His circumvention technique relies on installing certificates (for a fake in-app purchase server and a custom DNS server), changing DNS settings to allow the authentication of 'purchases,' and finally emulating the receipt verification server. Using store receipts doesn't workĪs Borodin's service simply needed a single donated receipt, which it could then use to authenticate anyone's purchase requests. Until Apple stepped in, iOS developers had no way of protecting their apps, and this looks to be the same situation for Mac app developers. Running Grim Receiper application (to save your original AppStore receipts).Install CA certificate and certificate.To use this 'trick' yourself, you need to perform the following steps (for the record, I do not recommend doing this, especially given that you have to hand over your login credentials, and I do not condone it either, as it is stealing): The new 'In-Appstore for OS X' service uses a similar method to fake transactions made to Apple's servers, according to ' Getting started to receive your in-app for free on OS X.' Borodin's new hack allows Mac users to circumvent the payment process and essentially steal in-app content, just like his previous one did for iOS. While Cupertino was distracted, Borodin came in and pulled off the same scheme on the Mac. Apple today announced a temporary fix and that it would patch the holes with the release of iOS 6 Last week Russian developer Alexey Borodin hacked Apple's In-App Purchase programįor all devices running iOS 3.0 or later, allowing iPhone, iPad, and iPod touch users to circumvent the payment process and essentially steal in-app content.

How to get in app purchases free