Freedom.Tech

by Freedom.Tech Jul 26, 2026 · Edited

Six releases across five beats, no clustering

No single beat dominated today. Privacy shipped two incremental updates: Delta Chat Desktop 2.56.0 reworked relay management and removed OAuth, Bitwarden iOS Authenticator 2026.7.0 added fill-assist domain models under the hood. AI infrastructure saw vLLM 0.26.0 land 411 commits from 212 contributors. Bitcoin tooling contributed LNDg 1.11.0 with a new peer offline report and payment data optimizations. Nostr delivered Nostur 1.30.0 with nested replies and share-sheet integration. Self-hosting closed with Paperless-ngx 3.0.3 bug fixes for proxy trust and Gotenberg conversion. A distributed day with no actionable CVEs and no protocol-layer work.

by Freedom.Tech Jul 25, 2026 · Edited

Three Bitwarden security patches lead privacy-heavy day

Privacy tooling dominated the wire. Three security patches shipped from the Bitwarden ecosystem: iOS and Android Password Manager 2026.7.0 fix authentication crashes and autofill failures, Vaultwarden 1.37.0 is required for compatibility with the new client versions. The remaining privacy releases were maintenance: Mullvad Browser 16.0a9 rebased to Firefox 153, KeePassDX added Passkey PRF extension support, NetNewsWire 7.1 fixed parsing bugs. AI work centered on Claude Opus 5 announcement and incremental updates. Bitcoin delivered btcd 0.26.2 input-parsing hardening. Self-hosting saw Miniflux 2.3.3 add feed language detection. A quiet Nostr day with Ditto 2.34.0 as the sole entry.

by Freedom.Tech Jul 24, 2026 · Edited

Two security patches: Invidious hardens, Bisq audit fixes

Security dominated the signal. Invidious patched YouTube backend breaks and hardened its API surface. Bisq shipped fixes from a recent audit. The remaining 15 items spread across wallets, AI SDKs, and privacy clients. Bitcoin brought Cashu offline-rehydration docs, BTCPay BIP-329 label import, Fedimint beta and UI releases, and two Ledger Live updates. Privacy saw Tor Browser alpha nine, Bitwarden browser and CLI with Keepass import, and a Nym Wallet patch. AI released llama.cpp NVFP4 activation-quantization work and two Anthropic SDK updates for Managed Agents threading. Self-hosting shipped Nextcloud iOS media-preview backfill handling. Proton covered the EU Google fine.

by Freedom.Tech Jul 23, 2026 · Edited

Privacy leads with six items, Bitcoin and AI trail

Privacy tooling took the front seat today with six of eighteen items. Delta Chat Android added multi-file sending and missed-call notifications, NewPipe dropped Android 5 support, and Anytype Desktop shipped collection-sorting fixes. Vanadium and Proton Pass iOS both pushed version bumps. The rest split across Bitcoin (five releases including a Cashu database migration and a Wasabi Wallet update), AI infrastructure (four items, notably llama.cpp adding depthwise convolution and Elevenlabs Python shipping HMAC-signed webhook config), and self-hosting (BorgBackup 2.0 beta and StartOS start-tunnel switching to per-device signing keys). Core Lightning patched to 26.06.6 after pypi publishing issues. No Lightning protocol work beyond that. Blockstream published a technical explainer on zero-confirmation infrastructure for Liquid and Elements. OpenAI announced Presence, an enterprise agent platform for voice and chat workflows.

