[bluesign]

I don't think Facebook will do this to be honest.

But if they decide to do, I think best way of action will be some defensive programming around it, with plausible deniability.

I am guessing they are already checking binary integrity etc, also they can probably push code updates from server. So when you put this pieces together, they have everything they need technically.

[brandontreb]

So, code updates from the server doesn't matter as we can hook all of the audio recording APIs at a system level. Their _only_ defense IMHO is to NOT do it on Jailbroken devices. You are right, it's super easy to detect jailbroken devices.

[bluesign]

Technically they can also check if you hooked on the recording APIs. This is like a rabbit hole :)