Messages
Rex

28 MB - Initial Release: July 2026

Offline, SECURITY-FIRST SMS/MMS MESSAGING APP with SCREENSHOT BLOCKING, STAGEFRIGHT RESISTANCE, OVERLAY PREVENTION, AND HIGH-THREAT ENVIRONMENT MITIGATION.

Advanced Threat Mitigation

• Pixnapping & TEMPEST Defense: FLAG_SECURE is enforced unconditionally on the call screen, preventing the Android compositor from writing window contents to shared GPU memory buffers. This blocks screen-reading malware and electromagnetic side-channel reconstruction.

• GPU Side-Channel Elimination: All sensitive UI components use LAYER_TYPE_SOFTWARE. By forcing CPU-only rendering, Phone Rex eliminates the GPU as an attack surface, neutralizing GPU.zip and timing inference attacks.

• Stingray & IMSI Catcher Countermeasures: A proximity sensor disable toggle prevents malicious apps from using motion inference to detect call state. Status bar concealment hides 2G downgrade indicators from screen-scraping malware.

• Tapjacking & Overlay Protection: Enforces setHideOverlayWindows to suppress fake call screens and consent-spoofing overlays used by stalkerware.

• SS7 & Network Isolation: Zero cleartext traffic, system-CA-only trust anchors, and no internet permission required. Phone Rex cannot be silently proxied or MITM'd via telecom protocol abuse.

Zero-Trust Architecture

• No telemetry, no analytics, no cloud sync.

• Call history export has been surgically removed to prevent metadata exfiltration.

• allowBackup="false" blocks ADB forensic extraction and cloud backup leakage.

• 100% custom Paleos UI components with zero system inheritance, preventing theme overlay injection.

Security first.

Release Notes (Max 500 chars)

v1.0 — Initial Release

• Hardened call screen with unconditional FLAG_SECURE

• CPU-only rendering for GPU side-channel defense

• Tapjacking and overlay protection enabled

• Proximity sensor disable toggle added

• Removed call history export to eliminate metadata exfiltration vectors

Tap to download the APK directly to your Android device and tap "Install" - you may need to allow unknown sources in your settings the first time.

This app is not available on Google Play

For non-rooted devices:

All apps designed by PALEOS.IO are closed source "free-mium" software.

Access to the code will never be made publicly available to protect myself and the userbase from futuristic compilation attacks.

If you enjoy using any of these apps, you can donate or spread the word on social media: @paleos.io

© 2026 PALEOS.IO - All rights reserved.