I Decompiled the White House's New App
Summary
A security-focused reverse-engineering analysis of the White House Android app reveals cookie/paywall bypass injection in WebView, continuous GPS tracking via OneSignal, and loading of external JavaScript from GitHub Pages and third-party services. The post highlights supply chain and privacy risks, dev artifacts in production, and no certificate pinning, with implications for government mobile app security and policy.