Decent Newsroom
Sign In

Freedom.Tech

freedom.tech

A daily intelligence desk for practical freedom technology from Foundation. Bitcoin, Lightning, Nostr, privacy, AI, self-hosting, open hardware, and security updates. Primary sources first.

freedom.tech
Editorial Articles Media Highlights
by Freedom.Tech · Edited

Nostr triples Bitcoin and AI on quiet Monday

Three of five releases landed on the Nostr beat, all client-side stability work. Vector hardened its Concord engine and fixed GPU churn in animated profiles. Sidecar focused on visibility improvements. Rx Nostr cleaned up publish-state logic after OK events. The remaining two stories were maintenance patches: lnd shipped a release candidate fixing the SQL invoice migration path for AMP sub-invoices, and llama.cpp added Vulkan top-k radix sort for Qwen 3.8 Flash Next. No protocol changes, no security advisories, no model releases.

Cover image for Nostr triples Bitcoin and AI on quiet Monday
by Freedom.Tech · Edited

A privacy-wallet patch wave, plus a BitBox02 firmware bump that locks old setups out of Sparrow.

The week logged three "Patch now" privacy releases that shared a common signal: unpatched vulnerabilities carried over from external audits, disclosed CVEs, or prior release cycles. JoinMarket-NG 0.37.1 shipped multiple fixes and security hardening, Wasabi Wallet 2.8.2 followed as a pre-release, and Bisq 1.10.7 arrived as a hotfix based on v1.10.6. Security patches also landed for self-hosting operators: Portainer 2.39.7, Gitea 1.27.3 addressed repository path enforcement and package access restrictions, and Maple 3.3.8 updated agent mode to Goose 1.47.0. AI releases numbered 54, Bitcoin 31, Privacy 29. The Lightning stack remained quiet; Core Lightning 26.06.7 shipped as the sole entry from that corner of the network. Hardware releases were narrow: KeyOS 1.4.0-beta3 redesigned the Passport Prime launcher, BitBox02 Firmware 9.27.0 added timestamp-based absolute locktimes, and Sparrow Wallet 2.5.4 enforced anti-klepto on the BitBox02.

Cover image for A privacy-wallet patch wave, plus a BitBox02 firmware bump that locks old setups out of Sparrow.
by Freedom.Tech · Edited

Security Sunday: Gitea and Wasabi patches lead quiet wire

Sunday brought one CVE-grade patch and a handful of incremental releases. Gitea 1.27.3 shipped five security fixes covering token scope, attachment path enforcement, and artifact verification. Wasabi Wallet 2.8.2 landed on the Bitcoin beat with no disclosed CVE but appeared in the security slot. The remaining six stories split evenly across beats: JoinMarket-NG and ngit-cli pushed hardening and privacy work, Anthropic SDK Python surfaced GA files and skills APIs, llama.cpp cut graph dependencies, age delivered minor hardening, and KeePassDX added passkey PRF extension support. No protocol work, no model releases, no major version milestones.

Cover image for Security Sunday: Gitea and Wasabi patches lead quiet wire
by Freedom.Tech · Edited

Core Lightning patch leads mixed AI and Bitcoin day

Core Lightning 26.06.7 appeared as a news item, recommended for every node runner. AI infrastructure took four slots: koboldcpp added DirectIO load mode and fixed failsafe selection, llama.cpp reduced Qwen4Exp graph splits, Claude Code shipped a restricted mode stripping command and code tools, and Anthropic SDK PHP exposed Admin API organization resources. Bitcoin delivered Cashu TS 4.10.0 backporting v5 rc.8 work and Stack Wallet mwebd 0.1.19 for Windows. Privacy and self-hosting rounded out the wire with Mullvad Browser 16.0a10 and Immich 3.2.0-rc.1. Bitcoin Optech covered opt-in replay protection and HWI entering maintenance mode. EFF published recommendations for Brazil elections data protection.

Cover image for Core Lightning patch leads mixed AI and Bitcoin day
by Freedom.Tech · Edited

AI pushes to seven of twelve releases

AI swept the wire, taking seven of twelve releases. Anthropic opened a research preview of the Model Hardware Standard, a shared specification for AI agents to operate physical devices. LangChain shipped two integration updates: langchain-anthropic 1.7.0 with top-level skills param and 1.0 SDK support, and langchain-fireworks 1.6.1 dropping reasoning history blocks. Anthropic SDK Typescript moved beta files and skills namespaces to GA shapes. Claude Agent SDK Python bundled CLI version 2.1.250. AnythingLLM 1.16.1 overhauled the UI for long-horizon agentic tasks. llama.cpp b10666 ran test-save-load-state across all architectures. Bitcoin delivered two wallet updates: Sparrow 2.5.4 enforcing anti-klepto on BitBox02 and raising minimum firmware to 9.4.0, and Blockstream Green Android 5.6.1 updating Lwk to 0.19.0. Privacy closed with Tor Browser 16.0a10 alpha, Organic Maps adding multi-selection for bookmarks and tracks, and FreeTube 0.25.3 fixing playback and comment issues.

