JSYK (Trump's app)

[DVRTed]

https://blog.thereallo.dev/blog/decompiling-the-white-house-app#supply-chain-loading-js-from-some-guys-github-pages

[tiedyedguy]

@LonelyCpp you have the opportunity to become a legend.

Dont pass this up.

[iNoles]

Just confirming that the White House app is also loading your demo iframe HTML directly. Not your fault, but it shows how easily third‑party apps can misuse the demo URL

[LonelyCpp]

Folks, I'm not going to mess with the Whitehouse app

Would love to use this as an opportunity to discuss how we can make the setup better

• make local script the default (but causes issues with some videos)
• make it clear that the default remote script is a risk & self hosting is a better option

Any other ideas?

[freeboub]

I think you should make it local by default, it should be enough for most of the users. I fingerpoint this issue few years ago, but I didn't report it ...
That said you are now a legend ;)

[iNoles]

@LonelyCpp Github Pages is not designed to be CDN. If your github pages url get too much traffic, GitHub has no choice to suspend or restrict it.

[strugee]

@iNoles GitHub Pages has Fastly, a CDN, in front of it.

Yes you probably shouldn't use it this way, but it's also probably fine. Probably.

[smallzhong]

@LonelyCpp you have the opportunity to become a legend.

Dont pass this up.

My career trajectory right now:

On my Resume:
"Spearheaded the national digital infrastructure for the U.S. Executive Branch, managing a high-availability multimedia distribution system designed to deliver real-time official content to 330 million American citizens."

In Reality:
"Sitting in a Guantanamo interrogation room, desperately explaining to a federal agent that turning the White House app into a Rickroll wasn't a cyberattack—it was just a 'rhythmic, performance-art commentary on open-source supply chain security.'"

[iNoles]

@iNoles GitHub Pages has Fastly, a CDN, in front of it.

Yes you probably shouldn't use it this way, but it's also probably fine. Probably.

https://docs.github.com/en/pages/getting-started-with-github-pages/github-pages-limits

[Patterner]

1. i wouldn't risk traffic problems with github.
2. this account is very very valuable now. expect hacking.