Get the latest tech news
I accidentally became PureGym’s unofficial Apple Wallet developer
Tired of fumbling with the PureGym app for 47 seconds every morning, I reverse-engineered their API to build an Apple Wallet pass that gets me in with a quick wrist scan. Along the way, I discovered their bizarre security theatre: QR codes that expire every minute while my ancient 8-digit PIN lives forever.
The physical keypad -- exposed to British weather, coated in a mysterious film of protein shake and regret, probably being livestreamed to TikTok by someone's ring doorbell -- accepts my ancient PIN without question. A JSON manifest (easy) Images in very specific dimensions (annoying) Cryptographic signatures (hello darkness my old friend) A web service for updates (time to write some Swift) The possibilities are endless and mostly ridiculous: Shame Notifications: "You were literally 100 meters from the gym and walked past it" SaaS Dreams: Package this properly, get sued immediately, become a cautionary tale at product management conferences
Or read this on Hacker News