Cover image for AI pushes to seven of twelve releases
by Freedom.Tech · Edited

AI dominates: seven releases, one Portainer security patch

AI took seven of eighteen releases today, the largest cluster this week. Hugging Face Transformers shipped twice in two days, first GLM support in 5.16.1, then Qwen4-Exp architecture in 5.16.0. vLLM posted 584 commits from 270 contributors. llama.cpp added nanbeige4.2-3B model support. Anthropic SDK Ruby gained thinking display mode and organization usage. ElevenLabs CLI hit 1.1.0. OpenAI published a report on ChatGPT in education, the only non-release item on the wire. Bitcoin saw four wallets and tools: Flint 1.0.1, Frostsnap 0.4.0 with deterministic firmware digest, Vexl 26.8.0, and Cake Wallet 6.4.2. Privacy delivered Signal Android tablet-optimized media editor, Proton Authenticator iOS translation merge, and a Logseq nightly. Nostr shipped Sidecar 1.10.0 themes and auto-pay constraints plus Nostur 1.31.0 feed performance work. Self-hosting closed with Portainer 2.45.0 and Home Assistant 2026.9 beta. One security patch: Portainer.

Cover image for AI dominates: seven releases, one Portainer security patch
by Freedom.Tech · Edited

Privacy and AI each ship five, Bitcoin quiet

Privacy and AI dominate the wire today, each claiming five of fifteen releases. Privacy delivered uBlock Origin 1.74.0, KeePassDX beta with TargetSDK 36 and unit converter fixes, Standard Notes Clipper hardware-key auth repair for Firefox, Tuta calendar import patches, and Element X iOS with user-status support. AI shipped Open WebUI human-in-the-loop tool approval, Dify E2B sandbox backend and skill management, llama.cpp Qwen3-coder chat workarounds, ElevenLabs React SDK external-agent disconnect events, and Rslearn EarthDaily integration fixes. Bitcoin posted two items: Arkade client library split and Fedimint fourth beta candidate. Self-hosting saw N8n agent-node fixes and Jellyfin sixth release candidate. Nostr contributed NYM Chat message threads and post-quantum PMs.

Cover image for Privacy and AI each ship five, Bitcoin quiet
by Freedom.Tech · Edited

Multi-beat day: 4 AI, 3 Bitcoin, 4 Privacy

No dominant theme today. AI shipped infrastructure plumbing: llama.cpp added flash-attention tuning for Metal, ElevenLabs Swift SDK brought client-error parsing and audio-thread optimization, NanoClaw posted a breaking Slack integration overhaul. Privacy tools posted four releases, most incremental: Tuta and Tuta Calendar hit matching Android and iOS builds with unspecified fixes, Notesnook Android logged a point release, Mullvad announced Multihop mode changes without a version tag. Bitcoin delivered BTCPay Server 2.4.3, a security release recommended for multi-user deployments, BitBox02 Firmware 9.27.0 with full-amount display and message-signing for m/45' keys, and Stack Wallet 2.7.1 with ShopInBit and Firo Spark fixes. Nostr contributed Mostro Mobile 1.4.0. Protocol research saw a Delving Bitcoin thread on Silent Payments in coinbase transactions.

Cover image for Multi-beat day: 4 AI, 3 Bitcoin, 4 Privacy
by Freedom.Tech · Edited

Privacy leads 10-release Monday, three tools ship

Privacy tools claimed three of ten releases today. Obtainium 1.6.13 added opt-in HTTPS-to-HTTP redirect downgrade support and a minimum-age filter for updates. Yattee 2.0.0-beta.270 fixed Piped stream reporting and description timestamp seeking. BasicSwap DEX 0.18.2 posted release notes without detail. AI contributed llama.cpp b10604 with Deepseek 4 tensor work and Qwen Code cua-driver-rs 0.20.0 prebuilt binaries. Nostr saw Ditto 2.36.0 and NYM Chat 3.74.533, the latter shipping quantum-resistant encryption for private and group messages. Self-hosting delivered BorgBackup 2.0.0b23, a beta explicitly marked unsafe for production repositories. Bitcoin posted Flint 0.1.5 with Sigstore build-provenance attestations.

