Reading List

The most recent articles from a list of feeds I subscribe to.

TCL is taking over Sony’s TV business

After signing a nonbinding agreement in January to spin off its TV business, today Sony officially announced that TCL will pay approximately 75.4 billion yen (over $473 million) for a 51 percent stake in a new joint venture called Bravia Inc., with Sony holding the remaining 49 percent. Bravia Inc., which will be headquartered in […]

Technical Analysis of the Android Version of the White House’s New App

Thereallo, after spelunking inside the APK bundle for the Android version:

  • Has a full GPS tracking pipeline compiled in that polls every 4.5 minutes in the foreground and 9.5 minutes in the background, syncing lat/lng/accuracy/timestamp to OneSignal’s servers.

  • Loads JavaScript from a random person’s GitHub Pages site (lonelycpp.github.io) for YouTube embeds. If that account is compromised, arbitrary code runs in the app’s WebView. [...]

Is any of this illegal? Probably not. Is it what you’d expect from an official government app? Probably not either.

Hanlon’s razor: “Never attribute to malice that which is adequately explained by stupidity.”

The app is, at least temporarily, popular. As I type this it’s #3 in the iOS App Store top free apps list, sandwiched between Claude and Gemini. I don’t know how similar the iOS app is to the Android one, but I took one for the team and installed it, and after poking around for a few minutes, it hasn’t even prompted me to ask for location access. It’s a crappy app, to be sure. A lot of flashing between screen transitions. When you open an article, there’s a “< Back” button top left, and an “X” button top right. Both buttons seem to do the same thing. There’s no share sheet for “news” articles, which seems particularly stupid. You can’t even copy a link to an article and share it manually.

But the iOS version has a clean privacy report card in the App Store, and I don’t see anything in the app that makes me doubt that. It seems like the Android version is quite different.

Update 1: Someone on Reddit claims to have analyzed the iOS app bundle and discovered similar code as in the Android app, but I still don’t see any way to actually get the iOS app to even ask for location permission. I think there might be code in the app that never gets called. Like I wrote above, it’s clearly not a well-crafted app. If anyone knows how to get the iOS app to actually ask for location access, let me know how. Here’s another analysis of the iOS app.

Update 2: I installed the Android version of the app too, and just like on iOS, the only permission it asks for is to send notifications. Maybe they will in a future software update, but as far as I can see, the app never even tries to check the device’s location, on either platform.

Arc Raiders 'Waking the Grid' quest walkthrough

A complete guide on how to complete the Waking the Grid quest in Arc Raiders including where to find the guard tower and the security control center.

Dice Throne Digital will launch with a Slay the Spire-inspired roguelite mode

In an exclusive interview with Polygon, Nerd Ninjas revealed new details about Dice Throne Digital's surprising Campaign Mode.

Art schools are being torn apart by AI

When my baby brother, a 3D modelling and animation student, talks to me about his projects and studies, the pride I usually feel is becoming increasingly tainted by a growing sense of dread. As a creative professional and former design student myself, I understand all too well how fierce the competition for postgraduate jobs will […]