Hacker Newsnew | past | comments | ask | show | jobs | submit | more wongmjane's commentslogin

Also, I was a broke college student. How can I even afford to invest! Still having hard time grasping the concept of stock market and related topics :P

I think there are better ways to bring food to the table than this, such as getting a job as SWE, or donations.

I never earned any money from this hobby and have no plans to change it


> I never earned any money from this hobby and have no plans to change it

Except for the bug bounties you've received, presumably. Unless you consider those a separate part of what you do. All great work in any case!


As a user, I am curious and excited to know the future of the apps I use. Reverse engineering allows catching a glimpse of the future without having to wait for launch events or press releases.

Often times, this kind of scoops could be beneficial to companies. Product teams at companies could look at public opinions and take that into the consideration of product decision. It functions similarly to "focus groups" or "soft launch", except it's free. According to my profile on CNN, a Twitter spokesperson mentioned [0]:

> the platform wants its users to be part of the process, and these types of discoveries help it learn

That's not to say companies encourage users to reverse engineer their apps. However, if they make it completely impossible to find any unreleased features whatsoever, it will kill off this free channel of unofficially gathering public opinions (or hype) before launch.

It is understandable there are competitors out there in reality. Getting better at hiding tests and under-development features could help preventing the competitors from knowing the company's upcoming strategies.

To hide or to not hide, they both have pros and cons. It really comes down to how companies balance their priorities. If their priority is to hide everything until launch, even if it means getting rid of the free QA and focus groups, go for it.

I personally hope companies will choose the transparent route rather than being a sealed black box. I believe users deserve to know what is changed in the apps installed on their own phones. Being more specific than the vague "bug fixes and improvements" will provide a sense of assurance to users.

[0]: https://www.cnn.com/2019/03/22/tech/jane-wong-app-features/i...


Hi, Jane here! I hope you like this profile of me :)

It has been delightful to watch different approaches companies take to enrich, optimize and harden their web and mobile apps.

For example, Facebook has been dogfooding a new approach to improve the overhead in their mobile apps since last year. I speculate (or hope) they will announce it during F8 2019 in coming days.


Question: why don’t you profit from this either with the stock market or selling info to companies? What is your motivation for doing this anyway since it takes significant time and skill?


Have you done any analysis of job ads to see whether they give you insights into the product strategy of a company? I know you can’t uncover specific features from them, but it might offer clues into their priorities or roadmap. Just a thought.


My focus has been analysing within the scope of apps and its code. But I do read tech news of journalists' analysis on job ads, and note that down for future references


Looking at your site for the first time, my immediate thought was: How has FB not hired you already?


What's your preference for tools to go about this? I've found some dex decompilation to be very hit and miss. Just wondering what is your go to/process for android and iOS if you don't mind sharing ? Cheers


I usually implement lexers on my own to solve specific needs because some apps move so rapidly the existing solutions couldn't keep up


What are you lexing?


Hey Jane, HH friend here. Just wanted to let you know that every write-up of yours I've read has been interesting - keep up the awesome work!


I've never heard of your site, I'm going to follow it but couldn't find the rss feed somewhere. Is there one?

Ps. Nice work!


Glad you like it! The site is currently under a revamp and feed support is on my TODO list

For now, I do tweet about it whenever I post something new on my blog


I was excited to see this profile on HN, it was always fun seeing your posts on HH (and elsewhere ͡ᵔ ͜ʖ ͡ᵔ ) when I was using Facebook.

Congratulations, fellow traveller.


What's HH?


"Hackathon Hackers"

It's a Hackathon-themed Facebook group:

https://facebook.com/groups/hackathonhackers


What do you mean "improve the overhead"? Can you elaborate without giving the specifics away?


It's me who reverse engineer the Instagram app, demo the unreleased features, and then tweet about it, in which is then picked up by Constine as per usual:

https://twitter.com/wongmjane/status/1118970853654290432

No employees told me anything about it before and after the tweet

Though it's unsure if Instagram purposely planted this to get me tweet about it (because that description sounds like a prepared statement) ;)


Do you have any write ups on how you find unreleased features like this? Are you looking at the binary or the network traffic? Cool findings anyways!


