Thereallo personal blog

I decompiled the White House's new app

thereallo.dev

The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy's GitHub Pages.

Points

668

HN comments

259

Submissions

1

Cited by

0 commenters

Security & PrivacySoftware Engineering2026

Related posts from the same era

Motorola announces a partnership with GrapheneOS

Motorola News20262,358 points884 commentscited by 10 details

The newest Instagram “exploit” is the goofiest I've seen

SSid20262,210 points491 commentscited by 3 details

Everyone knows your location: tracking myself down through in-app ads

Tim Shmykov20251,957 points600 commentscited by 3 details

Axios compromised on NPM – Malicious versions drop remote access trojan

StepSecurity Blog20261,934 points807 comments details

Our investigation into the suspicious pressure on Archive.today

AdGuard DNS Blog20251,816 points443 comments details

How I bypassed Amazon's Kindle web DRM

Cats with power tools20251,758 points513 comments details