<http://schema.org/articleBody>
"Late last year, the closure of the uber-popular Installous marked the end of a promiscuous era in iOS app piracy. Now, several new services are on the rise that are filling the gap and offering easy installation of pirated apps, even on devices that have not been jailbroken.\r\n\r\nUpdated with statement from Zeusmos' developer below.\r\n\r\nThe two that have risen to the forefront are Zeusmos and Kuaiyong. While the former has been around for a few months, it has gained significant steam since the exit of Installous. The latter has appeared seemingly from nowhere over the past couple of weeks.\r\n\r\nBoth of these services are dangerous for app developers because they offer simple, one-tap installs of pirated apps and\u00A0do not require that devices have been jailbroken in order to do so. This is an enormous problem, as it opens up the arena for their use from the relatively small fraction of users with jailbroken devices \u2014 as was the case with Installous \u2014 to any unscrupulous users of iPhones and iPads.\r\n\r\nIf you're looking to steal apps from developers \u2014 lets not kid ourselves about what's happening here \u2014 it is now easier than ever to do so.\r\n\r\nZeusmos is a service offered for free on jailbroken devices as well as for a fee on devices that have not been jailbroken \u2014 yes, that's right, it's charging users to download pirated apps. It charges this fee for a 'cloud plan' to install 'cracked' apps and to provide users with a license and provisioning profile that allows them to install these pirated apps. The 15-year-0ld\u00A0creator of Zeusmos, offers it as a way to 'try before you buy'. But also seems\u00A0unapologetic\u00A0about the nature of what the app does: enable\u00A0piracy.\r\n\r\n\u00A0\r\n\r\nThere appears to be a connection between Zeusmos and the reseller of developer testing slots UDIDRegistrations.com. Selling developer device testing slots is something explicitly forbidden by Apple, which has been cracking down on these resellers for the past several months.\r\n\r\nHere's how the site's FAQ describes the young developer's two products including Zeusmos and the Mac-only InstaSign:\r\nBoth InstaSign and Zeusmos are applications that allow you to install cracked applications on your iDevice without jailbreaking. InstaSign requires a Mac as it signs iPAs on your computer. Zeusmos requires no computer at all as it signs iPAs directly on to the device (like Installous for jailbroken iDevices) Because of this, both Mac and Windows users can use Zeusmos.\r\nIt's unclear exactly how Zeusmos achieves its goal, but judging from the pricing and the correlation between UDIDRegistrations, it appears to utilize a developer licensing certificate to install 'cracked' apps which have had their DRM (copy protection) stripped.\r\n\r\nIn addition to users installing cracked apps themselves, the tool allows them to 'share' them with their 'friends' who are other Zeusmos users by email or even a link on Twitter.\r\n\r\nThe Chinese site\u00A0Kuaiyong is also offering a similar service: allowing you to install apps for free, from your device, without paying for them. But it goes about it in a different way and is completely free.\r\n\r\n\u00A0\r\n\r\nThere are two components to the tool, one which allows for installation of apps directly from your iOS device and the other which is a desktop\u00A0application\u00A0that allows install over a cabled connection. Once you use either, iTunes syncing ceases to work, but that hasn't proved to be too much of a deterrent.\r\n\r\nThe apps appear to have been purchased under an Apple enterprise license, which allows for installation to multiple devices. There could also be a bundle of smaller developer accounts being used, which max out at 100 'slots'. They are then being re-distributed to other users through the two tools. There are some indications, however, that the issues go further than a single enterprise license.\r\n\r\nWe've been in contact with developers who have provided us with logs showing pirated installs of their apps. Some of the logs are showing thousands of users installing the 'same' copy of the app. Not the same app, mind you, but the exact same copy. This indicates that the same exact copy is being distributed with the same set of (encrypted) credentials.\r\n\r\nThe apps being installed via Kuaiyong may be utilizing bulk enterprise licensing, where the ones distributed by Zeusmos (or other copycat services, which are already springing up) are showing a variety of IDs, each of which is being installed\u00A0multiple\u00A0times.\r\n\r\nSo we've got two things going on. Services like Zeusmos have figured out how to ease the process of purchasing a developer slot and using its certificate to install 'cracked' apps, which are widely available on the internet. And ones like Kuaiyong are somehow bypassing Apple's licensing rules to redistribute the same copy of an app over and over.\r\n\r\nSecurity researcher Stefan Esser has been speculating about the Kuaiyong service on Twitter, noting that it could be an excellent way for them to distribute malware to iOS devices. Though the apps themselves are limited in what they can access due to sandboxing, specialized malware could be developed for certain popular apps that collected information and logged activity on your device. And there's a strong likelihood that whatever they're doing is using illegally obtained licenses at the least, and credit-card fraud at the worst.\r\n\r\nNote: Since publishing, security researcher Melissa Elliott has continued to look into how the Kuaiyong service and others like it and has issued a warning\u00A0not to use them as they're potentially harmful.\r\n\r\nThe end result is the same in any case: people with a low moral threshold are cheating developers out of money and, in the case of Twitter apps, permanently removing a chunk of their possible revenue.\r\n\r\nDrawing attention to these apps and services presents somewhat of an ethical\u00A0quandary. By writing about them, we will no doubt draw more attention to them and therefore more acts of piracy from people who simply don't care. But, hopefully, we will also see action taken by Apple to curtail these habits.\r\n\r\nMake no mistake, these products are already being used widely, with thousands of stolen apps in the last few weeks alone. Twitter searches present endless results for people sharing information about them and looking for help in getting the hacked sites to work.\r\n\r\nAnd these two are just a couple among a dozen high-profile options for users looking to steal apps.\u00A0The seedy underbelly is there, and ignoring it doesn't do anyone any favors.\r\n\r\nWe have reached out to Apple on the issue, but due to the holiday, there will likely be a delay before any reply is forthcoming.\r\n\r\nUpdate: The developer of the Zuesmos application responded to our request for more information. He says that his intent was never to encourage piracy of apps. Though the marketing copy of the service's website leaves that open to interpretation. In a statement, he says that there will be changes made to the application to remove the ability to share apps via links or repositories of apps:\r\n\u00A0The intent of Zeusmos will be to SOLELY code sign applications. We will not be supporting or encouraging any form of piracy through the link providers or even via search (although they were based off the iTunes API).\r\n\r\nThe intents [sic] as I have stated [was] to allow open development for developers. Recently I've had the time to add this feature into Zeusmos called the &amp;quot;Exclusive Apps&amp;quot; section where developers who got their application rejected in the App Store were able to post their application on here for free and share their application to a large audience of users. Such applications even included Grooveshark and many others.\r\nHe says that the purpose of Zeusmos was to allow for developers to code-sign apps for distribution as betas or to audiences outside the App Store. &amp;quot;I wanted this thing originally to be self-sutainable. Most of my applications are mostly free otherwise speaking, such as CarrierEditor...my latest release.&amp;quot;\r\n\r\nHe also says that the next version of Zeusmos will be 'harshly discouraged' from installing or downloading apps unless they've made it or own it.\u00A0If such changes are made, it would certainly help to curtail some of the rampant sharing of apps via links and repositories of links, but it would not prevent the installation of cracked apps on un-jailbroken devices.\r\n\r\nImage Credit:\u00A0Mario Tama/Getty Images"^^<http://www.w3.org/2001/XMLSchema#string>
<http://thenextweb.com/apple/2013/01/01/low-down-dirty-iphone-app-pirates/?awesm=tnw.to_b0TSd&buffer_share=b0e84&utm_source=buffer>