{
  "id": 18348961,
  "title": "My gym forced a social media down my throat. So I reverse-engineered its app",
  "url": "https://urgent.news/2026/11/05/my-gym-forced-a-social-media-down-my-throat-so-i-reverse-engineered",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T17:30:17.000Z",
  "source": {
    "name": "Hacker News",
    "slug": "hacker-news",
    "url": "https://shayon.work/blog/reverse-engineering-gym-pass"
  },
  "original_language": "en",
  "account": "A fitness enthusiast recently joined a new gym and found their experience to be generally positive with the equipment and management. However, they were frustrated by the app's social feed which displayed users' gym selfies and forced them to post their own. This made the user feel like they were subjected to involuntary social media, which they strongly disliked. The user, who had not used social media in over a decade, was adamant about blocking ads, YouTube comments, Shorts, and suggested videos. They even used browser extensions to prevent LinkedIn's news feed from appearing. Determined to bypass the app's unnecessary features, the user began reverse-engineering the QR code generation logic. They quickly discovered that the code changed every 15 seconds and that screenshots were not allowed on the screen. After turning off Wi-Fi, the user found that the QR codes remained valid for several days. Using tools like Android's SDK, OpenSSL, and WebCrypto, the user managed to extract the necessary secrets to generate the QR codes locally. This allowed them to bypass the social feed requirement and access the gym's facilities without the intrusive app interface.",
  "summary": null,
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}