their standard procedures....
apple pro tell logo

Apple Launching Five New Products This Friday

Monday November 2, 2026 1:22 am PST by
Apple is releasing five new products this Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models. The following new products will be available from Friday: iPad mini with OLED display and A20 Pro chip iMac with M6 chip 14-inch MacBook Pro with M6 chip 14-inch MacBook Pro with OLED touchscreen 16-inch MacBook Pro with OLED...
Everything New Your iPhone Can Do on iOS 27

14 New Things Your iPhone Can Do in iOS 27.2

Friday October 30, 2026 12:42 pm PDT by
Apple released iOS 27.2 on October 26, bringing enhancements to Siri AI, adding Suggestions in Messages, and sneaking in a string of smaller additions across Photos, Podcasts, Games, Apple TV, and FaceTime. iOS 27.2 is available to download to your device now via Settings ➝ General ➝ Software Update. Note that some features may not be available in all regions or on all iPhone models....

Top Rated Comments

ideal.dreams Avatar
186 months ago
I'm so-so on this. I can understand paying in-app for an application you initially downloaded for free, but if you've already paid for an app, why should you have to pay MORE to gain enhancements? I'm all for supporting the developers, believe me, I know that they work hard and it's a steady income for most, but I'm not going to find myself paying additional money for something in an app that I've already paid for to get more from the app.
Score: 6 Votes (Like | Disagree)
WardC Avatar
186 months ago
Apple needs to step in and make in-app purchases illegal altogether...all that stuff is just a ploy and gimmick to make developer's more money. If I am paying for an application, I don't want "half-ass" functionality which requires 10-100x what I paid for the app to get to use all the features. That is just ridiculous!

The way I basically see it, is the in-app purchases (especially games) feed on a user's craving for "more" out of the game. When a user realizes they cannot advance in a game or achieve a goal in the game without the in-app purchase, they will tap a button and charge a fee to their Apple Store account. A few of these "taps" and the user feels comfortable using this feature....and before you know it, they have tacked on $200 in fees for a $2.99 or FREE game download originally. The whole thing feeds on an addictive-nature to get you "hooked" on using the in-app purchases with the game....and it's making developer's bookoos of money. Now that a hacker has circumvented this, devs are crying about it, but the truth of the matter is in-app purchases are an evil, luring, deceptive, scheming beast altogether to sucker the public into forking over their wallets!!!

And that, my friends, is the reason I refuse to download and use apps and games with the in-app purchase feature. It's a gimmick made by *greedy greedy* developer types, and I am not buying into any of that junk, at all. Just not worth it.
Score: 5 Votes (Like | Disagree)
186 months ago
Some of the in-app purchases are just ridiculous but still doesn't mean you should cheat a developer out of money. They need to make a living too.
Score: 5 Votes (Like | Disagree)
charlituna Avatar
186 months ago
Apple needs to step in and make in-app purchases illegal altogether...all that stuff is just a ploy and gimmick to make developer's more money.

It's a free market. I have the power to choose how I develop and sell my IP. If you don't like it, don't buy it. Simple.

And not all IAP use is of this sort, some of it is for removing ads etc. And in some cases the games (which are what commonly use this ploy) are still playable although at a slower rate without playing. Or like Temple Run let you earn in game coins to buy the enhancements
Score: 4 Votes (Like | Disagree)
186 months ago
What i find interesting is that when pirates normally try to justify their actions - they usually use the high price of software as an excuse, and that if prices were cheaper.. They'd stop doing it.

If you're enjoying a developers hard work and not paying for it - then you are stealing that developers time. It'd be akin to going to a barbers - getting a haircut and not paying for it... You've not stolen anything physical from him, but you have stolen his time from him - he gave you a service, you didn't pay.

You can try to justify that however you like, but that barber gave you a service you didnt pay for, and as such you have just stolen from him. Same goes for software development - people spend their time to make something for you to enjoy - if you benefit from it and havent paid for it, that is theft. Pure and simple.

