On the reddit thread there is speculation that they are observing the TTL of the packets. All iphones will send them out with the value of 'x'. When packets start leaving with 'x-1' then the person is obviously tethering.