Self host demo video, add Aug 9 update, refresh star counts and WebView module to v2.3.3

Author: DresOperatingSystems

CHANGELOG.md

@@ -1,3 +1,15 @@
+## August 9, 2026
+
+### Added
+- New update entry covering the DresSecureComms geo spoofer fix, the receiver and activity hardening, the fresh self hosted demo, and what is left to finish the app
+- Self hosted demo video on the welcome tab, recorded on the current build and served from the site itself
+
+### Changed
+- Replaced the Streamable demo embed with a self hosted video element pointing at dresos-demo.mp4
+- Welcome tab demo line now points at the self hosted video instead of the Ko-fi post, and the coming soon note is gone
+- Star counts refreshed: guide 34, DresSecureComms 29, DresOS WebView 9, DresTermuxAI 9, Android-opsec 7
+- WebView module moved to v2.3.3 on the modules tab and the projects tab, including the download link and the module card badge
+
 ## August 1, 2026
 
 ### Added

dresos-demo.mp4

@@ -75,6 +75,16 @@ <h3>Support DresOS</h3>
   <section class="tab-panel" id="tab-updates">
     <h2>Updates</h2>
 
+    <article class="card">
+      <h3>August 9, 2026 - DresSecureComms Nearly Finished, a Fresh Demo, and a Batch of Hardening</h3>
+      <p>The push on DresSecureComms is nearly at the finish line. Since the modules were signed off we have been heads down on the app, working through bug reports as they come in and tightening the parts that needed it, and it is close now to sitting at the same level as the rest of the system.</p>
+      <p><strong>The geo spoofer.</strong> A user on a OnePlus Nord 4 running Android 16 reported that the mock location feature failed with a message every time they tried it. It turned out to be ours, not their phone. When the app registers itself as a location source it has to tell Android how accurate that source is, and it was handing over a value that newer Android no longer accepts, so the whole thing was refused and the refusal was being swallowed without anyone being told. It is fixed, it now gives Android the values it expects and registers through the newer interface on Android 12 and later, the spoofed position is also handed to the combined location source that most apps actually read today, and there is a new button to stop mocking without restarting the phone. A real thank you to the person who reported it and tested another app on the same handset to prove the fault was ours.</p>
+      <p><strong>Hardening.</strong> Alongside the visible fixes we closed a couple of quieter things. One of the app's internal receivers was reachable by other apps on the device when it never needed to be, so it has been shut to the app itself, and one of the screens that other apps can hand information to is now guarded against being handed something malformed. Neither was known to be exploited, both are the sort of thing you fix before it ever becomes a problem rather than after.</p>
+      <p><strong>A new demo.</strong> The demo video on the site was showing an older build, so we recorded a fresh one on a Moto g32 running the current system, and this time we host it here ourselves rather than on a third party. You can watch it in the DresOS Android tab above. It runs through the whole system on a real device, the file scanner and the spam shield included.</p>
+      <p><strong>What is left.</strong> One more major update finishes DresSecureComms, the big piece being the offline signature side of the file scanner, the part that brings in what Hypatia was known for so a file can be checked with nothing leaving the phone at all. After that the app joins the rest of the system at the stage of simply being kept maintained. We are also lining up the last of the housekeeping, and there is groundwork going on behind the scenes toward the Linux distribution and toward the bonus module for Google's September install restriction.</p>
+      <p>Get the app from <a href="https://github.com/DresOperatingSystems/DresSecureComms/releases" target="_blank">GitHub releases</a> or <a href="https://apt.izzysoft.de/packages/com.dresos.dressecurecomms" target="_blank">IzzyOnDroid</a>. If something breaks on your device, tell us with the device and ROM, that is how these get found.</p>
+    </article>
+
     <article class="card">
       <h3>August 4, 2026 - The Modules Are Complete: microG v3.1.7, WebView v2.3.2, and Both Now Self-Maintaining</h3>
       <p>Over the past couple of days we pushed the last manual patches to both Magisk modules, and from our end they are now complete. From here they keep themselves current. A GitHub Action runs every week, pulls the newest version of everything the modules carry straight from its original source, including our own DresOS WebView engine from its own repository, checks each one against its pinned signing key, then rebuilds the module, bumps the version and publishes the new release by itself. Nobody has to rebuild them by hand anymore, and the new releases come through the same way they always have. This is something we planned for a long time, to switch on once the modules were finished, so that keeping them current stops being a weekly job and that time can go into the rest of the organisation instead.</p>
@@ -175,7 +185,7 @@ <h3>June 5, 2026 - DresOS microG v3.0.0 Released</h3>
       <p>Signature spoofing is now provided by the ROM rather than by the module. Because the bundled microG APKs carry the official microG key, any ROM with microG signature spoofing support spoofs them automatically once they are placed in priv-app. There is no bundled hook and no Xposed framework on any ABI.</p>
       <p>Aurora Services now lands as a priv-app with its own permissions allowlist, so silent prompt free installs through Aurora Store work without the standard Android installer prompt for every app. This resolves the v2.0.0 Aurora Privileged Extension issue. ROMs that already ship an upstream signed microG (CalyxOS, LineageOS for microG, iodeOS, /e/OS) are autodetected by cert match and their copy is preserved. GrapheneOS is hard refused.</p>
       <p>The DresOS Android guide has been updated end to end: Step 5, Step 6, the What You Will Need table, and the SECURITY_ARCHITECTURE.md Layer 8 entry all reflect v3.0.0. The guide also gained an Aves Libre gallery, the Stratum offline 2FA app, the Tuta Calendar encrypted calendar, and a one tap DresOS HeliBoard design, and every download link was audited to a stable form.</p>
-      <p>Watch the full system running on a Motorola Moto g32 on the <a href="https://ko-fi.com/post/DresOS-Android-16-Motorola-Moto-g32-Video-Demo-F5R420TKRN" target="_blank">DresOS Android demo video</a>. An updated demo covering the newest build is coming soon.</p>
+      <p>Watch the full system running on a Motorola Moto g32 in the demo video further down this page, recorded on the current build and hosted here on our own site.</p>
       <p><strong>We rely on community testing.</strong> If you flash v3.0.0 and something breaks, please open a bug report at <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues" target="_blank">github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues</a> with device model, Android version, ROM, root provider, the output of the Action button on the module, and the logs at <code>/data/adb/modules/dresosmicrog/logs/</code>.</p>
     </article>
 
