Palm pulls paid apps due to major bug allowing free app downloads
After mere hours of App Catalog-stravaganza, the paid apps have been removed for the time being by Palm due to a major flaw in purchase verification. From what we've gathered from the seedy underbelly of the internet, an exploit involving building your own dummy application with the same name as a paid application allowed folks to download a free "update" to these falsified shells and score for-purchase apps galore without dropping a cent. Whether or not this was the only exploit afoot we're not sure, but it sounds like plenty of folks found ways to nab apps for free because Palm has clamped down hard on distribution for the time being. Optimistically, the company claims it should have the Catalog back up by tomorrow morning, but if the failure is really as severe as it sounds, we won't be holding our breath.
Update: And... they're back.
[Thanks to everyone who sent this in; picture courtesy of glamajamma]
Update: And... they're back.
[Thanks to everyone who sent this in; picture courtesy of glamajamma]


















actually, paid apps ( just the first one air hocky) is already back. The gates are re opened
Since Palm appear to be making up their strategy on the run .....
How about dropping WebOS and going with Android!
Companies that keep changing their strategy (palmOS/WinMob/webOS/?) and can't execute deserve to fail, I am glad it is not my money being burnt to keep these clowns afloat ....
It will be interesting to watch the share price over the next week....
The death watch has officially begun!
MNJP@
What do you expect from the company that steals USB vendor ID to provide iTunes hack service
to their customers? Palm is losing money hand over fist and it shows they are desperate!
Anyone wants to guess what Palm will steal next?
@Tango
Comments like that are a perfectly good way to ruin a comments page with the age old Palm USB debate....
That said, Faking USB PID to get out of making a conduit App, thats pretty low...
*ducks*
It wasn't the only exploit. Others have been reported to Palm as well, and I'll just leave it at that until they're fixed.
rush rush rush rush
Oh and as I mentioned in the other post, I love my Pre, I'm a fan of Palm, but there's nothing to say other than this is a huge f***-up. I can't see how any company would ever make a mistake as stupid as this.
Hey man, it's a new platform. At least they're on the ball. Looks like they're working late tonight.
Yeah but to have the check client-side like that is just idiotic.
@michael
If Apple had such a ridiculous flaw no one would give them an inch, and they'd be taking shit from all sides. I see no reason to forgive Palm for basically allowing a free-for-all on apps that were never intended to be.
Greta pre-Production-release QA.
This is one case where being an early-adopter is rather ill-advised - right now it's external folks stealing from Palm, what happens if there's another :exploit" (love that term!) that allows external folks to steal from you? Probably not as easy to do, granted, but...
Steve is lying in his $20K bed laughing right now.
Thank you for adding value to the commentary.
What boggles me is how you can type while you're sitting there jerking off to that thought. Kudos.
I just got one of those "OMG! WTF DID I JUST DO??!! feelings when I realized they are going to be able to tell who downloaded these "free" apps. Really, what can I tell them? It's like getting caught with your dick in your hand :(
wow, that's rough. along with sprint/bell, they have your phone number, social security number, address, etc. etc. I guess that's why you shouldn't do shady things..
Mexico dude! MEXICO!
I'm already on my way, cops in my neck... cant... sleep... must... drive!
I wouldn't go as far as saying that Palm dev's lost a ton of sales in these few hours. The people that would circumvent these pathways are primarily the type of customers to not pay (i.e. HS and college kids w/o income, but w/ a lot of free time on their hands) and will likely find another black market avenue for their apps once Palm does fix the issue. On the other hand, the vast majority of the lay public probably just paid for their apps when the store was running.
Not when two of the apps were also freely downloadable as long as you had the beta versions from homebrew installed, because of the same bug.
One of the apps hit by this has the following homebrew download statistics:
Downloads This Week: 1,891
Total downloads: 42,924
Every single one of those people could've downloaded it for free.
Amateur Hour?
c'mon palm! get your S*** together! I want some decent apps that will make my life easier!
Way to go boys, really protecting that brand image....
Palm are getting more desperate by the day!
When does the official death watch start?
Isn't that what Beta is for? What?! Kind of a glaring bug, no?
