Wouldn't it be easier to reverse engineer their app? It seems easy enough, at least one the Android side. You could use something like baksmali to convert all t

Wouldn't it be easier to reverse engineer their app? It seems easy enough, at least one the Android side. You could use something like baksmali to convert all the dex code to smali, then grep that for calls to AudioRecord/MediaRecorder and figure out what triggers that code. That's why I'm skeptical that Facebook would do this -- it seems like a terrible business decision given the high chance of getting caught, either by reverse engineering or a whistleblower.