IAP cracker Jailbreak and Gamesalad
Hey guys I have a question regarding IAP's integrated in the GameSalad software. For you guys that don't know, you can jailbreak your iPhone and download an app through cydia called IAP cracker which does just that. It allows the user to get anything they want by bypassing the the game into thinking that you actually made a payment but it really didn't allowing you to get anything you want through IAP's for free. This doesn't work when the IAP has to go through an online server that checks that the payment is actually cleared.
I've looked everywhere and couldn't find an answer. How does the payment work with GameSalad? Does it go to an online server to make sure the payment is cleared? I just don't want people stealing from me in the game and getting anything they want as my game is designed to make money based on IAP's. Thanks!
Comments
@RPMGames Ok, but why wouldn't you just send the devs a private message about this?
Mathtap.com (Android) | Fridgemanager.com (Android) | Breakoutofspace.com (Android)
@Summation I just thought maybe some people in the community would know about this and other people looking into the question could have it answered when they look on the forums. I can definitely contact them if no one knows. Sorry I'm new to these forums and thought it was appropriate to post the question here.
There's no point worrying about this. If they've broken Apple's authentication, then it affects all devs and not just GameSalad, and anything we do to try to fix it will be futile. The kind of person who downloads and uses something like this isn't going to be buying your IAP anyway, whatever the music industry may think.
Contact me for custom work - Expert GS developer with 15 years of GS experience - Skype: armelline.support
@Armelline It doesn't affect everyone. Just the devs that don't have a server that checks to see if the payment is cleared. You do have a point where the people hacking most likely wouldn't buy my IAP anyways, but look at clash of clans. They invest a lot of money into the security of their app and business as SuperCell is a multi billion dollar company whose soul income comes from IAP's and IAP's alone. People spend tons of money on that game due to no solution to hack their security features to gain free vitual money. I was just inquiring to see if anyone knew about GameSalad's security features when it comes to IAP's and if its server based or not. If it's not, I'm still going to develop my games with GameSalad, just a curious question more or less.
Go to about 55:50
My mic is muted but you can guess my question. Hint it is similar to yours.
@scottharrrules43 So what I got from that was you need your own server if you want to check valid receipts from apple? How would I go about creating my own server? If it's something a beginner would have trouble doing I won't bother, but would be nice to know that my IAP is secure and people arn't ripping me off! Haha
We only use the old way of recipe validation with apple's sever if the user is on iOS 6.1 or older. Otherwise we validate the recipe locally with apple's new way that is more secure.
@BlackCloakGS Awesome that's exactly what I wanted to hear. That answered my question perfectly. Thanks so much!