Apple losing cat and mouse battle with Russian iOS hacker
A Russian programmer who released a hack allowing iOS users to steal paid app content has thwarted Apple's attempts to fix the flaw.
Alexey Borodin published a video on YouTube outlining how users could avoid paying for in-app purchases without even having to gain root access to the system. All they needed to do was install two security certificates and change the DNS settings on their device.
Apple quickly mobilised to shut down the hack. It succeeded in getting the first instructional video removed from YouTube on copyright grounds but this was quickly replaced with a new version. Apple has also blocked the IP address of the server used by Borodin to implement the hack, and worked with PayPal to prevent him from receiving donations. But Borodin has responded by moving the server to a new location and now accepts donations using the anonymous Bitcoin service.
