Repository navigation
Subshell 0.85-beta
Pre-release
Pre-release
Immutable
release. Only release title and notes can be modified.
Subshell 0.85: a security update for sign-in, notifications and media
Highlights:
- Signing out of an account now also removes Reddit's web login, unless another signed-in account still uses it.
- The sign-in window opens only Reddit, Google and Apple pages, and a sign-in that fails is also withdrawn at Reddit.
- Other apps can no longer open accounts or screens in subshell. Notifications from before the update just open the app.
- With the app lock on, the recent-apps preview stays blank on Android 12 and older, and new-post notifications from hidden communities don't name them.
- Post images and videos load only from public addresses, images and GIFs share one memory limit, and nothing is written to the system log.
Under the hood:
- Sign-in files are now bound to their account; existing ones are upgraded on first start.
- Update checks ignore a release dated far in the future, and an update advisory can no longer point anywhere but this release page.
- Every library in the build is verified by checksum and signature; the website shows the APK signing certificate fingerprint.
Source: https://github.com/brealorg/subshell-source-public/tree/v0.85-beta (snapshot of this release).