Freedom.Tech

by Freedom.Tech Jun 7, 2026 · Edited

Weekly Recap - May 31 to Jun 7, 2026

Four CVE-flagged releases arrived early in the week, three shipping urgent patches before the rest of the cadence arrived. AdGuard Home 0.108.0-b.88 disclosed CVE-2026-41448, Tails 7.8.1 carried a kernel and Tor client fix under CVE-2026-43503, HiveTalk SFU removed ngrok for CVE-2025-57282, and Ledger Live Desktop 4.6.1 shipped with a Patch now tag but no disclosed CVE. By mid-week the signal shifted: Lightning produced two stable releases within 24 hours—lnd 0.21.0-beta completed the payment-store SQL migration and Core Lightning 26.06.1 fixed a bwatch plugin registration failure. The privacy beat remained high volume but low severity—Thunderbird for Android iterated three times from 19.1 through 19.2, Delta Chat shipped calls and channels as non-experimental defaults in 2.51, and Vanadium tracked Chromium to 149.0.7827.59. AI infrastructure continued its patch velocity with llama.cpp landing seven tagged builds addressing vision models and tensor alignment.

by Freedom.Tech Jun 7, 2026 · Edited

Sun, Jun 7, 2026

The wire spread evenly: three privacy patches, three AI releases, two Nostr wallet updates, and one Lightning client. No beat dominated. The AI work was all infrastructure. Anthropic's Go and Java SDKs added streaming fixes and deprecated Claude Opus 4.1; llama.cpp merged video support for Qwen3.5 models. Privacy shipped a Notesnook hotfix, a gopass release candidate, and a Logseq nightly. ZEUS added Cashu multi-mint sends and queue-less Nostr Wallet Connect for iOS. Shockwallet patched swap refunds. Ditto bumped to 2.20.0 with no public changelog. The day's only protocol-level work came through ZEUS and Shockwallet.

by Freedom.Tech Jun 6, 2026 · Edited

Sat, Jun 6, 2026

The White House issued an Executive Order on June 2 directing federal agencies to strengthen AI systems and develop a voluntary framework tying identity assurance to trusted AI. Yubico framed the order as elevating identity infrastructure to a national security concern. The rest of the day scattered: four AI releases, all tooling and infrastructure; four privacy patches spanning VPN, password manager, messaging, and a channel-enabled Delta Chat; two Ledger Live updates; two Nostr releases. No Lightning. No protocol work. Twelve items total, no beat dominated.

by Freedom.Tech Jun 5, 2026 · Edited

Fri, Jun 5, 2026

Three security items led the wire. Tails 7.8.1 shipped an emergency patch for a Linux kernel CVE and Tor client vulnerabilities. Ledger Live Desktop 4.6.1 followed with a hotfix. EFF testified to Congress on safeguards for government AI adoption. AI infrastructure took four of fourteen items: llama.cpp added kleidiai dynamic scheduling, Hugging Face Transformers 5.10.2 fixed a CLIP model conversion bug, Mistral Vibe 2.14.0 added image attachments and session deletion over ACP, Kimi Code 0.10.0 now allows the agent to edit its own config files. Privacy saw four releases: Delta Chat Desktop 2.51.0 removed folder options, Thunderbird and K-9 Mail 19.2 fixed QR code crashes, Nextcloud Android 34.0.0 added sync all folder and faster gallery search. Aqua Wallet 0.5.0 added Lightning Address support. Three Nostr client patches.

by Freedom.Tech Jun 4, 2026 · Edited

Thu, Jun 4, 2026

Privacy tools dominated the wire: Thunderbird for Android shipped both K-9 Mail and Thunderbird 19.1 with Thundermail configuration, Delta Chat iOS 2.51.1 enabled post-quantum cryptography by default, Tuta Calendar patched signup UI, and Vexl tagged 1.42.1. AI infrastructure saw ten releases but no models. Noteworthy: llama.cpp b9499 refactored FlashAttention with standardized quantization, Kimi Code 0.9.0 added Agent Client Protocol 0.23 support for IDE integration, and langchain-deepseek hit 1.1.0. Nostr clients Damus 1.17 and Nostur 499 both shipped. Stratum v2 SRI 1.10.0 improved share accounting and channel management. Both Tor Browser 16.0a7 and Mullvad Browser 16.0a7 updated to Firefox 151.0a1. One security patch: Cline 3.87.0 added MiniMax M3 model support.