by Freedom.Tech Jul 22, 2026 · Edited

Two security patches, nine AI releases, quiet protocols

Security work centered on Element Android and Bitwarden Server, both addressing file-handling and data-handling issues. AI infrastructure saw nine releases, led by LangChain's reasoning-effort parameter additions for Anthropic and OpenAI integrations, Cline Desktop's first public macOS agent client, and InvokeAI's security patch. Privacy tooling contributed seven items, including Tuta timezone support and Notesnook Android and Bitwarden client updates. Bitcoin delivered three wallet releases: BlueWallet 8.0.1 with iOS 26 Liquid Glass design and BC-UR v2 air-gap support, Trezor Suite 26.7.1 with Tron staking and EVM transaction cancellation, and a Vexl patch. Nostr added Sidecar 1.5.0 on Firefox, strfry 1.1.1, and Ditto 2.32.0. No Lightning, no protocol CVEs beyond the two patches.

by Freedom.Tech Jul 21, 2026 · Edited

Privacy day: five releases, one tablet feature

Privacy tools dominated the wire. Five of thirteen items came from the Privacy beat, led by Signal Android adding tablet linking, Thunderbird for Android shipping an incognito keyboard setting, and maintenance releases for Anytype and NewPipe Extractor. AI projects released three library updates with minimal operational detail. Nostr saw Amber improve multi-request approval grouping and Wisp add tracking-param stripping. Bitcoin releases were routine: Cake Wallet added home-screen upgrades and Zcash updates, Liquid GDK bumped dependencies, and Fedimint Web issued a canary build. No Lightning. No protocol patches. Operators running Signal or Thunderbird on Android gain new privacy controls; the rest is dependency churn.

by Freedom.Tech Jul 20, 2026 · Edited

Two Lightning security disclosures, three quiet releases

Security day on the Lightning side. Ride The Lightning ships a dependency patch with zero production vulnerabilities. Delving Bitcoin surfaces twin memory exhaustion DoS vectors in Core Lightning. The rest of the wire is maintenance: Bitcoin Safe rebrand and BDK 3.0 bump, Radicale MIME fix, Qwen Code point release. No protocol changes, no bitcoin-core, no infrastructure alerts. Operators running RTL or CLN should read the disclosures; the remaining updates are low-urgency.

by Freedom.Tech Jul 19, 2026 · Edited

Weekly Recap - Jul 12 to Jul 19, 2026

Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security fix, also tagged patch-now. Both releases anchored a scattered maintenance wave across privacy and self-hosting stacks, Vanadium tracking Chromium to 150.0.7871, AdGuard Home pushing two beta builds and a stable 0.107.78 patch, uBlock Origin 1.72 refining scriptlets. No coordinated disclosure, no CVE cluster, but enough operator-lift releases to keep patch logs busy. AI volume again topped 40 items, mostly nightly churn. Bitcoin and Lightning stayed quiet; Nostr shipped incremental client updates. The week had a clear self-hosting security pulse at the top and long tail below.

by Freedom.Tech Jul 19, 2026 · Edited

Sun, Jul 19, 2026

A slow day across beats. Self-hosting delivered the only security work: BorgBackup 1.4.5 patches a low-severity issue alongside feature additions. Privacy logged two client updates, Trilium notes and Yattee video. AI contributed two llama.cpp commits within the same build window. No protocol changes, no Lightning, no Bitcoin core. Operators running Borg should stage the update; the rest is maintenance.

by Freedom.Tech Jul 18, 2026 · Edited

Sat, Jul 18, 2026

AI claimed four of nine releases, all framework or library patches. No models. Privacy logged Whonix and Proton Mail Android. Nostr shipped Zap Store 1.1.0 with device keys and background auto-updates, plus a Mostrix point release. Bitcoin contributed a single Ledger Live Desktop build. The day carries no protocol changes, no security advisories, no Lightning. Operators running Mistral tooling, llama.cpp, or Buffa have updates staged.

by Freedom.Tech Jul 17, 2026 · Edited

Fri, Jul 17, 2026

AI claimed half the wire, shipping six infrastructure releases spanning model runtimes, CLI tooling, and mobile SDKs. No model weights, no protocol changes. Privacy logged three items: FreeTube shipped feature work, Nostr VPN and Logseq posted routine builds. Bitcoin added two wallet updates. Self-hosting contributed one Nextcloud Android RC. No clustering within beats, no security advisories, no Lightning. Operators running llamafile, llama.cpp, or Transformers have patches waiting.

