App Store Vulnerabilities | Timo Hetzel
Apple finally turns HTTPS on for the App Store
These don’t explain all those hacked iTunes Accounts and involuntary Golden Horse Nuggets purchases, but (in part) by making the App Store a web app, Apple opened themselves up to a bunch of very nice attacks, e.g. by having Javascript injected into the pages.