He Reverse-Engineered His Gym's App to Escape Its Social Feed

My gym forced a social media down my throat. So I reverse-engineered its app

A developer who refuses to use social media found his gym's check-in app forced a selfie-filled feed on him. So he pulled apart the Flutter app with blutter and jadx, found the QR code was an AES-128-CTR-encrypted URL, and recovered the keys from a plain-text log on a rooted phone. He rebuilt the code generator as a SvelteKit web app — and it worked at the turnstile.