Alasdair posted this clip on bluesky, where I saw it. In the comments, Art UK had posted this article as a reply. Once I clicked through, I knew it would be exactly what HN would appreciate, and here we are.

> In terms of the origins of the app, Google told me “this is not an Android platform nor Pixel vulnerability, this is an apk developed by Smith Micro for Verizon in-store demo devices and is no longer being used. Exploitation of this app on a user phone requires both physical access to the device and the user's password.”

If an attacker has your phone and your password, it's game over anyway, who cares if some random app could allow MITM connections over HTTP.

The rectangular cows of Art UK (2018)

Rod McKuen Was the Bestselling Poet in American History. What Happened? (2022)

Honestly, I knew I had to submit it when I got to the sheep. The cows aren't far off, but that sheep!