---
title: "I decompiled the White House’s new app"
id: "41672"
slug: "i-decompiled-the-white-houses-new-app"
permalink: "https://eay.cc/2026/i-decompiled-the-white-houses-new-app/"
published_at: "2026-03-29T12:26:26+00:00"
author: "Stefan Grund"
type: "post"
format: "link"
tags:
  - "apps"
  - "politik"
  - "usa"
  - "web-entwicklung"
external_url: "https://blog.thereallo.dev/blog/decompiling-the-white-house-app"
short_url: "https://eay.li/40o"
content_copy:
  - "https://bsky.app/profile/eay.social/post/3mi75mekl5r25"
  - "https://eay.social/@eay/116312453191787327"
geo_latitude: "50.973876"
geo_longitude: "6.682862"
---

# I decompiled the White House’s new app

[Link →](https://blog.thereallo.dev/blog/decompiling-the-white-house-app)

> The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy’s GitHub Pages.

[Das Weiße Haus hat eine neue App](https://web.archive.org/web/20260327192133/https://www.whitehouse.gov/releases/2026/03/new-white-house-app-delivers-unparalleled-access-to-the-trump-administration/)[1](https://eay.cc/2026/i-decompiled-the-white-houses-new-app/#footnote_0_41672 "Link direkt auf’s Internet Archive, weil ich nicht dorthin verlinken will.") (Version 47.0.1 🙄) und Entwickler\*in [Thereallo](https://thereallo.dev/) hat sich diese mal genauer angeschaut und gröbste Fehler und Über­wachungs­infra­struktur darin entdeckt. Als jemand der sich zufälliger­weise mit genau diesem Tech-Stack auskennt, kann ich bestätigen: so macht man das nicht.

> Is any of this illegal? Probably not. Is it what you’d expect from an official government app? Probably not either.

1. Link direkt auf’s Internet Archive, weil ich nicht dorthin verlinken will. \[[↩](https://eay.cc/2026/i-decompiled-the-white-houses-new-app/#identifier_0_41672)\]