Hacker News Reader

You'd also have to make sure they were the only user that received that binary.

Otherwise you'd have to hope that no one reverse engineered the binary and noticed the oddly specific comparison there.

You might be able to disguise it as debugging/development code that was mistakenly left in there. And instead of a hardcoded list of targets it could pull down the values in a more creative way. But at the end of the day that probably wouldn't stop a talented reverse engineer from figuring out what was going on.

Are reverse engineering techniques currently greater than known ability to obfuscate compiled iOS code?

Yes

And it'd have to work for other platforms, too. Android is Java right? Which is even easier to RE.

Android apps can also contain native code. Indeed, WhatsApp includes such libraries, to help with Curve25519 encryption, video encoding, voice over IP, and other functionality.

But it should be straightforward enough to see if text messages or UI elements (suppress key change notification) are being change depending on the output of those libraries.

Reply on news.ycombinator.com