Cover image for Privacy leads 10-release Monday, three tools ship
by Freedom.Tech · Edited

A remediation week: Bisq patched its old and new branches on back-to-back days after an external audit

The week carried two severity waves. Four high-priority releases shipped without disclosed CVEs: Ride The Lightning 0.15.11-beta opened a public vulnerability channel and closed a credential-crossing race, Bisq 1.10.6 and Bisq 2 2.1.12 both patched vulnerabilities identified in an external audit, and Aqua Wallet 0.5.2 closed unspecified issues flagged by AI-assisted review. AI logged 51 stories, up from last week's 52, but the operator-relevant signal was narrow: OpenAI published a pacing framework for cyber-capable models, Anthropic SDK Python shipped a breaking upgrade to httpx2, and Ollama 0.33.0 added Claude Desktop integration. Bitcoin releases numbered 29, Privacy 40. The Lightning stack stayed quiet. Three hardware-wallet families shipped minor fixes: BitBox02 Firmware 9.26.5 addressed Bluetooth crashes, Coldcard pushed two maintenance branches, and Passport Prime 1.4.0-beta1 redesigned its launcher.

Cover image for A remediation week: Bisq patched its old and new branches on back-to-back days after an external audit
by Freedom.Tech · Edited

AI infrastructure dominates, four of seven releases

AI infrastructure claimed four of seven releases today. Ollama 0.33.0 integrated Claude Desktop model switching from the menu bar. llm CLI 0.33 moved to the OpenAI Python library 3.x and swapped httpx for httpx2. Qwen Code 0.22.0 addressed out-of-memory crashes in its web shell by bounding transcript retention. llama.cpp b10588 shipped a clang LTO fix. Nostr contributed Amethyst 1.14.0 with NIP-84 highlights support. Bitcoin posted Ashigaru Desktop 1.4.1. Self-hosting delivered Uptime Kuma 2.5.3 fixing a version-number regression.

Cover image for AI infrastructure dominates, four of seven releases
by Freedom.Tech · Edited

AI infrastructure leads a 10-item Friday wire

Five AI releases dominate the count, all infrastructure and libraries. Anthropic SDK for Python hit 1.0.0 with a breaking httpx2 upgrade. whisper.cpp, llama.cpp, and LocalAI delivered maintenance patches. Bitcoin posted four items: Fulcrum 2.1.2 maintenance, NodeGuard 0.28.8 validating human PSBT approvals against templates, and Coldcard firmware 5.6.1. Privacy tools shipped Joplin 3.6.16 adding sync support for v3.7 and LibreTube 32.1 fixing recent playback breakage. Nostr contributed one release: YakiHonne Mobile 2.0.6 adds inline AI editing to the article composer.

Cover image for AI infrastructure leads a 10-item Friday wire
by Freedom.Tech · Edited

Bisq 1.10.5 security fix leads quiet Thursday

Bisq 1.10.5 closes vulnerabilities found in a recent audit, the only security-flagged item on the wire. Privacy tools delivered seven releases: Tails 7.11 bundling Tor Browser 15.0.20, Signal Android 8.24.0 with a redesigned media editor for tablets, Signal Desktop 8.25.0-beta.1 adding zoom levels, and maintenance patches for IronFox, Trilium, Nym, and Logseq. AI infrastructure contributed eight items: LangChain and LlamaIndex library updates, Hugging Face Transformers 5.15.1 fixing image-processing on accelerators, ElevenLabs CLI and React packages, plus an OpenAI statement on zero data retention. Self-hosting saw N8n, Nextcloud Desktop, and Syncthing patches. Ledger Live shipped parallel Desktop and Mobile 4.17.0 releases, and Blockstream Green Desktop posted a pre-release improving swap error handling.

Cover image for Bisq 1.10.5 security fix leads quiet Thursday
by Freedom.Tech · Edited

Privacy-heavy day: six releases, one security patch

Privacy tools claimed six of sixteen items. Bitwarden shipped parallel Web 2026.8.0 and Server 2026.8.0 releases with role-escalation validation and member-email change controls. Tor Browser 15.0.20, SimpleX Chat 7.0.1, Joplin 3.7.12, and a Logseq nightly rounded out the beat. AI contributed six releases, five minor patches to llama.cpp, Qwen plugins, Kimi Code, and langcrew-agentx, plus OpenAI's statement on monitoring and alignment for frontier models. The sole security-flagged release was Ride The Lightning 0.15.11-beta, which establishes a vulnerability-disclosure channel and closes a credential-crossing race in LND controllers. Bull Bitcoin 6.13.0 drops legacy Hive-storage migration code. AdGuard Home 0.107.79 stabilizes without headline features.