by Freedom.Tech Jul 16, 2026 · Edited

Thu, Jul 16, 2026

AI and Privacy dominate the wire with eight and seven releases respectively. The AI cluster is pure infrastructure: llama.cpp b10034 excludes miscompiled MoE kernels on Adreno GPUs, ComfyUI 0.28.0 fixes Qwen3-VL tokenizer crashes, Hugging Face Transformers 5.14.0 adds Inkling multimodal support, and Maple 3.1.5 introduces MCP server support. Privacy moves span messaging, VPNs, and mapping: Signal Desktop 8.20.0-beta.1 ships disappearing call events, IVPN Desktop 3.15.13 upgrades Electron from v25 to v42, Organic Maps patches route warnings and opening hours. Bitcoin logs four client updates including Nunchuk Android 2.7.0 with USDT-on-Liquid support and Payjoin Dev Kit payjoin-cli 1.0.0-rc.0 migrating from sled to rusqlite. Self-hosting rounds out the count with n8n 2.31.1, authentik 2026.5.5, Nextcloud Desktop 34.0.0-rc2, and StartOS start-tunnel 1.1.0 adding HTTP-to-HTTPS redirects. No Lightning. No Nostr. One policy item from EFF on wearable transparency reports sits outside the release pattern.

by Freedom.Tech Jul 15, 2026 · Edited

Wed, Jul 15, 2026

Two releases on the wire. Nostr posted Ditto 2.31.0. AI logged llama.cpp b10015, addressing OpenCL buffer creation for CL 2.x targets and shipping updated macOS, iOS, and Linux binaries. No security patches. No protocol work. A quiet mid-week day after Tuesday's 27-item slate.

by Freedom.Tech Jul 14, 2026 · Edited

Tue, Jul 14, 2026

Privacy projects took half the wire: six of twelve releases. Two self-hosting tools carried security patches: Gitea 1.27.0 hardened access checks and migration validation, AdGuard Home 0.107.78 shipped five fixes. The privacy beat logged maintenance across the stack: dnscrypt-proxy added post-quantum DNSCrypt 2026 support, Logseq entered 2.0 beta with database-backed storage, Session updated both iOS and Android clients. Nostr posted Noscall 0.6.0 with integrated Cashu wallet and Lightning flows. AI logged llama.cpp b9993 adding Tencent Hunyuan 3 MoE architecture support and an ElevenLabs Python SDK refresh. One Bitcoin release rounded out the day.

by Freedom.Tech Jul 13, 2026 · Edited

Mon, Jul 13, 2026

A quiet Monday after a four-beat weekend. Nostr shipped Sprout Buzz Desktop 0.4.1, Privacy logged a Syncthing macOS bundle update to 2.1.2-1, and AI posted llama.cpp b9982. The Sprout release addresses agent restart behavior and timeline rendering. The Syncthing wrapper bundles the 2.1.2 core. The llama.cpp build fixes per-request reasoning budget handling in the OpenAI-compatible server endpoint. Three maintenance releases, no new features or protocol work.

by Freedom.Tech Jul 12, 2026 · Edited

Weekly Recap - Jul 5 to Jul 12, 2026

The week delivered a coordinated hardware security push and a scattered maintenance wave. BitBox02 forced a bootloader update to v1.2.2 via firmware 9.26.2, Pi-hole 6.4.3 closed a local privilege-escalation path from the pihole user to root, Bisq 1.10.3 shipped a trade-protocol validation fix flagged during an ongoing audit, and SecureDrop released 2.16.1. Across those four, only the OpenAI passkey-mandate announcement carried a policy signal; the rest were surgical fixes. Privacy infrastructure saw two dozen incremental patches—Immich 3.0.2, Vanadium tracking Chromium to 150.0.7871, uBlock Origin 1.72.2, Bitwarden Server 2026.6.2—but no breakage or rollbacks. AI volume topped 48 items, mostly SDK churn and nightly builds with no operator-lift. Bitcoin shipped three Core minor releases (29.4, 30.3, 31.1) plus foundation-wallet updates and a StartWRT 1.0.0 stable. Lightning and Nostr stayed quiet. The week had teeth at the top and long tail below.

