Updated for compatibility with modern Android versions (API 34+) and enhanced with security hardening.
These updates ensure the launcher remains functional, secure, and performant on modern Android devices (Android 11 through Android 14+).
Pro Tip: On the very first install, if background transparency does not take effect immediately, simply type `restart` in the terminal and press enter.
username [user] [device]: Instantly customize your terminal prompt. Changes both the username and device name and reloads the UI to apply.theme -preset [name]: Rapidly switch between high-quality pre-configured themes.- Available Presets:
blue,red,green,pink,bw,cyberpunk. - Smart Suggestions: Applying a preset automatically colors the suggestion bar and shortcut buttons to match the aesthetic.
- Available Presets:
bbman: The new BusyBox manager for installing and verifying Linux binaries.
- Built-in BusyBox Manager: Gain access to 300+ Linux commands (ls, grep, awk, top, etc.) via the new
bbman -installcommand. - Theme Preset Shortcut Buttons: Enhanced the
theme -presetcommand to show interactive shortcut buttons for presets. - Synchronized Theme UI: Applying a preset now automatically colors the shortcut buttons (suggestions) to match the overall theme.
- One-Tap Application: Shortcut buttons for theme presets execute immediately upon clicking.
To enable a full Linux environment, you can install BusyBox directly from the launcher:
- Type
bbman -installin the terminal. - The launcher will automatically detect your architecture, download the verified binary, and check its integrity.
- Once finished, you can run any Linux command directly (e.g.,
ls,ping,vi). - To remove it at any time, use
bbman -remove.
Security Note: Binaries are sourced from the trusted EXALAB repository and are verified against hardcoded SHA-256 hashes to ensure they have not been tampered with.
- Target SDK: Updated to API 34 (Android 14).
- Min SDK: API 21 (Android 5.0).
- AndroidX Migration: Fully migrated from legacy Support Libraries to AndroidX.
- Gradle & AGP: Updated to Gradle 8.2 and Android Gradle Plugin 8.2.0.
- Java Compatibility: Built with Java 17 support.
This project has been audited and hardened following the OWASP Mobile Application Security Verification Standard (MASVS).
- Scoped Storage Implementation: All application data has been moved from public external storage (
/sdcard/t-ui/) to secure, app-private Scoped Storage (Context.getExternalFilesDir()). This prevents other applications from accessing your T-UI configuration and logs. - Backup Protection:
android:allowBackupis set tofalseto prevent sensitive data extraction via ADB backups (MASVS-STORAGE-1). - Secure File Sharing: Uses
FileProviderfor secure, permission-based file sharing instead of vulnerablefile://URIs.
- Enforced TLS:
android:usesCleartextTrafficis disabled globally. All network communications are forced over HTTPS (TLS 1.2+). - Hardened Service Endpoints: Internal services (Weather API, Connectivity checks) have been upgraded to secure HTTPS endpoints (MASVS-NETWORK-1).
- Signature-Level Protection: Implemented a custom permission
ohi.andre.consolelauncher.permission.RECEIVE_CMDwithprotectionLevel="signature". This ensures only apps signed with the same developer key can programmatically send commands to the launcher. - Intent Security: All system-bound
PendingIntentsuse theFLAG_IMMUTABLEflag to prevent intent redirection attacks (Android 12+ requirement). - Receiver Security: All Broadcast Receivers are registered with appropriate export flags (
RECEIVER_EXPORTEDorRECEIVER_NOT_EXPORTED) to prevent unauthorized external triggers.
- Minification & Obfuscation: Release builds have R8/Proguard enabled (
minifyEnabled true) to shrink resources and obfuscate code, making reverse engineering more difficult (MASVS-RESILIENCE-1). - Foreground Service Security: Updated to comply with Android 14's strict foreground service types (
specialUse,mediaPlayback).
Official community --> Reddit
Official Group --> Telegram
Wiki --> GitHub.com
