Skip to content

v0.0.9

Choose a tag to compare

@SysAdminDoc SysAdminDoc released this 27 Sep 18:30
· 169 commits to main since this release

HushMessenger v0.0.9 provides the patch bundle for Messenger 580.0.0.49.91 arm64 builds 346013387 and 346013440.

Known startup limitation

Re-signed Messenger previously installed with the matching Facebook key but opened a blank first-run screen. An unchanged Morphe rebuild did the same. This release does not resolve that startup failure. Re-signed chats, calls and notification behavior remain unverified.

Changes

The new read-only installation check verifies candidate and installed APK certificates before any phone changes. It reports installed-app signer mismatches, shared-permission owners and downgrades. API-specific rotated certificates and complete multiple-signer sets are checked; source stamps aren't app identities.

Stock S22 and S25 exchanged encrypted messages between two owned accounts. The S22 browser switch passed HTTP and HTTPS comparisons. Its original setting was restored, and both installed apps and sign-ins were preserved.

Verification

  • Twelve Kotlin tests and eleven Python tests pass. Ruff checks pass.
  • Two clean local builds produced the same bundle checksum.
  • Morphe Desktop 1.17.0 patched and signed the S25 APK off-device. Its manifest has 26 plus three renamed permission attributes and no old names.
  • The altered-APK check stopped before output. The installation check passed the stock candidate and rejected a mismatched fixture and the rebuilt APK without installing either.

Download patches-0.0.9.mpp and SHA256SUMS.txt. The .mpp is a patch bundle; bring your own supported stock APK. Installation and certificate-check instructions are in the README.