Mac App Store Apps Already Hacked

Stoobalou writes "The Mac App Store has only been open for 24 hours but methods for circumventing Apple's DRM are already hitting the Web."

Comments

slightly better article

[Anonymous Coward]

Hate to link to the reg but their article is actually a bit more detailed:
http://www.theregister.co.uk/2011/01/07/app_store_receipt_fail/
Note that this only works if developers ignored Apple's recommendations on validating receipts.

Re:Sweet

[Anonymous Coward]

Not PC guys, windows users. Linux and BSD users are quite happy with their PCs.

This Is Completely Misleading

[pyite]

The Mac App Store wasn't hacked. Developers aren't properly checking licenses when the app is run, so of course using any arbitrary license file will work. Complete FUD.

Re:This Is Completely Misleading

[Stoobalou]

It doesn't say 'Mac App Store Hacked'... it says 'Mac App Store *APPS* Hacked', which is quite clear in my book.

Re:This Is Completely Misleading

[getNewNickName]

But it implies that all apps can be hacked, which is clearly misleading. Saying "Some Mac App Store Apps Already Hacked" would be more accurate, but much less sensational.

Re:This Is Completely Misleading

[pyite]

It doesn't say 'Mac App Store Hacked'... it says 'Mac App Store *APPS* Hacked', which is quite clear in my book.

They're not even hacked! Since when does not implementing something count as being hacked?

Re:This Is Completely Misleading

[stewbacca]

But the summary says Apple's DRM has been circumvented.

DRM isn't mentioned in the article, and it is clear from reading TFA that this has nothing to do with Apple's DRM scheme (that is not mentioned in the article), but a way to trick the Rovio app.

Complete waste-of-time non-issue FUD.

Details on how app devs can update their binaries

[seanalltogether]

Developers need to change their validation routine to better check that the receipt really belongs to them. http://www.craftymind.com/2011/01/06/mac-app-store-hacked-how-developers-can-better-protect-themselves/

Fix for mac developers

[Rikiji7]

This article is more suited to the slashdot crowd: http://www.craftymind.com/2011/01/06/mac-app-store-hacked-how-developers-can-better-protect-themselves/

BSD? PC?

[mschaffer]

Well, The Mac is just an expensive PCs and OS X is based on BSD. So, what's your point?

horrible title

[I8TheWorm]

Did the poster read the article? Angry Birds can be copied freely by switching out a file used for Twitter because Angry Birds didn't use Apple's recommended security.

I love to take jabs at Apple and the Cult of Steve, but this is a completely inappropriately titled article.

Re:horrible title

[jo_ham]

If that is what's passing for hacking these days, oh how far we have fallen.

More accurate, but less sensational, would be "developers ignore security suggestion from Apple and are bitten by weak receipt checking". It's less catchy too, as a title.

Re:horrible title

[jedidiah]

It's entirely possible that the revelant developers simply don't care that much.

DRM is an end user annoyance that ultimately doesn't stop piracy. Perhaps someone decided it would be good to be less annoying.

Or perhaps they just aren't that fixated.

Re:horrible title

[larry bagina]

The Mac App Store provides recipts/DRM, but there is no automatic checking. The developer needs to add a couple lines of code to check that 1. the receipt exists and 2. it's my receipt. Both steps are optional (yes, you can distribute DRM-free apps) so if they didn't care, they wouldn't do either. They did step 1 which looks a lot more like a bug or misreading of the DRM validation guidelines.

Re:horrible title

[jo_ham]

Steam works this way too. Any store with a centralised system that handles the user accounts and requires third parties to access them if they want to have a serial number. The store happens to work that way, and selling an app through it doesn't necessarily require a licence check (eg, free apps) but if you want to sell your app, the method for linking a licence key to an iTunes account is documented.

Who is surprised?

[mitchell_pgh]

I don't think the goal of the App Store was to provide an impervious DRM store solution. We have known for years (and many vendors will tell you) that is an unrealistic expectation. Apple simply wants a revenue stream where people can easily purchase and install licensed versions of software. As a store, they should try to disrupt all illegal sharing to the best of their ability. Don't be surprised if the 1.1 version of all the software requires a license check. I'm of the opinion that they are going to use the same "we'll annoy them to death" method they have used for the iTunes store which has proven to be a good business model. Sure, you can usually find cracked free stuff, but you must be willing to hack your system or jump through hoops to make it work normally... but it's always one update away from not working.

The older I get, the less I like to jump.

Re:Sweet

[beelsebob]

Don't worry, the article just has an inflamatory headline. It's not not apple's security that's been broken, it's the security of apps that haven't followed apple's documented method of verifying that they're installed in a valid way.

Re:Movies

[E IS mC(Square)]

Only clueless moron would buy ANYTHING from itunes. The fresh fruit is free (of the hardware and software), the rotten fruit is to bind yourself to one manufacturer.

It's all relative

[jwietelmann]

This headline is stellar by Slashdot standards. Count your blessings.

Re:It's all relative

[getNewNickName]

I come to Slashdot to debunk sensational headlines. I value any comments that bring clarity to the issue, not those that just parrot the sensationalism.

Re:Sweet

[Goaway]

Providing a service to sell applications and games in a convenient way?

Re:Sweet

[Anonymous Coward]

Exactly, Apple does not make 'personal' computers. The machines are actually owned by Steve Jobs for all eternity, along with your soul if you ever decide to buy one. :P

Re:Sweet

[MightyYar]

...because Apple doesn't make personal computers?

Blame Apple marketing... "I'm a PC"

Re:Sweet

[Anonymous Coward]

I thought we called them boxen to prevent the spread of virii

Re:Sweet

[N0Man74]

Pfft, you use Personal Computers?

I prefer impersonal computers. My computer won't allow me to even use my name as a logon. I have to use user names like "Guy" or "Bloke", and themes are disabled.

Re:Sweet

[steve_bryan]

Troll? Nah, uninformed and bombastic. If you knew what you were talking about you would know that this kerfuffle is about developers who did not bother to use the security measures provided by Apple. In the widely noted case Angry Birds just checked for a valid receipt without checking to see if it was a receipt for their app. It isn't just a matter of having an opinion, it helps to actually know something when you decide to comment.

Re:Apps Don't Use DRM - Everyone Panic!

[Swift2001]

The became pro-DRM when Apple dropped it, of course.