A Russian site today published a report that a simple and clever hack can allow Apple iOS in-app purchases to be made at no cost. The hack does not require the phone to be jailbroken. To exploit the weakness in the in-app purchase, only two primary steps are required. First, an additional SSL certificate is installed on the device itself, which involves downloading the file and a couple of screen taps. The second and more difficult part requires control over the local network

Yahoo Voices – a 2010 acquisition by the search company – was breached, and an attacker compromised 450,000 accounts, including email addresses and passwords. This is the latest in a series of similar breaches, affecting eHarmony, LinkedIn and last.fm. However, unlike these companies, Yahoo Voices was using poor security practices when storing the data at rest. How did this 2010 acquisition cause security problems for the Internet giant, and how can you avoid having the same