by Freedom.Tech Jun 3, 2026 · Edited

Wed, Jun 3, 2026

Fifteen releases landed today, spread across five beats. Lightning shipped three: Core Lightning 26.06, NodeGuard 0.25.0, and Taproot Assets 0.8.0-rc3. AI infrastructure recorded six items: Ollama, langchain, llama.cpp, Kimi Code, Search Starter App, and Elevenlabs Python. Privacy tools accounted for three releases: AdGuard Home beta 88, Syncthing-Fork Android 2.1.1, and Minibits 0.4.3-beta. Freedom Tech saw Arti 2.4.0 and a GrapheneOS build. Bitcoin Keeper 2.5.13 was the sole Bitcoin entry. AdGuard Home beta 88 is the only security patch on the wire. No protocol changes, no CVEs in Bitcoin or Lightning, no model releases.

by Freedom.Tech Jun 2, 2026 · Edited

Tue, Jun 2, 2026

Privacy beat takes seven of twenty items. Proton ships three updates: VPN Windows refreshes a certificate ahead of February 2027, VPN Android patches minor bugs, and Bridge Oberbaum 3.25.0 adds error mapping for recipient addresses. Tuta ships paired Android releases for mail and calendar. Nitrokey publishes a release candidate for firmware 1.9.0. PhotoPrism flags security and reliability fixes without detail. The AI side ships six releases, all infrastructure: ComfyUI 0.23.0 adds MediaPipe face detection and multi-threaded model loading, Open WebUI 0.9.6 ships a knowledge base sync tool, llama.cpp b9469 lands a hexagon GELU patch. Two security fixes: HiveTalk SFU 0.0.5 removes ngrok to close CVE-2025-57282, and Bitkey App 2026.10.0 ships without detail. Nostr logs three releases including Amber 6.2.0 with NIP-44 v3 encryption. Bitcoin sees three items including BlueWallet 8.0.0 and Liana Business 0.2 alpha.

by Freedom.Tech Jun 1, 2026 · Edited

Mon, Jun 1, 2026

Three of five releases land in the privacy beat. Bitwarden ships matching iOS updates for its password manager and authenticator, both adding camera-based card scanning and TOTP countdown color changes. Cashu 0.20.1 ships a database migration for mint operators. The AI side sees two infrastructure items: openclaw 2026.6.1-beta.1 improves recovery from interrupted tool calls and session binding errors, and llama.cpp b9444 adds weak ETag handling to the server. No protocol changes. No model releases. No security advisories.

by Freedom.Tech May 31, 2026 · Edited

Weekly Recap - May 24 to May 31, 2026

The week was dominated by two currents: a high-urgency OAuth-binding vulnerability in Miniflux and a step-function model release from Anthropic. Miniflux 2.3.1 arrived flagged Patch now for an account-hijack vector in its OAuth implementation, placing it alongside Bitcoin Optech's disclosure of a remote Core Lightning crash vulnerability as the week's hardest security signal. AI infrastructure saw Claude Opus 4.8 land mid-week with claimed strength in agentic work and long-running tasks, while llama.cpp maintained its rapid patch cadence with seven tagged builds addressing vision models, tensor alignment, and operator ergonomics. Privacy tooling shipped a cluster of minor releases: Vanadium tracked Chromium through 149.0.7827, Thunderbird for Android reached major version 19 with notification-action configuration, DAVx5 and Radicale both landed patch releases addressing CalDAV edge cases. The Lightning beat remained quiet; lnd's third 0.21.0 release candidate advanced payment-store migration to native SQL, but no stable releases shipped.

by Freedom.Tech May 31, 2026 · Edited

Sun, May 31, 2026

A quiet Sunday on the wire. Two of three releases are AI infrastructure plumbing. llama.cpp patches tensor parallelism granularity for Qwen 3.5 and 3.6 models running on three GPUs. koboldcpp adds experimental continuous batching to handle parallel text generation requests instead of queueing. One Nostr maintenance release rounds out the day.

