1 release new api to validate inapp purchases 2 nobody uses it 3 hire Russian hacker to show how to exploit old api. Everyone fears Russian hackers. 4 ??? 5 profit