That's what Palm gets for using all their R&D money to hack iTunes rather than spending it on fixing their software lmao
And then people wonder why the iPhone is steamrolling the Pre.
Yes it must cost a ton to tweak a couple lines of code. And as for your other laughable comment, people might wonder if not for the 3 year head-start. keep trying.
@Dustin: "Yes it must cost a ton to tweak a couple lines of code. And as for your other laughable comment, people might wonder if not for the 3 year head-start. keep trying."
Ummm, you would have thought if they only need to change a "couple of lines of code" regarding iTunes, they should have plenty of time to actually get their sh*t together on the stuff that, you know, actually matters to the long term success of their brand and product and their small customer base (which they need to grow desperately if they are going to survive).
And your comment on "3 year head-start". Very lame response. So you don't want people to compare them to the iPhone or Apple, but in the same breath you like to use the fact that Apple is 3 years ahead?
Again, not that I'm hoping for them [Palm] to fail, but they're certainly doing everything possible to appear like a spider caught in the last moments of a toilet flush. Palm needs to wow potential customers despite what Apple or anyone else is doing, and not get fundamentals like this wrong. It certainly doesn't help; it frustrates their current customers, annoys their investors, and alienates potential customers.
@Dustin: "people might wonder if not for the 3 year head-start. "
You mean Palm's 3 year head-start?
Palm's Ed Colligan, 3 year ago: "Colligan laughed off the idea that any company -- including the wildly popular Apple Computer -- could easily win customers in the finicky smart-phone sector.
"We've learned and struggled for a few years here figuring out how to make a decent phone," he said. "PC guys are not going to just figure this out. They're not going to just walk in.'"
http://www.palminfocenter.com/comments/9110/
@totoro problem is palm doesn't get three years to get it right. they can try and take three years but the competition will be that much more ahead. You don't compare palm to apple three years ago cause it has to compete with iphone that's out today. That's the standard that has to be met. the rest is a weak excuse. they need to pull their thumb out of their ass in more ways then one. not to mention the fact that there's a limit on apps.
@ddub,
no, I agree with you completely. I was responding to Dustin's whining about how Apple somehow had a 3 year head start on Palm :p
They're really playing this by ear, aren't they? It must be very frustrating for Pre users.
Right. Frustrating that some Pre users got paid apps for free. What a pain in the ass.
fail!
(sorry but I couldn't resist. i was happy see a decent competitor with my beloved iphone but their whole spoiled brat feud with itunes sync ruined any respect I had for them. based on this, it probably is best for their users that they didn't try to write an XMl parser for the itunes DB)
That's a topic for another day, but I still don't see how wanting the best experience for their users who might already use iTunes and aren't as computer-savvy to install a third-party connector program or just don't want to be bothered to makes Palm spoiled brats. All Palm is saying is that their customers already paid for the music from iTunes, they should be able to sync it to their phones just as easily as if it was an iPhone.
The European Union has given Microsoft warnings before for similar actions, why is it okay when Apple does it?
-------------------------------------------------
Anyway, to get back on topic more, the paid apps are back up.
@ Joe H
You and lot of people just don't like to listen. Reason seems to fall on deaf hears because of your Apple bias. It seems as though you guys love to ignore anything that has to do with logic and reason.
For the last time, use your hears and listen to common sense.
Have you ever heard of copyright infringement? Hacking Itunes to say (iPod) whenever the Pre is connected is 100% copyright infringement. Apple did not give Palm the approval to use their name or their software in an illegal manner. Other companies connect to iTunes legally, so Palm has no excuse whatsoever. If I was Apple I would sue Palm into bankruptcy without even thinking twice about it. And I'm pretty sure Palm will get what coming to them soon enough.
Stop defending Palms stupidly pathetic actions, it makes you look stupid too
last i checked, i'm free to do whatever i like with the AAC files i purchased from the itunes store. i'm sorry but palm is just being lazy and is trying to use software they didn't write for their own business advantage.
If Apple sued Palm, there'd be a ton of lawsuits in both directions and both companies would end up hurting.