by Freedom.Tech May 30, 2026 · Edited

Sat, May 30, 2026

AI releases still dominate the wire. Six of thirteen releases are AI infrastructure: vLLM ships 459 commits from 230 contributors, Cline adds Claude Opus 4.8 provider support, llama.cpp adds DeepSeekOCR 2 multi-tile dynamic resolution, llamafile patches GPU acceleration probing and dylib paths, whisper.cpp posts a maintenance release with performance improvements, Kimi Code adds a KIMI_MODEL environment variable to override config.toml, Mistral Vibe enables system trust store opt-in for corporate TLS, and xAI SDK Python adds grok-build-0.1 and context compaction. Privacy saw four Bitwarden releases: Android Authenticator, CLI, and Browser all ship minor maintenance, Browser updates URI mismatch warnings. Lightning and Bitcoin each had one: lnd release candidate migrates payment store to SQL, BDK FFI ships 3.0.0 language bindings. One JoinMarket-NG privacy release improves deep wallet scanning. Optech Newsletter 407 discloses a Core Lightning remote crash vulnerability.

by Freedom.Tech May 29, 2026 · Edited

Fri, May 29, 2026

AI infrastructure dominates the wire. Seven of fourteen items touch AI tooling: Anthropic ships Claude Opus 4.8 and a legacy Claude Design product notice, Hermes Agent patches to 0.15.1, langchain-anthropic normalizes cross-provider tool-call IDs, llama.cpp adds debug color modes, Kimi CLI migrates docs to a Code successor project, Brave publishes AgentStop research on early termination for battery savings, and OpenAI publishes a governance framework document. Privacy releases account for six items, most routine client patches. Bitwarden ships web and server monthlies with contrast-friendly icons and an SSH agent Unix socket listener. LibreTube fixes playback regressions from YouTube API changes. Radicale patches sharing PROPFIND behavior. Ledger Live Mobile ships 4.6.0 for Bitcoin workflows. Discord's postponed age verification rollout surfaces again via Tuta coverage.

by Freedom.Tech May 28, 2026 · Edited

Thu, May 28, 2026

Privacy takes the plurality with four releases, but no unifying thread emerges. Mullvad optimizes LWO overhead, KeePassDX patches Passkey references, Organic Maps and Logseq push routine updates. AI logged four items, all client or runtime plumbing: InvokeAI adds remote model provider support, llama.cpp tunes Vulkan matrix multiplication for Intel BMG, Mistral ships a Python client bump, and Warp announces GPT-5.5 coordination for coding agents. Freedom Tech recorded two: Nym ships a Waterloo binary release, Signal Desktop adds raised-hand indicators to group calls. Bitcoin saw one item: Liquid GDK adds rate-limit errors for Electrum singlesig flows. No protocol work surfaced.

by Freedom.Tech May 27, 2026 · Edited

Wed, May 27, 2026

The wire split between AI and privacy with no dominant thread. AI items logged SDK housekeeping: langchain-perplexity shipped a responses API flag, Xai SDK Python added image search toggles, Kimi CLI improved shell error messages and toolset deduplication, and ElevenLabs released SDK regenerations. llama.cpp added MiniCPM5 tokenizer support and AnythingLLM focused on agent system improvements. Privacy coverage scattered across Thunderbird Android, Nextcloud iOS, Standard Notes PDF export fixes, and Proton Pass translations. Yubico announced FIPS 140-3 validation for the YubiKey 5 FIPS Series. No major protocol work or security patches surfaced.

by Freedom.Tech May 26, 2026 · Edited

Tue, May 26, 2026

A scattered day. Three AI items ship plumbing: Cline adds GPT-5.5 to SAP AI Core, Mistral Vibe loads skills from a shared directory and restores a theme picker, llama.cpp adds Apple device IDs and KleidiAI macOS artifacts. Privacy logged Syncthing 2.1.1-rc.1 grouping devices and folders, plus a Logseq nightly with no detail. Freedom tech saw Orbot upgrade its Tor engine and expand proxy options, and GrapheneOS tag a build across twenty-one Pixel models. Bitcoin recorded Frostsnap 0.3.0 with a firmware digest. Nostr posted two releases with no changelog text. Nothing clustered. Ten releases, two news items, no common thread.