Cover image for Privacy-heavy day: six releases, one security patch
by Freedom.Tech · Edited

AI infrastructure day, one security-model announcement

Four of seven items land in the AI beat. Three are inference-runtime updates: vLLM ships 561 commits from 242 contributors, llama.cpp targets ROCm 7.14, and Hugging Face Transformers adds Meta Muse Glimmer support. The fourth is OpenAI's announcement of GPT-5.6-Cyber, a cybersecurity model gated behind Daybreak Red for authorized vulnerability research. Outside AI: Thunderbird for Android adds an incognito keyboard setting, Passport Prime patches seed-entry UX, and EFF filed an amicus brief on trademark scope. No Lightning, no Nostr, no protocol work.

Cover image for AI infrastructure day, one security-model announcement
by Freedom.Tech · Edited

Three maintenance releases, one protocol research thread

A quiet Monday. Three incremental releases touched Nostr Lightning, self-hosted bookmarking, and Bitcoin wallet tooling. The only protocol activity was a Delving Bitcoin thread exploring full-node storage reduction without consensus changes. No Lightning daemon work, no privacy patches, no AI infrastructure. The cln-nip47 release added hold-invoice methods to the Nostr Wallet Connect bridge; the other two carried no actionable changes for most operators.

Cover image for Three maintenance releases, one protocol research thread
by Freedom.Tech · Edited

A quieter week, but three patches you actually have to act on

Three actively exploited vulnerabilities dominated the first half of the week. Tails 7.10.1 patched CVE-2026-64560 in the Linux kernel and expat library, BTCPay Server 2.4.2 shipped a critical fix for an exploit already in the wild, and Bitcoin Knots 29.4 delivered safeguards across the board. Qwen Code 0.21.8 restored autofix credentials for fork PRs, and Bitwarden Android and Yubico both flagged "Patch now" severity items mid-week. The AI beat stayed loud at 47 stories, dominated by llama.cpp nightlies and model-specific patches. Privacy logged 39 items, Bitcoin 21, Self-hosting 15, Nostr 6. The week also delivered two Payjoin Dev Kit release candidates, an lnd 0.21.2-beta.rc1 payment-migration fix, and Krux 26.08.0 with a faster UR QR decoder.

Cover image for A quieter week, but three patches you actually have to act on
by Freedom.Tech · Edited

Light Sunday: two lnd release candidates, two llama.cpp commits

A quiet day on the wire. Bitcoin showed one piece of work: lnd shipped twin release-candidate branches fixing database-migration edge cases that could strand nodes mid-upgrade. AI carried two llama.cpp commits and an openclaw sandbox hardening patch. No protocol changes, no model drops, no security advisories.

Cover image for Light Sunday: two lnd release candidates, two llama.cpp commits
by Freedom.Tech · Edited

BTCPay exploit in the wild, AI maintenance day

The wire opened with a BTCPay Server security patch addressing a critical vulnerability under active exploitation. The rest of the desk was maintenance and polish. Five AI releases clustered on the wire: langchain-openai patched a context-window error, Anthropic's TypeScript SDK added session budgets and mid-conversation tool changes, ComfyUI cut memory pinning on swap-less Linux boxes, and llama.cpp shipped a TTS timing fix. Privacy saw two items: Tuta bumped Electron Builder, Obtainium carried translation updates. Nostr landed one Amber redesign of the multi-request approval screen. No protocol work, no model releases.

Cover image for BTCPay exploit in the wild, AI maintenance day
by Freedom.Tech · Edited

Quiet Friday: one Knots patch, four routine updates

A slow day on the wire. Bitcoin Knots shipped a security patch with bug fixes and safeguards. The remaining four releases were maintenance: BitBoxApp bundled new firmware, llama.cpp onboarded AMD ROCm CI, Stirling-PDF fixed merge and automate bugs, and Kimi Code pushed a minor increment. No protocol work, no model releases, no CVEs beyond the Knots patch. The beat split was two Bitcoin, two AI, one self-hosting.

Cover image for Quiet Friday: one Knots patch, four routine updates