Oz app developers concerned over Russian hacker’s iOS programme limiting ‘in-app purchase’ revenue

Sydney: Australian application developers have expressed concerns about hack a Russian programmer, allowing users to Apple to steal the contents paid application, which posed a threat to the revenues generated by in-app purchases " .

The developers claim that the exploit is worrying and could limit the ability for app makers make money from their applications.

Earlier, a Russian hacker Alexey Borodin, have discovered a method to steal the content from applications iOS app by making purchases without paying money.

In a video posted on YouTube by Borodin, he emphasized how users can avoid paying for in-app purchases without having to gain root access on the system, and all they had to do was to installing two safety certificates and change the DNS settings on their device.

Although Apple recently released iOS 6 beta 3 for developers, the patch failed to block Borodin'' s feat.

Australian Mathew Peterson app developer has warned users not to install the hack.

"As you use a third DNS server, there is potential for private information such as bank details, to be intercepted and stolen. This Russian boy does not seem the most careful to date," Sydney Morning Herald quoted Peterson as saying.

The exploit does not work with all applications, but many people like Run Temple, the report said.

Robert Kawalsky, the Australian founder of the Tonight! app, which does not use in-app purchasing, said that many developers relied on the "in-app purchases to make their applications financially viable and they rely on Apple for safety and treatment payments.

"This bug is definitely a concern for the developer community," he said.

Apple 'investigating' in-app purchase fraud

More than 30,000 illegal in-app purchases in iOS have occurred as a result of a Russian hacker. Photo: YouTube

Apple is investigating fraudulent activity following reports of a Russian hacker who found and published a way to make illegal in-app purchases.

The Cupertino, California, company said it was looking into the reports.

"The security of the App Store is incredibly important to us and the developer community," said Natalie Harrison, an Apple spokeswoman. "We take reports of fraudulent activity very seriously, and we are investigating."

Alexey Borodin discovered a method to steal content from iOS apps by making in-app purchases without actually paying any money. In-app purchases are most commonly found in free games that entice you to spend a little money to enhance your gaming experience.

In a video, posted by Borodin, the Russian hacker is seen applying the method to various apps, including Temple Run. The video has since been removed from YouTube "due to a copyright claim by Apple".

Advertisement 

The method was first reported in English by 9 to 5 Mac early Friday in the US, and later in the day, the Next Web, which spoke with Borodin, said that more than 30,000 illegal purchases had been made using it.

This is the third embarrassing episode for Apple and its App Store in July.

Earlier, a malware app that would spam users' contacts with text messages was discovered by a security firm to have gotten into the App Store. It is believed to be the first time malware made its way into Apple's mobile ecosystem.

That was followed by a weird episode around the Fourth of July when apps that had recently been given an update were crashing inexplicably. That led to mass amounts of negative feedback in the form of one-star reviews for developers - which is never a good thing for an app - but Apple was able to resolve the issue and remove the negative reviews.

It's unclear if or how Apple can make it up to developers after Friday's issues.

Read more: http://www.brisbanetimes.com.au/digital-life/smartphone-apps/apple-investigating-inapp-purchase-fraud-20120716-224uu.html#ixzz20xid8800

Apple’s Attempts To Shut Down In-App Purchase Circumvention Continue

A Russian hacker named Alexey Borodin has become a serious bee in Apple’s bonnet. Recently, he created a service that allows App Store users to circumvent the Apple authentication server, and get in-app purchases for free. Over this past weekend, Apple has made moves to shut him down, but have been seemingly unsuccessful in doing so.

Apple’s attempts to shut him down included issuing a take down request on Borodin’s surrogate authentication server, and a copyright claim on Borodin’s YouTube video that explained how to get this hack working. Unfortunately, none of this will be more than a temporary solution if they’re not going to fix the underlying security flaws that let it happen in the first place, and they haven’t done so yet. Alexey was able to set up a new fake-authentication server already, this time hosted in “an offshore country” where Apple will have a tougher time getting to it, instead of his home country of Russia.
PayPal also moved to shut down the account Alexey was receiving donations to, but he has simply moved to other payment options. The site for the project now shows the Bitcoin address at which donations can be received.

