Skip to content

Subshell 0.85-beta

Pre-release
Pre-release

Choose a tag to compare

@brealorg brealorg released this 24 Oct 06:18
Immutable release. Only release title and notes can be modified.

Subshell 0.85: a security update for sign-in, notifications and media

Highlights:

  • Signing out of an account now also removes Reddit's web login, unless another signed-in account still uses it.
  • The sign-in window opens only Reddit, Google and Apple pages, and a sign-in that fails is also withdrawn at Reddit.
  • Other apps can no longer open accounts or screens in subshell. Notifications from before the update just open the app.
  • With the app lock on, the recent-apps preview stays blank on Android 12 and older, and new-post notifications from hidden communities don't name them.
  • Post images and videos load only from public addresses, images and GIFs share one memory limit, and nothing is written to the system log.

Under the hood:

  • Sign-in files are now bound to their account; existing ones are upgraded on first start.
  • Update checks ignore a release dated far in the future, and an update advisory can no longer point anywhere but this release page.
  • Every library in the build is verified by checksum and signature; the website shows the APK signing certificate fingerprint.

Source: https://github.com/brealorg/subshell-source-public/tree/v0.85-beta (snapshot of this release).