@@ -232,7 +242,7 @@ <h3>Module Repository</h3>
     <h3>Released Modules</h3>
     <div class="module-grid">
       <div class="module-card">
-        <div class="module-id">dresoswv <span class="badge">v2.3.2</span></div>
+        <div class="module-id">dresoswv <span class="badge">v2.3.3</span></div>
         <div class="module-name">DresOS WebView</div>
         <div class="module-desc">
           Replaces Android's system WebView with DresOS WebView, a Chromium engine built from Cromite with Google services and telemetry stripped and Cromite's privacy and security hardening throughout. The system WebView is the browser engine used internally by hundreds of apps whenever they render web content. Google's version phones home on every render. This module replaces it in a single Magisk flash with DresOS's own engine, signed with the DresOS release key.
@@ -246,7 +256,7 @@ <h3>Released Modules</h3>
           After flashing: reboot, then verify with adb shell dumpsys webviewupdate. The active provider should be org.dresos.webview.
         </div>
         <div class="module-links">
-          <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases/download/webview-v2.3.2/DresOS-WebView-v2_3_2.zip" target="_blank">Download</a>
+          <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases/download/webview-v2.3.3/DresOS-WebView-v2_3_3.zip" target="_blank">Download</a>
           <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/tree/main/webview" target="_blank">Source</a>
         </div>
       </div>
@@ -319,12 +329,13 @@ <h3>Built on our own components</h3>
     </div>
 
     <h3>Watch the System in Action</h3>
-    <p>A full walkthrough of a DresOS Android 16 device on a Motorola Moto g32, with every layer of the stack running.</p>
+    <p>A full walkthrough of a DresOS Android 16 device on a Motorola Moto g32, with every layer of the stack running. This is the current build, recorded fresh, and it is hosted here on our own site rather than any third party.</p>
     <div class="card" style="max-width:340px;margin-left:auto;margin-right:auto;">
-      <div style="position:relative;width:100%;padding-bottom:177.78%;height:0;overflow:hidden;border-radius:8px;">
-        <iframe src="https://streamable.com/e/rg3tsm" style="position:absolute;top:0;left:0;width:100%;height:100%;border:0;" allow="fullscreen" allowfullscreen></iframe>
-      </div>
-      <p style="margin-top:12px;">This demo shows an earlier build. An updated demo covering the newest version of the system, including the file scanner and spam shield, is coming soon.</p>
+      <video controls playsinline preload="metadata" style="width:100%;border-radius:8px;display:block;">
+        <source src="dresos-demo.mp4" type="video/mp4">
+        Your browser cannot play this video. You can download it <a href="dresos-demo.mp4">here</a> instead.
+      </video>
+      <p style="margin-top:12px;">A full run through the current DresOS Android system on a Moto g32, including the file scanner and the spam shield.</p>
     </div>
 
