this post was submitted on 29 Mar 2026
950 points (99.2% liked)

Technology

83158 readers
3608 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

The Trump administration's newly launched White House App is under scrutiny after a software developer claimed to have found embedded code that tracks users' precise GPS coordinates every 4.5 minutes and automatically syncs them to a third-party server. The claim, posted on 28 March 2026 by the X account @Thereallo1026, has drawn nearly 260,000 views and prompted questions about data collection practices in government-operated applications.

The post included what appeared to be decompiled source code from the app, revealing what the user described as OneSignal's 'full GPS pipeline compiled in.' According to the post, the code showed the app 'polling your location every 4.5 minutes, syncing your exact coordinates to a third-party server.' The White House has not publicly responded to the specific technical claims.

you are viewing a single comment's thread
view the rest of the comments
[–] obinice@lemmy.world 63 points 19 hours ago (2 children)

The funny thing is, THIS seems to be the part the media is rolling with, but if you read the full details about what it can do and how poorly it's made, tracking your location is only one thing to worry about (though it's a big one to be fair).

E.g The potential for running arbitrary malicious code if one random dude on the internet (who is unrelated to the US government) has his GitHub account compromised? Daaaaaaawg

[–] atrielienz@lemmy.world 7 points 8 hours ago

It was already a no from me, dawg, you don't have to convince me.

No, but seriously. Everything he tries to implement is like 90'S cartoon level evil and sloppy. I bet we could get him monologuing.

[–] 73QjabParc34Vebq@piefed.blahaj.zone 1 points 15 hours ago (1 children)

People don't store signing keys with source code

[–] prenatal_confusion@feddit.org 8 points 13 hours ago

Or at least they shouldn't.

People crawl GitHub for credentials and they are luck a lot.