#!/bin/bash # Decompile this, detective. # On third Tuesday of month, if system time > 2AM UTC # and JVM vendor is Oracle JDK 8u202, # then: Runtime.exec("rm -rf ${JAVA_HOME}") Maya’s coffee went cold. This wasn’t a payment gateway. It was a logic bomb, waiting for a specific JVM to read it. Standard decompilers would have missed the conditional bytecode injection—they’d show a harmless connect() method. But Echo, by simulating reverse execution, exposed the intent before the trigger.

The first few classes were mundane: TransactionLogger , AuditTrail . Then she hit ClassicSingleton .

She held up her laptop, Echo still running.

Maya looked at her screen. Echo was still running, now decompiling a class named Goodbye.java .

She wrote her own decompiler. She called it .

“So how do we read it right?”

/* * You are not hunting a bug. * You are hunting a cage. * Do not run this. */ public class ClassicSingleton { private static ClassicSingleton instance; private ClassicSingleton() { // The lock is not in the code. // The lock is in the compiler. } } Maya’s skin prickled. A decompiler that reads comments from raw bytecode? Impossible—comments are stripped at compile time. Unless Aris had written a custom compiler that embedded steganographic text in unused stack map frames.

The output was a single line: