johnthuss
Joined 10 years ago
Karma
650
Submissions
196
Member since
Jul 4
Joined 10 years ago
It's not the main point of the article, but it is there.
So the app used a digital signature / request signing with a key that was obfuscated and embedded in the binary. With anonymous users I don't know how else you could avoid use of the private API.