Microsoft pins Windows Store app purchase exploits on insecure code

12 Dec 2012 - {{hitsCtrl.values.hits}}

Attention has swirled around what, at least initially, looks to be a surefire way to pirate Windows Store apps: as a warning to developers, Nokia engineer Justin Angel has detailed how at least some Windows 8 apps can be hacked to avoid paying for full versions or in-app purchases, and even strip out ads in free titles. Several apps he tested are stored in such a way that that it's easy to modify apps' data files and Internet Explorer 10 requests. According to a Microsoft spokesperson we contacted, however, many of the vulnerabilities are common to any app store, and supposedly thwarted with the right code.

The company points to a recent Dev Center document emphasizing Windows 8's optional app receipt system, which can require any transaction be validated on the developer's server. Programmers can also mask content or move the more valuable material to the internet, Microsoft says in the note. While we're wondering why safeguards like receipts aren't mandatory, we wouldn't immediately fret if our livelihood depended on the Windows Store -- at least, not if we were careful. Read Microsoft's full statement after the break.

(Source : www.engadget.com)

Technology - Main

Microsoft pins Windows Store app purchase exploits on insecure code

Most Popular Articles

2026 FIFA World Cup Schedule in Sri Lankan Standard Time

Breaking Down the Israel–Iran Conflict: What We Know So Far - Day 108

’’Cut out the noise, focus on your game’’; Sri Lanka great reaches out to Sooryavanshi

Struggling Pizza Hut chain to be sold for $2.7bn

Mother wins three-decade legal battle over property against son

Gold Price Today in Sri Lanka – 22K & 24K Rates, Trends, and Investment Guide

Latest News

Messi’s father recovering from 'health issue': family

Wasim Akram Hails Sri Lanka as a World-Class Travel Destination

Mahayaya Vinita Thera no longer a monk, probe underway

Ministry issues list of foods prohibited in school canteens

Sri Lanka find right combination in WI defeat