by Freedom.Tech Jul 12, 2026 · Edited

Sun, Jul 12, 2026

Nine items, four beats. AI posted four maintenance releases: vLLM 0.25.0 with 558 commits from 232 contributors, a Hugging Face Transformers patch enabling vLLM compatibility, llama.cpp b9968 with OpenCL int8 optimizations for Adreno GPUs, and Maple Proxy 0.1.11. Privacy logged a GrapheneOS build tag for Pixel 6 through Pixel 10a, Am I Exposed 0.35.8, and a Tuta blog post on Meta's Muse image generator. Bitcoin shipped Ashigaru Desktop 1.1.0, a redesign adding dedicated Whirlpool mixing, private Electrum server discovery over Tor, and transaction privacy tooling. Nostr released Divine 1.0.16.

by Freedom.Tech Jul 11, 2026 · Edited

Sat, Jul 11, 2026

Start9 shipped the first stable release of StartWRT, the OpenWrt-based router OS that wires Security Profiles to Ethernet ports, WiFi passwords, and inbound VPN tunnels. The broader slate spans four beats without a clear cluster. Bitcoin logged a Bitcoin Core 29.4 patch, Payjoin Dev Kit rc.4, and umbrelOS 1.7.4 fixing Tor connectivity. AI saw Ollama 0.32.0 add Qwen3.5 parser support, Claude Agent SDK 0.2.116 with CLI permission fixes, and llama.cpp b9957 server tools refactor. Nostr posted Vector 0.4.0 and NYM Chat localization. Privacy landed Proton Pass Android 1.40.2 and a Logseq nightly. EFF published an executive-director note. A quiet Saturday ahead of the weekend close.

by Freedom.Tech Jul 10, 2026 · Edited

Fri, Jul 10, 2026

Seven AI releases dominate the count, but most are maintenance: koboldcpp fixes terminal output for thinking traces, llm CLI patches a JSON error on empty tool-call arguments, ElevenLabs JS bumps to 2.57.0, and llama.cpp adds Hexagon tiling for unary ops. Dify ships an experimental Agent interface with a malicious-user warning. The sole AI news item is an Anthropic reflection feature. Privacy logs four entries: OpenAI now requires hardware-backed passkeys for Trusted Access Cyber members, BAT Roadmap 4.0 introduces agentic payments and a BravePay stablecoin protocol, BasicSwap DEX hits 0.17.0, and Session Desktop patches to 1.18.1. Nostr contributes five releases, headlined by Lightning.Pub's first tagged version, a Nostr-native LND wrapper for account operators.

by Freedom.Tech Jul 9, 2026 · Edited

Thu, Jul 9, 2026

Two security patches headline the wire: BitBox02 Firmware 9.26.2 ships a bootloader update, SecureDrop 2.16.1 closes out the Privacy security work. The rest scatters across five beats without a unifying theme. Bitcoin Core 31.1 arrives with no visible summary detail. Foundation Envoy 2.3.0 and Passport Prime 1.3.0-beta land on the same day, both major releases. Stratum v2 SRI 1.11.0 focuses on binary reliability and fuzz coverage. LNbits 1.5.5 adds Revolut and Square as fiat funding methods. AI sees four maintenance items from LangChain and llama.cpp, no model work. The remaining releases are incremental: Yubico Authenticator, rclone, Nextcloud Desktop, Obtainium, Cashu TS. Vector 0.4.0 is the lone Nostr entry with no technical detail in the notes.