Yeah. I follow you on twitter. Can you write a blog post about your workflow? That would be an interesting read.


"Though it's unsure if Instagram purposely planted this to get me tweet about it"

I suppose it's game-over if Instagram is that good at inception. :-)


Big companies know that every one of their binaries gets torn apart by people eager for a scoop and have exploited this in the past. See for example https://www.androidpolice.com/2014/08/06/google-just-rickrol... (though this one was for a laugh)


Ooh, I don't know. If they regularly see people dig through their code and then tweet about what they find, planting things in the code sounds like a great way to "soft announce" features to gauge reaction. That way if they decide not to go forward, they don't lose face, it was just some unannounced feature that they were considering.


It’s not like this sort of thing hasn’t been done in the Apple rumors ecosystem for a long time...


happens more than you may think. as for instagram doing it here i don't know either.


Interesting! I have no reason to doubt your intentions or that you are working independently. That said, if you have a history of finding these and getting picked up by news, it's certainly possible that Facebook could be using your reverse engineering skills as a way to leak things.

I know how cynical that sounds, but I've seen too much from disinformation from Facebook execs to take anything from them remotely at face value, no pun intended. Anyway, there's no way to prove it, just speculation based on a feeling I had.


I actually ignore unreleased features about ads because it's not something I personally find exciting


I can't argue with that. Plus it might make people question your "Not Facebook Employee" twitter tagline.

Speaking of which, I saw a tweet that you're interviewing at Facebook this week. Is that true?

Not that I would ever begrudge someone from trying to make it big in tech, but dang, I would hope someone with your skills would find an opportunity working for the resistance rather than the occupiers :-)


I included "Not Facebook Employee" because too many people told me to not roll out this and that feature, ask me to give them verified badges and tech support

Yes, I am interviewing with Facebook. It's true. It'd be my first time actually stepping into the tech industry


Nice job Jane!


That's just the journalist's take on the feature.

In Instagram's app itself, the feature is elaborated as follow:

> We want your followers to focus on what you share, not how many likes your posts get. During this test, only the person who shared a post will see the total number of likes it gets.

source tweet: https://twitter.com/wongmjane/status/1118970853654290432

Instagram then stated to the press they are:

> exploring ways to reduce pressure on Instagram is something we’re always thinking about


It's also possible that they're experimenting with this in anticipation of https://news.ycombinator.com/item?id=19665221 (a proposed ban on likes for children).


As an ironic living example of how it's a poor choice I guess


Disabling JavaScript and cookies for medium.com domain, and a bunch of uBlock rules [1] should do the job

[1] Here's mine:

medium.com##.metabar

medium.com##.js-stickyFooter

medium.com##.js-postAttributionFooterContainer

medium.com##.js-postActionsFooter .buttonSet

medium.com##.button--follow


There are also dedicated extensions for this [0]

[0]: https://makemediumreadable.com


Thank you for this.


As I was reading I noticed that none of the complaints appear for me. uBlock Origin and uMatrix block all of it.


Firefox's Reader view works brilliantly on Medium FWIW.


Wow, this is great. Thanks for sharing!


GitLab does not recommend hosting it in such a low-spec [1]. Would love to see if such setup is still feasible, though.

[1] https://docs.gitlab.com/ee/install/requirements.html#memory


There does not seem to be an option to link a WhatsApp account to a Facebook account (other than associating phone numbers). So it does not seem to be the case


They do that automatically through your phone number and device identifier which they have access to.


Not surprised. Facebook/Messenger Android App can read phone call log.

Somewhere in their Messenger Android app indicates they might be planning to provide a dialer and support voice calling. It makes the excuse of reading call log more justifiable /s


Can the iOS WhatsApp app read call logs? I block it from my contacts et cetera but am not sure about call logs.


No they can’t. No 3rd party apps can read call logs and messages. 1st party (Apple’s) can.


But i think if you have friends & family that use android devices,..you are still in the loop.


iOS doesn’t offer that capability. The closest thing is CallKit which allows a voip app like WhatsApp to write calls into the system call log.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: