The official PlayFab ActionScript SDK by PlayFab calls the PlayFab REST API to access game backend services. Features include analytics, player accounts, and virtual goods. TLS v1.1 is needed to connect to the Playfab service.
Earlier this month, hacker Alexey V. Borodin discovered a method that allows some iOS app users to make "In-App Purchases" for FREE. Because Apple does not link purchases directly to individual customers or devices, a single receipt can be used for multiple transactions. Borodin's method takes advantage of this fact by fooling iOS apps into accepting fake purchase receipts and bypassing Apple’s authentication servers.