A Russian hacker has discovered a method to in-app purchases without paying. The method is dangerous because of possible device-specific information and other personal details to come easy in the hands of the hacker. You thus runs a risk that your data be abused. Technically, it seems to work as follows: the method uses a proxy, with two fake security certificates installed. That changes the DNS settings of your iPhone, allowing the transaction to be intercepted before it reaches iTunes. The intercepted data are also accessible to the hacker and can get into the wrong hands. We recommend experimenting with this hack off an urgent, especially since developers steal from unethical and illegal. [Read more...]