Skip to content
Thoughtful, detailed coverage of everything Apple for 28 years
and the TidBITS Content Network for Apple professionals

ExtraBITS for 16 July 2012

Two quick ExtraBITS for you this week: news of Apple withdrawing from, and then immediately rejoining, the EPEAT program for environmental stewardship; and the strange story of a Russian hacker who figured out how to trick iOS into allowing free in-app purchases.

Hacker Exploits iOS Flaw for Free In-App Purchases — Over at Macworld, Lex Friedman does an excellent job running down the strange story of a Russian hacker who figured out how to trick iOS such that users could make some in-app purchases for free. Apple should be able to fix the problem, but it’s an interesting example of the classic “man in the middle” attack because, in this case, the man in the middle is the user, rather than some bad guy.

Read/post comments

Apple Back in EPEAT with Vague Explanation — They’re out! No, they’re back! A few days after pulling all of its products out of the EPEAT program for environmental stewardship (which put into question numerous government and institution purchases, since many of those entities require EPEAT-labeled products), Apple returns to the group’s list with a note from outgoing hardware chief Bob Mansfield. An explanation of the departure and return were not included.

Read/post comments

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For 28 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.