I accidentally became PureGym’s unofficial Apple Wallet developer (drobinin.com)

Article summary

The author, frustrated with the slow and cumbersome PureGym app, reverse-engineered the API to create an Apple Wallet pass that allows for quick entry to the gym. The author discovered security vulnerabilities and inconsistencies in the app's design, including an 8-digit PIN that hasn't changed in eight years. The project took a weekend to complete and has saved the author 3.8 hours of annual friction. The author questions why PureGym hasn't implemented a similar solution despite having the resources to do so.

Main themes

• App development
• Security vulnerabilities
• User experience
• Gym technology
• API reverse-engineering
• Innovation

What commenters say

• The gym's app is not a priority for the company, and the development is likely outsourced to a cheap consultancy, resulting in a poor user experience.
• The company's focus on getting subscriptions and making it hard to unsubscribe is a higher priority than developing a good app.
• Some commenters argue that the app's design is not that bad and that the physical PIN code is a reliable alternative, while others disagree and think the app is terrible.
• The use of NFC wristbands or keychain barcode tags is proposed as a better solution for gym entry, but some commenters argue that these methods have their own drawbacks.
• The article's project is seen as a proof of concept that highlights the potential for innovation and improvement in the gym's app and technology.
• Some commenters think that the company should prioritize user experience and invest in developing a better app, while others believe that the current app is sufficient and that the company has more pressing concerns.