3 ms·
Most iOS apps use a standard set of system calls to check if the item has been purchased. I assume the hack works by patching the systems calls to return YES to
by kennywinker 15y ago
Most iOS apps use a standard set of system calls to check if the item has been purchased. I assume the hack works by patching the systems calls to return YES to all queries about in-app purchase items. That's how I would do it if I was building something like that. There are no tokens or keys to validate... it's just "hey system, is this paid for? okay!"
- stottc 15y agoThere's an option to do server-side receipt validation. That should prevent a hack like that.
- reitzensteinm 15y agoAlso, checking for the purchase status of an item that can't be bought would be a cheap and easy place to start. Easy to get around with a custom crack, but it should actually be pretty effective against a blanket 'just return yes' crack.