Last night, YouTube received what looked like a substantial update v5.9, and, of course, I rushed to start digging through the APK in hopes of finding all sorts of under-the-hood changes. Imagine my excitement when I saw the following new string buried, among other things, inside res/strings.xml:

<string name="music_pass_onboarding_tutorial_uri">https://www.youtube.com/watch?v=dQw4w9WgXcQ</string>

Music Pass! Onboarding! Tutorial! Video!!one1 Of course, I clicked it. Did you?

Wait, don't. Because you'll get rickrolled, just like I did. Google got me good. Via a string. Buried inside an APK like a poison pill that they knew we'd find.

And then they rubbed it in:

You win this round, Google. And I'm not even mad (again).