One-Click iPhone App Cracker Released to the Public
Recently we have reported on what can happen when iPhone software from the Apple store is cracked and made available to the public. In our articles we briefly touched on how these applications were cracked, via a piece of code known as Crackulous.
Context & Ripple Effects
The iPhone software ecosystem had already developed an active modification community, including a large wave of jailbroken iPhones in 2007. In November 2008, a separate App Store security flaw allowed arbitrary code updates, exposing limits to Apple's distribution controls.
Making app-cracking available through a one-click tool turns a capability associated with technically capable users into one accessible to a much broader iPhone audience. That raises the stakes for Apple’s App Store enforcement and for developers selling paid software through it.
First-order effects
- Crackulous lowers the technical barrier to making App Store applications available outside Apple’s authorized purchase path, putting paid-app developers’ sales at immediate risk.
- Apple faces pressure to strengthen the App Store and iPhone software protections that underpin its control of app distribution.
Second-order effects
- Developers and publishers of paid iPhone apps must weigh stronger copy-protection measures against the added friction those measures can create for legitimate customers.
- Apple’s App Store review and delivery system becomes a more important competitive asset only if its technical controls can keep pace with tools that bypass the store’s purchase mechanism.
Third-order effects
- If accessible cracking tools proliferate, the App Store model shifts from relying chiefly on centralized distribution to an ongoing contest over enforcement and software integrity.
- The episode points toward mobile software marketplaces treating payment control and platform security as inseparable parts of their developer proposition.
The trend: Mobile app stores are becoming software-delivery control planes whose commercial model depends on defending centralized distribution against increasingly accessible circumvention tools.