The White House App Expands Access to Additional Government Devices

Summary:

• The Department of Homeland Security will pre-install The White House app on official devices.
• This app has raised several concerns regarding security and privacy, utilizing third-party code.
• Last month, it was also automatically installed on devices issued by the FAA.

When The White House introduced its app a few months ago, it seemed there was little incentive for individuals to download it. Essentially, it functions as a simple interface for The White House website, with much of the information already available from various other channels. Nevertheless, the US government has deemed it important enough to install automatically on government devices.

As per an email dispatched to employees of the Department of Homeland Security (DHS) and reviewed by relevant sources, The White House app will be automatically set up on all government devices.

While the app itself may lack significant unique features, the email branded it as “a handy way to access official White House communications, encompassing announcements, executive actions, speeches, livestreams, videos, and other updates.”

Interestingly, the app reportedly uses code from a software kit company called Elfsight, which was founded in Russia. Although The White House asserts that “Elfsight underwent a comprehensive security evaluation by White House IT and received approval for use,” it remains a questionable choice for an official government application. Notably, it was also reported that Elfsight inadvertently exposed some personal information of White House staff, which the administration labeled as a “vulnerability on Elfsight’s part.”

The app’s issues extend beyond just these concerns. In addition to the security risks associated with using an app that does not opt for certified cloud services on government employee devices, it also poses significant data and privacy risks for everyday users. Reports indicate that the app shares information such as a user’s time zone, IP address, phone model, and other personal data with third-party services.

During the Trump administration, there has been a push to ensure The White House app is on federal agency devices. Just last month, the Federal Aviation Administration (FAA) began automatically installing the app on all FAA-issued iPhones and iPads. It seems almost paradoxical that an app with extensively documented security flaws is being uniformly installed on devices utilized by the Department of Homeland Security.