In-App Purchase

Apple adds ‘in-app purchase’ warning to freemium apps

Apple today has added a new 'Offers In-App Purchases' warning in the description of App Store apps that utilize the feature. The new disclosure can be seen in the App Store, located just beneath the Buy/Free button of pertinent applications.

The move comes amidst multiple reports of children running up monster iTunes bills, unbeknownst to their parents, via in-app purchases. Earlier this month, a young boy from the UK racked up $1,300 in charges buying virtual donuts...

Apple settles in-app purchasing lawsuit with iTunes credits and refunds

Apple today has agreed to settle a nearly two year-old lawsuit with a group of parents over unauthorized in-app purchases made by their kids. The parents complained that the process' lack of password requirement led to massive iTunes bills.

As part of the preliminary deal, which has yet to be finalized by a judge, Apple will pay eligible class members with a $5 iTunes gift card or the same amount in cash. And for those users who spent more than $30, it's offering a full refund... 

Russian hacker admits defeat in IAP breach

Alexey V. Borodin, the Russian hacker who made headlines with a tool which lets anyone steal extra content in apps, no jailbreak required, is admitting defeat following Apple's announcement that the in-app purchasing (IAP) exploit will be fixed in the shipping version of iOS 6 this fall.

In an unprecedented move, Apple gave developers access to a pair of private APIs in iOS, a temporary solution that effectively bypasses the hack. Borodin just publicly acknowledged that currently there is no way to circumvent Apple's band-aid fix in apps updated to take advantage of the private APIs...

Apple says in-app purchasing exploit will be fixed in iOS 6

Apple has started emailing developers today, with more information regarding the recently-discovered in-app purchasing exploit. Earlier this month, news broke of a hack that allowed users to acquire paid in-app content, for free.

The email contains a link to a new support page, posted on Apple's developer website, that provides devs with information on the issue, and offers up a temporary fix. It also states that a permanent patch is coming in iOS 6...

Is Apple stepping up fight against IAP exploit with UDIDs?

A flaw in the in-app purchasing mechanism in iOS that a Russian hacker exposed last week by leveraging a proxy server which enabled $30,000+ in sales of extra content may soon become a thing of the past as Apple is reportedly looking to contain the exploit by issuing a unique identifier in validation receipts.

This identifier apparently includes the Unique Device Identifier (UDID) for the device making the in-app purchase. The development is indicative remembering that the company recently began rejecting third-party apps over use of UDIDs. Apple was also thought to be readying tools for developers to let apps figure out users without resorting to UDIDs...

Apple starts blocking Russian servers that authenticate in-app content for free

Making good on its promise, Apple has started to block Russian servers which authenticate paid in-app content for free, The Next Web reports. The company is blocking IP addresses that host the rogue in-appstore.com domain by issuing takedown notices to hosting companies. PayPal has also intervened to block a private account through which donations had been collected, citing violation of its terms of service.

Despite this, hacker Alexey V. Borodin, the brains behind this controversial method, has already moved the servers to another country in an attempt to evade Apple’s legal requests...

Apple says it’s investigating in-app purchasing exploit

Earlier today, news broke of a new exploit in the App Store's in-app purchasing system that allows users to gain access to paid content, free of charge. The method does not require a jailbreak, and can be completed in a few simple steps.

As you can imagine, this has caused quite a stir in the iOS community, forcing Apple to take notice. This afternoon, the Cupertino company released the following statement...

Russian hacker cracks iOS in-app purchasing, no jailbreak required

iOS in-app purchasing mechanism which lets you buy digital items in games, upgrade to full versions of apps and purchase additional content, has been cracked by a savvy Russian hacker who posted a proof of concept video, embedded below.

First noticed by Russian blog i-ekb.ru (via 9to5Mac), the hack is credited to Russian developer ZonD80 who runs the conveniently named In-AppStore.com website where he collects donations to support development of the project.

What's special about this method - and potentially devastating to the development community - is that it doesn't require a jailbreak and can be completed in a few simple steps by even the most inexperienced users. UPDATE: contrary to reports that Apple took the proxy site down, developer confirms it's simply under high load and says the info site is being moved to Blogger.

Apple Files For In-App Purchasing Patent

Wpcentral passes on a report from the Inquisitr regarding Apple's latest move in the world of patents. Apparently the Cupertino company recently made some significant changes to its 2010 patent application on in-app purchasing.

While there could be several reasons behind the update, two of them stick out. First, there's that pesky Lodsys lawsuit Apple keeps trying to intervene in regarding several iOS developers and in-app purchasing. And the second...

Apple Fires Back at Lodsys, Insists to Intervene in Lawsuit

The ongoing litigation between Lodsys and a large group of iOS developers just took another turn yesterday. If you've been living under a rock for the past 90 days, then you should be informed that Lodsys is suing a handful of iOS app developers for infringing on their recently purchased patents.

About 2 months ago, Apple filed a motion to intervene as a defendant against the patent licensing firm, but was quickly met with an objection from Lodsys' lawyers. After a few weeks of silence, Apple finally filed a response yesterday — and it's good...

Patent Troll Won’t Stay In Its Cave, Lodsys Continues to Sue iOS Develepors

In case you haven't heard, a patent troll by the name of "Lodsys" threatened to sue App Store developers for allegedly infringing on the Lodsys patent of in-app upgrades. Apple responded by saying that Lodsys had no right to prosecute based on this patent that Apple licensed years ago.

iOS develepors were very relived that Apple stood up against Lodsys, and the assumption was that the patent troll would back off when faced with the looming, Cupertino giant. It appears that Lodsys won't take no for an answer. The patent troll has filed lawsuits against seven App Store developers...

iOS Developers Joining Forces in the Event of a Lodsys Battle

Unless you've been living in a cave for the last month, chances are you've heard of Lodsys. The patent licensing company has been sending letters to iOS developers threatening legal action. They believe that in-app purchasing infringes on a patent of theirs, and they want to get paid.

After weeks of silence, Apple finally decided to speak up on the matter. While they publicly defended their developer's rights, they have not given any indication that they would help with legal fees, should Lodsys' threats ever materialize...