by Freedom.Tech May 25, 2026 · Edited

Mon, May 25, 2026

Privacy tooling dominates the wire again. Four of seven releases touch privacy infrastructure: haveno ships peer identity verification against known key rings and updates Tor Browser to 15.0.13, Bisq 2 hardens dependency verification with checksum gating and pinned classifiers, dnscrypt-proxy stops caching dashboard HTML to prevent stale content after upgrades. Mostrix 0.2.0 appears with no detail beyond GPG verification instructions. AI releases are maintenance: LocalAI fixes a kokoros backend build break from trait drift, llama.cpp patches cmake UI builds and adds macOS KleidiAI support. Nostr logs Nostur 497 with no changelog. The pattern holds from last week: privacy tools under active hardening, AI backends addressing build tooling, Nostr quiet.

by Freedom.Tech May 24, 2026 · Edited

Weekly Recap - May 17 to May 24, 2026

Three network-adjacent security patches anchored the week. AdGuard Home shipped stable release 0.107.75 and beta 0.108.0-b.86, both flagged for immediate deployment. FreshRSS 1.29.1 arrived as a bug-fix patch with the same urgency. Cashu TS crossed a cryptographic threshold with the first v5.0.0 release candidate introducing BLS12-381 keysets, while the stable 4.5.0 branch added on-chain mint and melt. Core Lightning published its second v26.06 candidate with quantum-resistant channel support. AI infrastructure saw llama.cpp ship seven tagged builds across the week addressing vision model precision and operator improvements. Privacy tooling maintained a steady patch cadence: Vanadium tracked Chromium stable through two releases, SimpleX Chat 6.5.3 closed a relay rejection edge case, and Tor Browser 15.0.14 shipped alongside Tails 7.8.

by Freedom.Tech May 24, 2026 · Edited

Privacy day: 5 stories · Sun, May 24

Five of six releases today fall under privacy tooling. Four address front-end breakage or polish: LibreTube fixes channel and feed loading, NewPipe patches YouTube compatibility with a matching Extractor update, PhotoPrism ships a redesigned info sidebar for metadata editing in the viewer. The fifth is Cashu TS 5.0.0-rc.1, the first release candidate supporting v3 keysets with BLS12-381 curves. Nostr logged Ditto 2.18.0 with no detail in the source material. AI coverage is a single llama.cpp build adding NVFP4 MTP scale tensors and linking Qwen3.5. A day dominated by maintenance and one cryptographic upgrade.

by Freedom.Tech May 23, 2026 · Edited

Sat, May 23, 2026

A quiet Saturday. Six releases crossed the wire, none breaking new ground. Two AI items — an Anthropic SDK streaming fix and a llama.cpp build with generalized OpenCL kernels — both maintenance. Privacy coverage amounts to a Mostro point release and NetNewsWire crash fixes on iOS. Lightning and Nostr each logged one: Phoenix adds a spend-all button and inverted QR scanning on Android, nostr-rs-relay ships NIP-91 AND operators for filters. No protocol work. No major version bumps. The kind of day where operators patch if convenient, defer if not.

by Freedom.Tech May 22, 2026 · Edited

Fri, May 22, 2026

The wire splits across four beats with no dominant theme. Lightning sees two protocol releases: Core Lightning ships a second release candidate for v26.06, Eclair finalizes splicing, taproot channels, and zero-fee commitments. Bitcoin tools add Silent Payments receiving support in Sparrow and patch Ledger Live on desktop and mobile. Privacy work spans three categories: Cashu TS adds onchain mint and melt, Vanadium updates Chromium and sensor permissions, Mostro Mobile and Tuta Calendar ship minor updates, Logseq pushes a nightly. AI releases bundle infrastructure changes in llama.cpp, Jan, and ElevenLabs JS, plus a DeepMind program announcement without code. No coordination between items. No security advisories.