As of now, the hacker’s service is still up and running at In-Appstore.com, where instructions can be found on how to get your in-app purchases for free. Borodin pointed out to The Next Web that Apple has made no attempts to contact him directly, despite not hiding his identity at all.
Until Apple moves to deal with the underlying security flaws in their authentication system, one has to imagine that no amount of DMCA takedowns or copyright claims on YouTube are going to close this vulnerability. Perhaps Apple should consider handing Borodin an information security contract, and letting him show them how to fix the vulnerability he himself has found.

AOSP 4.1.1 released: Developers, start your engines!

Android Open Source Project Lead Jean-Baptiste Queru announced on the group building official that Android Android 4.1.1, Jelly Bean was published in the AOSP. The release will be tagged as android-4.1.1_r1 in AOSP, a slight bump in the version of the Google I / O 2012 developer preview release. The ".1" is most likely the last few minute bug fixes or changes. The Android 4.1.1 binaries (JRO03C) were also released for the Nexus GSM Galaxy (maguro), Verizon Galaxy Nexus (toro), and the new Nexus 7 (grouper). The Nexus S and Motorola Xoom will soon follow. Jelly Bean the complete code can be downloaded source once it is made to download and reproduce. JBQ think it will be around 9:00 p.m. EST. Once completed, developers can start downloading here.

What does this mean for those who like to flash custom ROM? First, be patient. It takes a long time to download and build Android. Second, development teams such as amazing CyanogenMod are already at work. Later that evening, they will start doing what they do best, coding Android. We will not see any CM10 official nightly builds for now, so hold your horses.

That said, simply because the CM works on merging their changes to the source Jelly Bean, does not mean that we will not see official stock AOSP built for devices listed shortly. The Android community continues to amaze us, we might just see a little pop up later tonight ROM or early tomorrow morning. Keep your fingers crossed.

Jelly Bean 4.1.1 Build JRO03C Rolling Out Now to HSPA+ Galaxy Nexus and Nexus 7

Jelly Bean 4.1.1 Build JRO03C Rolling Out ​​Now for HSPA Galaxy Nexus and Nexus 7
by Derek Ross on July 10, 2012 with 6 comments

Following the publication of source code Jelly Bean yesterday, today Google has announced via his account on Google Android that Nexus 4.1.1 Jelly Bean began to roll toward the supported devices. Devices for Awesomeness Jelly Bean will be the first HSPA Galaxy Nexus and the Nexus 7.

If you use an official or yakju Takju build your Nexus HSPA Galaxy, you can start checking for updates now by going to Settings> About update the system> and see if you can get the update . If you were lucky enough to hang on July 1 Nexus already, you too can start spamming your key update.

The changelog for the 4.1.1 build 7 Nexus offers some goodies such as performance and overall system responsiveness. The OTA update also adds Google Wallet. Users are also reports that access to Google through the motion of slip-up now to be much smoother and landing page Google now appears slightly faster.

When other devices Nexus get Jelly Bean? There is no official word, but the post did mention that Google's next devices to get Jelly Bean include all Galaxy Nexus, Nexus S, and Motorola Xoom. Let's all keep our fingers crossed for updates in a timely manner.

Once you get Jelly Bean, be sure to check out some of the Jelly Bean import more new features and how to install and use Google now.

Jelly bean leaps over ICS

Google I / O 2012: All you need to know about Jelly Bean

Google released the next version of its Android OS to its I / O conference in San Francisco yesterday. Jelly Bean aka Android 4.1 will be deployed in mid-July. Google also launched the Nexus 7 tablets to be held on the last operating system.

