Microsoft pins Windows Store app purchase exploits on insecure code

12 Dec 2012 - {{hitsCtrl.values.hits}}

Attention has swirled around what, at least initially, looks to be a surefire way to pirate Windows Store apps: as a warning to developers, Nokia engineer Justin Angel has detailed how at least some Windows 8 apps can be hacked to avoid paying for full versions or in-app purchases, and even strip out ads in free titles. Several apps he tested are stored in such a way that that it's easy to modify apps' data files and Internet Explorer 10 requests. According to a Microsoft spokesperson we contacted, however, many of the vulnerabilities are common to any app store, and supposedly thwarted with the right code.

The company points to a recent Dev Center document emphasizing Windows 8's optional app receipt system, which can require any transaction be validated on the developer's server. Programmers can also mask content or move the more valuable material to the internet, Microsoft says in the note. While we're wondering why safeguards like receipts aren't mandatory, we wouldn't immediately fret if our livelihood depended on the Windows Store -- at least, not if we were careful. Read Microsoft's full statement after the break.

(Source : www.engadget.com)

Technology - Main

Microsoft pins Windows Store app purchase exploits on insecure code

Most Popular Articles

People have complete right to lie: Kottahachchi

Hybrid vehicle import tax based on engine capacity will reduce costs, satisfy all

Sri Lankan jailed for murdering wife with axe in front of their children

Namal responds to allegations of preferential treatment in law exam

IMF agrees to raise income tax threshold: President

RW praises AKD

LATES'T NEWS

Sharp increase in financial frauds during festive season: SLCERT

SLPP decides on legal action over reducing MR’s security

18-hour water cut in Western Province starting tomorrow

NMRA, SPC, SPMC, MSD must take responsibility of continuous supply of quality medicines: Minister

STF to be deployed to control power cable thefts during night