I Decompiled the White House's New App
https://blog.thereallo.dev/blog/decompiling-the-white-house-app
The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy's GitHub Pages.
(By "thereallo" -- https://thereallo.dev/?explore=about )
@lproven@social.vivaldi.net @senchawizard@mstdn.social
Thank you for sharing this breakdown of the app.
This is a government app loading code from a random person's GitHub Pages
It is eye-opening just how much trust we place in apps.
Edited for clarity
