47 Seconds of Gym Hell: How I Fixed PureGym's Broken Check-in with Apple Wallet
2025-08-16
An iOS developer's frustration with PureGym's app (47 seconds to check in!) led him on a wild ride. He discovered laughably insecure APIs – an 8-year-old unchanging PIN was more secure than the minute-refreshing QR code. Using mitmproxy, he reverse-engineered the system, built an Apple Wallet pass using PassKit, and slashed check-in time to 3 seconds. The article details the process: reverse engineering, certificate wrestling, Swift backend development, and more. He even integrated it with Home Assistant. A humorous and technically detailed personal project highlighting the importance of user experience.
Read more
Development