Link: https://www.techdirt.com/2026/03/30/the-white-house-apps-propaganda-is-the-least-alarming-thing-about-it/

Call me crazy, but I don’t think an official government app should be loading executable code from a random person’s GitHub account. Or tracking your GPS location in the background. Or silently stripping privacy consent dialogs from every website you visit through its built-in browser. And yet here we are.

The White House released a new app last week for iOS and Android, promising “unparalleled access to the Trump Administration.” A security researcher, who goes by Thereallo, pulled the APKs and decompiled them — extracting the actual compiled code and examining what’s really going on under the hood. The propaganda stuff — cherry-picked news, a one-tap button to report your neighbors to ICE, a text that auto-populates “Greatest President Ever!” — which Engadget covered, is embarrassing enough. The code underneath is something else entirely.

Let’s start with the most alarming behavior. Every time you open a link in the app’s built-in browser, the app silently injects JavaScript and CSS into the page. Here’s what it does:

It hides:
Cookie banners
GDPR consent dialogs
OneTrust popups
Privacy banners
Login walls
Signup walls
Upsell prompts
Paywall elements
CMP (Consent Management Platform) boxes

It forces body { overflow: auto !important } to re-enable scrolling on pages where consent dialogs lock the scroll. Then it sets up a MutationObserver to continuously nuke any consent elements that get dynamically added.

An official United States government app is injecting CSS and JavaScript into third-party websites to strip away their cookie consent dialogs, GDPR banners, login gates, and paywalls.

The ios writeup was even better. Found it from the comments in op.

https://www.atomic.computer/blog/white-house-app-security-analysis/

Legitimately was going to say the same thing. Who would ever download this garbage?

The narcissism is embarrassing.

Give it a few months and your phone will helpfully install it for you.

Oh it's not just Republicans, any bootlickers suffice! Or people who just don't follow politics the way many others do.

The author is way too generous offering their services to the Trump administration. The app is a massive security hole by design. This administration is not your standard business client, they are the attacker that you defend against.

If your adversaries buddies haven’t already done this analysis, they’re having a slow good week.

I downloaded it so I could rate it 1 star and then delete it.

Rules are for thee not me…

anyone know why the user was deleted. I mean this is techdirt so I kinda doubt its because of this article.