Top all-time · #16995
Verichains
Company blog · blog.verichains.iosecurity
Verichains is the company blog at blog.verichains.io, writing about security. Since 2023, 4 different Hacker News readers have linked it 4 times, most often “Technical Analysis – Improper Use of Private iOS APIs in Vietnamese Banking Apps”. It is still writing: the last post was on 2026-10-23, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link these posts on how iPhone apps can detect which other apps are installed, through private or undocumented iOS APIs such as SpringBoard launch calls, including banking apps using this to find unauthorized apps.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Leading security firm trusted by top fintech customers including Binance, Bullish, Bybit, Galaxy Digital, Vantage FX, Polygon, BNB Chain, Aptos, Sui, Kakao, Line, Abu Dhabi Blockchain Center, as well as many traditional banks and fintech companies! wi
Most-linked posts?
- Technical Analysis – Improper Use of Private iOS APIs in Vietnamese Banking Apps3 people · 3 mentions · first linked 2025-03-28
What Hacker News says?
Actually you can via private API, which Apple app use all the time but forbid other app to use https://blog.verichains.io/p/technical-analysis-improper-use...
Comment linking /p/technical-analysis-improper-use-of
on “Everyone knows all the apps on your phone”Submitted Technical Analysis – Improper Use of Private iOS APIs in Vietnamese Banking Apps as a story · 90 points
HN discussionNot sure about the manifest but recently I've seen talk about some banking apps using SBSLaunchApplicationWithIdentifierAndURLAndLaunchOptions (undocumented function in SpringBoardServices) [0] to try to launch another app on the phone by the bundle id, and they can determine if it's installed or not. They were using this trick to detect unauthorized apps on the phone. https://blog.verichains.io/p/technical-analysis…
Comment linking /p/technical-analysis-improper-use-of
on “Everyone knows all the apps on your phone”Submitted Critical Key Extraction Attacks in Popular Threshold Signature Scheme as a story · 1 points
HN discussion