And no, I'm not anti-Apple. I'm anti-restrictive practices like what Apple does with iTunes. Sure, other companies do connector programs that most users never install because they don't know any better. This provides a better experience. Of course, neither restricting a music store to only allow your device isn't illegal, nor is the Pre's spoofing an iPod's device ID.
The question of the matter, is whether they're immoral, and I find both to be equally so. I'm not turning a blind eye towards what Palm is doing, it's definitely questionable. I just think it's as equally questionable as what Apple is doing on the other side.
As for alternatives, would you rather Palm backed doubleTwist, which my understanding is that it allows you to transfer even music that isn't DRM free to any device? This way, Apple still gets the money for people buying DRM-free songs, and Palm customers get a good experience.
And one last comment on the subject, applying copyright infringement to something like the iTunes thing is a huge stretch.
@ Joe H
Once again you're not listening
Syncing is only one way to get music out of Itunes. Apple is not restricting anyone from putting music onto their device
However in order to sync, the device maker has to design a program that will play nice with Itunes sync without hacking
it's that simple
It seems as though you're for free market, but then you don't want any regulations or restrictions on free market. Without free market regulation their would be millions of fake Microsoft & Apple companies with the same name and logos selling hack job versions of their products.
Listen to reason and stop defending Palms dumb decision.
@Joe H (if Engadget's comment system gets this in the right place of course) - You're overlooking the fact that iTunes is really three applications. The first is the iTunes store that lets you purchase and store your music on the hard drive. The second is the media management application that accesses that data. The third is a sync tool to allow iPod's to link to that data. The media that you pay for via the iTunes store is freely available to any application and, I believe, there are XML data files created that aren't really used by iTunes just so that third parties can access that data properly.
The argument of 'no-one installs third party software' is cobblers though. Just build the sync app, store it on the Pre as a 'driver' and install it automatically (with an option to cancel installation) when the phone connects. Job done. Or if you want to give consumers a little more credit just put a disc in the top of the box with a big 'if you use iTunes INSTALL THIS SOFTWARE TO SYNC' label on it.
As for Apple should allow anyone to use their sync app - did Palm allow windows mobile devices to sync out-of-the-box with their desktop app? Does Microsoft let Palm sync via Active Sync? The problem is, as soon as Apple allows it they're also responsible in the eyes of the customer for supporting the device. If they didn't say anything, let it go through several versions of iTunes then did something that broke it entirely by accidents it's APPLE that'd be expected to fix it. How on earth is that fair?
Basically, the tools are there for Palm to build or buy their own solution for syncing with your iTunes library and to ensure that anyone that needs that software knows to install it. As it is now Palm's customers are the ones that loose out because they keep finding they've got broken media syncing.
Would have been a great time to own a pre.
epic fail...
Next you'll see Jon Rubinstein holding a 9mm loaded with cyanide dipped, hollow points to your head saying if you ain't got a Pre then follow him to The Shack to pick one up. And you'd be wise not to argue considering he though he was raising hell on Apple by taking secrets to Palm.
Yall should have seen the red flags with the halogen lights when that big investment guy was hanging out with the engineers(WTF!).
The iphone is by far the best damn cell phone on the market. Out the box it has features ready to use(HEARD THAT VERIZON!). I told you the Pre was shit. I'd cash out now before it's too late and you find yourself scoping your young family out with the shot gun before turning the damn thing on yourself.
Take it easy, it's just a phone..... Try fiber in your diet. It does wonders to your body.
Muahahahaha ha ha ha ha ... (Stewie Griffin's evil laught)
sent From my iPhone. Oops.
your comment was so deep and insightful, it made me realize about the workings of the universe./sarcasm
douche
sent from my palm pre
They're already back.
That is quiet common issue when a company introduces something new not to mention there own Application Store... This happens all the time.. Most of the time over-traffic servers or something but something happens for sure. Think of Nokia and Blackberry Stores... iPhone is the only one that did not face this issue.... and AppStore has never went down....
well, Again we are talking about APPLE.. So! yea, Thats something that is common and natural.. I would be surprised if its not up by morning again...
as if ipwn dint have any moments of failure. big deal, this is a glitch, and everyone has their moments. all this is nothing compared to the legends of Microsoft!