     <h3>Build Your DresOS Android System</h3>
@@ -472,11 +483,11 @@ <h2>GitHub Projects</h2>
     <h3>DresOS Android</h3>
     <div class="card">
       <ul>
-        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System" target="_blank">DresOS-The-Android-Defensive-Security-System</a> - The complete unified DresOS Android guide: DeGoogling, operational security, the Magisk modules, the app and core component list, security architecture, and changelog. (30 stars)</li>
-        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules" target="_blank">DresOS-Magisk-Modules</a> - The two Magisk modules the DresOS system needs: our microG suite and our system WebView engine. Current releases: DresOS WebView v2.3.2 and DresOS microG v3.1.7. (Shell, 19 stars)</li>
-        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-WebView" target="_blank">DresOS-WebView</a> - The DresOS WebView engine itself, our Cromite based hardened Chromium build with Google services and telemetry stripped, signed with our own release key. (Smali, 8 stars)</li>
+        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System" target="_blank">DresOS-The-Android-Defensive-Security-System</a> - The complete unified DresOS Android guide: DeGoogling, operational security, the Magisk modules, the app and core component list, security architecture, and changelog. (34 stars)</li>
+        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules" target="_blank">DresOS-Magisk-Modules</a> - The two Magisk modules the DresOS system needs: our microG suite and our system WebView engine. Current releases: DresOS WebView v2.3.3 and DresOS microG v3.1.7. (Shell, 19 stars)</li>
+        <li><a href="https://github.com/The-DresOS-Foundation/DresOS-WebView" target="_blank">DresOS-WebView</a> - The DresOS WebView engine itself, our Cromite based hardened Chromium build with Google services and telemetry stripped, signed with our own release key. (Smali, 9 stars)</li>
         <li><a href="https://github.com/DresOperatingSystems/Android-Degoogling" target="_blank">Android-Degoogling</a> - The original rooted degoogling guide, now merged into the unified DresOS guide. (Archived, 11 stars)</li>
-        <li><a href="https://github.com/DresOperatingSystems/Android-opsec" target="_blank">Android-opsec</a> - The original on device OPSEC guide, now merged into the unified DresOS guide. (Archived, 6 stars)</li>
+        <li><a href="https://github.com/DresOperatingSystems/Android-opsec" target="_blank">Android-opsec</a> - The original on device OPSEC guide, now merged into the unified DresOS guide. (Archived, 7 stars)</li>
       </ul>
     </div>
 
@@ -491,8 +502,8 @@ <h3>Kali Linux</h3>
     <h3>Other Projects</h3>
     <div class="card">
       <ul>
-        <li><a href="https://github.com/The-DresOS-Foundation/DresTermuxAI" target="_blank">DresTermuxAI</a> - AI assistant for Termux with coding assistant abilities. (Archived, Python, 8 stars)</li>
-        <li><a href="https://github.com/DresOperatingSystems/DresSecureComms" target="_blank">DresSecureComms</a> - The DresOS secure communications app. Private SMS and MMS with per contact AES-256-GCM encryption, a full default dialer, on device spam and scam call screening, an encrypted contacts vault, and VirusTotal link, file and app scanning. On IzzyOnDroid. (Kotlin, 25 stars)</li>
+        <li><a href="https://github.com/The-DresOS-Foundation/DresTermuxAI" target="_blank">DresTermuxAI</a> - AI assistant for Termux with coding assistant abilities. (Archived, Python, 9 stars)</li>
+        <li><a href="https://github.com/DresOperatingSystems/DresSecureComms" target="_blank">DresSecureComms</a> - The DresOS secure communications app. Private SMS and MMS with per contact AES-256-GCM encryption, a full default dialer, on device spam and scam call screening, an encrypted contacts vault, and VirusTotal link, file and app scanning. On IzzyOnDroid. (Kotlin, 29 stars)</li>
         <li><a href="https://github.com/DresOperatingSystems/Docker-android" target="_blank">Docker-android</a> - A Docker like environment on mobile, for advanced users. (Archived, 4 stars)</li>
       </ul>
     </div>