Re:Everyone knows all the apps on your phone
by IshKebab on Sunday March 30, 2025 @03:21AM
(#43522087)
The worst one is the UK's NHS app, which is only available as an app, despite being just a webview wrapper! I have no idea what they were thinking.
Re:Everyone knows all the apps on your phone
by cyberpunk on Sunday March 30, 2025 @04:14AM
(#43522366)
Sometimes it’s a compliance thing, e.g we can only show health data if your device passes some security controls first.
Re:Everyone knows all the apps on your phone
by WesolyKubeczek on Sunday March 30, 2025 @04:18AM
(#43522375)
What happens when you visit whatever URL is being wrapped?
IME those apps often have the HTML/JS embedded, so you would have to extract the contents, host them somewhere and proxy the API calls.
Re:Everyone knows all the apps on your phone
by IshKebab on Sunday March 30, 2025 @04:26AM
(#43522423)
I dunno, I haven't reverse engineered it to find the URL. But I would imagine it gets confused about authentication.
Re:Everyone knows all the apps on your phone
by donalhunt on Sunday March 30, 2025 @05:17AM
(#43522701)
Would put money it on it using something like '?device_verified=1'.
Re:Everyone knows all the apps on your phone
by pasc1878 on Sunday March 30, 2025 @09:49AM
(#43524183)
You go to the nhs webpage and it works in the same way.
Login is better on the iOS app as you can use touch id/faceId and not userid/password also the webpage asks for cookies as it can't seem to remember the choice
Re:Everyone knows all the apps on your phone
by IshKebab on Sunday March 30, 2025 @01:18PM
(#43525792)
Really? What's the URL that would allow me to see test results and book appointments?
Re:Everyone knows all the apps on your phone
by pasc1878 on Monday March 31, 2025 @05:07AM
(#43532802)
Unfortunately that seems to depend on who did the test or your GP.
There seem to be sites for your GP (which mine does via a .nhs.uk domain it used to be via https://account.patientaccess.com/ which still shows appointments but does not allow booking but still allows requests for repeat prescriptions.) or hospital portal for results.
A big issue with this trend is that unlike the web, the whole Android ecosystem is a walled garden which is strictly controlled by Google. In principle you can run your own custom Android ROM, but in practice this will lock you out from any app which uses Play Integrity API to enforce Google's totalitarian regime which dictates what software YOU are allowed to run on "your" hardware.