Borodin isn't the first to put out a tool that makes in-app purchases free, but he's been one of the most public. He says that Apple has not contacted him directly about the exploit and that users "should be pleased that I simplified your life." He's started forcing users to log out before using the system "so they don’t scream to the Internet that I am stealing their credentials," though that doesn't rule out the possibility of gathering some information. While not all apps are vulnerable, developers should be aware that right now, it's not all that difficult for users to find out how to use this exploit.