So what are the main features and enhancements in Jelly Bean? Here's a look:

Butter project: Jelly Bean aims to ensure that your quad-core Android runs much faster and smoother, like butter. Enter butter project, much like a performance for the phone enchancer of. According to CNET, it uses Triple Buffering and VSync to improve responsiveness touch.

And, according to Engadget with butter project, the whole system humming along at 60 frames per second (fps) now. The animations are smoother and faster. The CPU immediately ramps up to that time a key is detected to ensure a prompt response.


Hugo Barra, director of product management for Google unveils Android 4.1 "Jelly Bean" mobile operating system at Google I / O 2012 conference at the Moscone Center. Reuters

Google has shown the difference between ICS and Jelly Bean by running the two together at the conference. The speed difference was quite obvious.

Sharper Notifications: Google new OS will also provide telephone notification to a whole new level. Slide by Google notifications have always been ahead of the curve, and Jelly Bean it just got bigger and better.

According to TechCrunch, if you missed a call, you can call or text the contact directly from the notification of the widget. All new Gmail messages are available right from the tab notifications, which prevents users from having to switch between applications.

Notifications are now synchronized with social media such as Google and Foursquare and more, and users can respond to messages notifications itself. Users also have the opportunity to expand individual notifications.

Now Google: Google's answer to Apple Siri is here and it seems to have impressed high-tech junkies. Google will now answer your questions in a human voice a bit like Apple is Siri. It seems to be pretty smart, because he will tell you which restaurant or choose which road to take when you walk or when you have a meeting.

The bit creepy: the search results will be based on your search history.

Android Width: Jelly Bean comes with Near Field Communication (NFC) capabilities. Samsung released after S-Beam in the last of their phone S III and Microsoft did the same thing with Windows Mobile OS 8, it was kind of expected function. Like all NFC phones capable, users simply hold their devices together to share pictures, videos, etc. practice, right?

Smarter Keyboard: The new Android also promises an intelligent keyboard, with a prediction function of your next word before typing. According to TechCrunch, Google has narrowed down the voice transcription software to fit within the device itself, rather than the network connection. This means that users can type their voices with their service or not.

The advantage is that Siri always need an Internet connection to use this feature, while Google's new feature does not work.

Overall, it looks like Google has provided users with an operating system much faster and sharper. Will everyone be updated Jelly Bean?

Is jelly bean really Exciting ?

Android 4.1 Jelly Bean port for HTC HD2
Under: HTC
Date: July 17, 2012
If you, Äôve been reading all the news on the latest Android operating system, 4.1 Jelly Bean, then you, AORE probably one of very many people who are currently waiting to see if their device will be officially put this software updates. Today we have news for you that the developers have managed to port to the Jelly Bean HTC HD2 almost three years.

We, Äôve already provided some details on your custom ROM Jelly Bean and the news that some clever developers have managed to port Jelly Bean 4.1 to HTC HD2, which usually runs on Windows Mobile 6.5 will undoubtedly impress many of you. Windows Mobile 6.5 is even earlier than the operating system Windows Phone and the HTC HD2 has only a 1GHz processor, yet the phone still works Jelly Bean, though, as you might expect, OSA not flawless .



There are questions about video playback, camera, and now Google applications while other gift, work AOT and the browser display is no better, but even if it is something very smart that we can all stand back and admire. News of this port Jelly Bean came to us from electric pig, from XDA Developers and although it doesn, AOT mean Jelly Bean will officially pushed out of all Android devices, it does at least show that all things are possible. However, before you get your hopes up, the previous update 4.0 ICS only reached 10% of devices and that AOS has been out for 9 months so do, AOT not hold your breath.

You may be interested in our previous articles on devices which may receive 4.1 Jelly Bean and details a list of useful improvements and changes that come with Jelly Bean. Meanwhile Google has now play the keyboard Jelly Bean available for devices running ICS.

We, Ehud, like to hear your thoughts on anything related to Jelly Bean. Are you surprised to see the developers of management to bring about the HTC HD2? Maybe you just want to know if your machine will receive Jelly Bean? Let us know your comments