First release of blue-merle v2 — anonymity enhancements for the GL-iNet GL-E5800 (Mudi
7).
Highlights
- Dual-slot IMEI rotation via AT+EGMR (SIM 1 + SIM 2/eSIM), with three per-slot
modes:
Random (Luhn-valid, 5G band-matched TAC pool), Deterministic (stable per-SIM), and
Static - Two-stage SIM swap — throwaway IMEIs before poweroff, final IMEIs written on the
next
boot before the modem first attaches; triggerable from SSH, LuCI, or a 2-second
touchscreen long-press - Consistent wireless identity — one router vendor per rotation: all BSSIDs share a
single OUI and the SSID broadcasts a matching brand name - Volatile client MACs — tmpfs over GL-iNet's client database; connected-device
history
never reaches flash - LuCI admin page — live identity vs. factory state, network
registration/operator/signal,
rotation options, and one-click actions - Splash screens — six framebuffer status frames, including honest warning/error
states blue-merle check— 16-point read-only health check- Full factory capture at install; complete restore on demand or at uninstall
Compatibility
GL-iNet GL-E5800 (Mudi 7), firmware 4.8.3 / 4.8.5, modem RG650VNA01ACR02A04G8G.
Install
Two equivalent packages are attached — identical contents, different build paths:
| Asset | Built by |
|---|---|
blue-merle-v2_1.0.0-Script-Release.ipk |
build-ipk.sh — bundles the pre-compiled |
| touchscreen daemon | |
blue-merle-v2_1.0.0-SDK-Release.ipk |
OpenWrt 23.05.4 SDK — every binary compiled |
| from source in CI |
scp -O <downloaded.ipk> root@192.168.8.1:/tmp/
ssh root@192.168.8.1 opkg install /tmp/<downloaded.ipk>See the README for prerequisites
(enabling LuCI) and full usage.
Full Changelog: https://github.com/WSchlesner/blue-merle-v2/commits/v1.0.0