If you worked for your boss for a month, only for him to refuse to pay you at the end of that.. And just laughed it off as "piracy" - how would that make you feel? He's got the benefit of your work but refused to pay you for it.

I put a LOT of time and effort into my software - if i cant put food on the table because people are ripping my work off... then i'll stop doing it.. If everyone did that - then you'd have nothing left to pirate.

I guess that's just the way the self-entitled nature of todays kids are...
Score: 4 Votes (Like | Disagree)
nagromme Avatar
186 months ago
I'm so-so on this. I can understand paying in-app for an application you initially downloaded for free, but if you've already paid for an app, why should you have to pay MORE to gain enhancements? I'm all for supporting the developers, believe me, I know that they work hard and it's a steady income for most, but I'm not going to find myself paying additional money for something in an app that I've already paid for to get more from the app.
How will I pay for making new levels for my game (no, I don’t really have one—right now) if you think all additions should be made free?

Never buy a game that isn’t worth the price you paid, “right out of the box"; reviews will help, and if you get ripped off I fee your pain.

And if the game IS worth what you paid, then there’s no need to get any more value, for free, out of the programmer’s sweat and dreams.

Therefore, buy the add-ons if they’re worth it, skip them if they’re not, but don’t steal them.

Some companies charge absurd prices for their games. Some do that for their IAP. Skip those companies, rather than spreading hacks that hurt everyone.


Apple needs to step in and make in-app purchases illegal altogether...all that stuff is just a ploy and gimmick to make developer's more money. If I am paying for an application, I don't want "half-ass" functionality which requires 10-100x what I paid for the app to get to use all the features. That is just ridiculous!

The way I basically see it, is the in-app purchases (especially games) feed on a user's craving for "more" out of the game. When a user realizes they cannot advance in a game or achieve a goal in the game without the in-app purchase, they will tap a button and charge a fee to their Apple Store account. A few of these "taps" and the user feels comfortable using this feature....and before you know it, they have tacked on $200 in fees for a $2.99 or FREE game download originally. The whole thing feeds on an addictive-nature to get you "hooked" on using the in-app purchases with the game....and it's making developer's bookoos of money. Now that a hacker has circumvented this, devs are crying about it, but the truth of the matter is in-app purchases are an evil, luring, deceptive, scheming beast altogether to sucker the public into forking over their wallets!!!

And that, my friends, is the reason I refuse to download and use apps and games with the in-app purchase feature. It's a gimmick made by *greedy greedy* developer types, and I am not buying into any of that junk, at all. Just not worth it.
You’re making the mistake of assuming that ALL IAP works the same and is a rip-off. It’s not.

And how do you know whether a developer is greedy or not? Maybe they should include all 500 levels in the original $1 game, say, and not just 200. But do we know what it cost him to develop that app and those levels? Do we know what his rent, food and health care cost? Are we asking him to give us more for free than we’d be willing to in his shoes?

