Last week Russian developer Alexey Borodin hacked Apple's In-App Purchase program for all devices running iOS 3.0 or later, allowing iPhone, iPad, and iPod touch users to circumvent the payment process and essentially steal in-app content. Apple today announced a temporary fix and that it would patch the holes with the release of iOS 6. While Cupertino was distracted, Borodin came in and pulled off the same scheme on the Mac.

That's right. Borodin's new hack allows Mac users to circumvent the payment process and essentially steal in-app content, just like his previous one did for iOS. The new "In-Appstore for OS X" service uses a similar method to fake transactions made to Apple's servers, according to "Getting started to receive your in-app for free on OS X."

To use this "trick" yourself, you need to perform the following steps (for the record, I do not recommend doing this, especially given that you have to hand over your login credentials):

• Install CA certificate and in-appstore.com certificate
• Change DNS record in Wi-Fi settings
• Running Grim Receiper application (to save your original AppStore receipts)

Until Apple stepped in, iOS developers had no way of protecting their apps, and this looks to be the same situation for Mac app developers. Using store receipts doesn't work as Borodin's service simply needed a single donated receipt, which it could then use to authenticate anyone's purchase requests. His circumvention technique relies on installing certificates (for a fake in-app purchase server and a custom DNS server), changing DNS settings to allow the authentication of "purchases," and finally emulating the receipt verification server.

The only difference this time around (apart from the different store), is that Borodin has developed an app called "Grim Receiper." It must be run on the local machine, and as far as I can tell its main purpose is to collect receipts for reuse. "That's the tool to keep your original receipts in safe place (locally, of course) during you are using in-appstore.com," says Borodin.

Affected iOS apps treated Borodin's server as an official communication because of how Apple authenticates a purchase. The same thing goes for Mac apps. The problem is that Apple does not tie a given purchase directly to a customer or device, meaning a single purchased receipt can be used again and again.

It's not yet clear if Cupertino is transmitting its customers' Apple IDs and passwords in clear text just like it was for iOS (Apple assumed it would only ever be communicating with its own server). If so, whoever operates in-appstore.com could easily be gathering everyone's iTunes login credentials (as well as unique device-identifying data) in the same type of man-in-the-middle attack that was used for iOS.

When Apple first tried (and failed) to stop Borodin, the company managed to disable his PayPal account. Borodin started taking donations via BitCoin, and for this Mac app hack he's doing the same: "Help the project by bitcoin 15GCBL7gHbf2p8bapozSrZhNaXdrKUWRFF. Thanks."

Absinthe 2.0 has been released, bringing with it an untethered jailbreak for iOS devices running iOS 5.1.1. The jailbreak is compatible with almost every iOS device, with the lone exception being the revised $399 iPad 2 with 32nm A5 chip. A solution for the "new" iPad 2 will be released at a later date.

The jailbreak process using Absinthe 2.0 couldn't be easier. In fact, the developers of the jailbreak claim "it's so easy, your grandma could do it." If your device isn't currently jailbroken, then follow the instructions below:

1. To start, you'll need to head on over to the Greenpois0n Web site to download Absinthe 2.0 for your respective operating system.

2. With your device connected to your PC, open iTunes and right-click on the device you want to jailbreak. Select Back Up from the menu. Wait for the backup to finish and then close iTunes.


3. On your iOS device, go into Settings > General > Reset > Erase All Content and Settings.


4. Open Absinthe 2.0 on your PC, verify that the correct iOS device has been detected, and then click Jailbreak. The jailbreak process will only take a few minutes.

5. Once the jailbreak is complete, close Absinthe 2.0 and launch iTunes again. Right-click on your device name, but this time select "Restore from Backup." Select the backup you just made. Let your device restore and finish syncing before disconnecting.

Once the restore is complete, you'll have a jailbroken device, complete with all of your apps and information as it was before you began.

If you're having issues with the instructions above, give this Reddit link a try. It worked for me.

If you were using a tethered iOS 5.1.1 jailbreak, open Cydia and search for "Rocky Racoon 5.1.1 Untether" and install it.