I think it’s fair for a developer to set any kind of business model they want, as long as they’re honest about what it is. You can then skip those games that aren’t worth it to you.
Score: 4 Votes (Like | Disagree)
Latest Stories
Apple CEO Ternus Says iPhone Duo Shortages Have No End Date in Sight
Apple CEO Ternus Says iPhone Duo Shortages Have No End Date in Sight
47 minutes ago
Apple Reports 4Q 2026 Results: $30.7B Profit on $114.5B Revenue
Apple Reports 4Q 2026 Results: $30.7B Profit on $114.5B Revenue
1 hour ago
Early Black Friday Brings Steep Price Drops on Apple's Latest iPhone Cases
Early Black Friday Brings Steep Price Drops on Apple's Latest iPhone Cases
4 hours ago
John Ternus Hosting His First Earnings Call as Apple CEO Today
John Ternus Hosting His First Earnings Call as Apple CEO Today
5 hours ago
Here's What Spotify Looks Like on Apple's HomeView
Here's What Spotify Looks Like on Apple's HomeView
6 hours ago
iOS 27.2.1 Coming Soon, iOS 27.3 Beta Likely Available Tomorrow
iOS 27.2.1 Coming Soon, iOS 27.3 Beta Likely Available Tomorrow
7 hours ago
Mark Gurman: Apple Initially Aimed to Release iPhone Duo in November
Mark Gurman: Apple Initially Aimed to Release iPhone Duo in November
7 hours ago
Best Early Black Friday Deals on Apple Products Available Now
Best Early Black Friday Deals on Apple Products Available Now
7 hours ago
Apple Isn't Done With 2026: Here's What's Still Coming
Apple Isn't Done With 2026: Here's What's Still Coming
7 hours ago
Apple 'HomeView Ultra' With 9-Inch 360º Screen Detailed in New Report
Apple 'HomeView Ultra' With 9-Inch 360º Screen Detailed in New Report
8 hours ago
Apple TV 4K Pre-Order Discount Returns at Amazon
Apple TV 4K Pre-Order Discount Returns at Amazon
8 hours ago
Zoom and These Microsoft Apps Now Optimized for iPhone Duo
Zoom and These Microsoft Apps Now Optimized for iPhone Duo
9 hours ago
Canva Brings Free All-in-One Affinity App to iPad
Canva Brings Free All-in-One Affinity App to iPad
9 hours ago
iPhone Duo: Latest Buyer Wait Times
iPhone Duo: Latest Buyer Wait Times
10 hours ago
iPhone Duo Owners Can't Change Display Zoom After Setup
iPhone Duo Owners Can't Change Display Zoom After Setup
7 hours ago
Apple HomeView Could Double as a Security Camera
Apple HomeView Could Double as a Security Camera
13 hours ago
Apple Launching Five New Products This Friday
Apple Launching Five New Products This Friday
13 hours ago
Nearly Every M5 MacBook Air Now $200 Off on Amazon
Nearly Every M5 MacBook Air Now $200 Off on Amazon
1 day ago
Apple's HomeView Ships With Six-Month-Old Software
Apple's HomeView Ships With Six-Month-Old Software
1 day ago
Three New iPads Rumored to Launch in First Half of 2027
Three New iPads Rumored to Launch in First Half of 2027
1 day ago
Apple Offers Steps to Fix Daylight Saving Time Bug on Apple Watch
Apple Offers Steps to Fix Daylight Saving Time Bug on Apple Watch
1 day ago
Apple Watch Ultra 4 Hits All-Time Low Price With Amazon's $99 Discount
Apple Watch Ultra 4 Hits All-Time Low Price With Amazon's $99 Discount
2 days ago
Reminder: Apple's Big Discount on Beats 360 Ear Cushions Ends Today
Reminder: Apple's Big Discount on Beats 360 Ear Cushions Ends Today
2 days ago
Here's a New Tour of Apple's HomeView Software
Here's a New Tour of Apple's HomeView Software
2 days ago
Apple Reveals New iPad Mini's Battery Capacity
Apple Reveals New iPad Mini's Battery Capacity
2 days ago
Top Stories: Apple's Big MacBook Pro, iPad mini and iMac Updates
Top Stories: Apple's Big MacBook Pro, iPad mini and iMac Updates
2 days ago
'Pluribus' Season 2 Reportedly Starts Production Today
'Pluribus' Season 2 Reportedly Starts Production Today
3 days ago
iPhone 18 Pro Sales Surge in China, Offsetting Decline in U.S. and Japan
iPhone 18 Pro Sales Surge in China, Offsetting Decline in U.S. and Japan
3 days ago
HomeView Software 27.2: Wallpapers, Control Center, and More
HomeView Software 27.2: Wallpapers, Control Center, and More
3 days ago
Apple Alerts Stores to iPhone Duo's Display Cracking Issue
Apple Alerts Stores to iPhone Duo's Display Cracking Issue
3 days ago