Freedom.Tech

by Freedom.Tech Jun 28, 2026 · Edited

Weekly Recap - Jun 21 to Jun 28, 2026

The week carved a clean two-part shape: defensive infrastructure responded to one serious vulnerability, and the AI segment drowned the signal with volume—51 AI items, most of them incremental. SecureDrop 2.16.0 shipped on June 24 carrying CVE-2026-50000, the only Patch-now advisory in the set. Privacy infrastructure iterated across a wide front: Nextcloud Desktop 33.0.6 updated API calls to match breaking changes in NextcloudKit 7.3.3, Immich pushed 3.0.0-rc.3, and Vanadium tracked Chromium to 149.0.7827. Lightning remained quiet—four releases, none marking urgent operator lift. Freedom tech shipped SimpleX Chat 7.0.0-beta.2 with channel web previews, and Nostr volume hit ten items but all client-side polish. The week had breadth but no depth: no coordinated patch wave, no architectural shift, no regression that rippled.

by Freedom.Tech Jun 28, 2026 · Edited

Sun, Jun 28, 2026

Privacy and AI each ship two packages on a slow Sunday. Invidious 2.20260626.0 hardens playlists and search, Wasabi Wallet reaches 2.8.0. The AI beat delivers koboldcpp 1.116 with Krea 2 Turbo support and llama.cpp b9825 fixing a Vulkan step operator bug. Nostr contributes Nostur 509. The only non-release item is a Delving Bitcoin post on expiring HTLCs without free relay. No Bitcoin wallet updates, no protocol patches, no model releases.

by Freedom.Tech Jun 27, 2026 · Edited

Sat, Jun 27, 2026

Five of twelve items land on the AI beat. No models ship except an Olmoearth pretrain release and the OpenAI GPT-5.6 Sol preview. The rest is tooling: Claude Code Action reaches 1.0, Cline 4.0.0 switches to an SDK-backed VS Code runtime, llama.cpp cuts b9821 with help and version flags. Privacy contributes two releases: Bitwarden iOS 2026.6.0 tightens encryption coverage and Miniflux 2.3.2 adds full-text search operators. Nostr ships three packages from the Applesauce suite and ngit-cli 2.6.0. Bitcoin work is confined to Stack Wallet 2.6.0 with CakePay gift-card support. Freedom Tech flags EFF's California 3D printer surveillance coverage.

by Freedom.Tech Jun 21, 2026 · Edited

Weekly Recap - Jun 14 to Jun 21, 2026

The LND zero-timestamp gossip DoS disclosure dominated the defensive signal this week. No other CVEs followed. Privacy infrastructure iterated quietly: Vanadium tracked Chromium to 149.0.7827, Cashu CDK 0.17.1 fixed proof handling for inactive keysets, and Immich released RC2 for v3.0. AI volume reached 49 items, mostly patch releases and nightly builds. Lightning Terminal did not ship this week, and the only Lightning activity came from ZEUS beta, Phoenix patch, and Arkade pre-releases. Freedom tech delivered Tails 7.9 bundling Tor Browser 15.0.16, Tor Browser itself, and SimpleX Chat's 7.0 beta introducing channel web previews. The week was spread thin: 40 privacy items, 12 Nostr clients, 10 Bitcoin releases, 5 Lightning, all incremental.

by Freedom.Tech Jun 18, 2026 · Edited

Thu, Jun 18, 2026

A fragmented slate across five beats. Privacy dominated by count, Delta Chat 2.53.0, Mullvad VPN Android, and a Logseq nightly, while Mullvad Browser 15.0.16 and SimpleX Chat 6.5.5 landed on the Freedom Tech side. llama.cpp shipped b9697 and three minor AI client updates arrived. Blockstream Green Desktop 3.4.1 brought BOLT12 offer description support. NYM Chat patched group-chat relay logic. No protocol CVEs, no Lightning, no major security work.

by Freedom.Tech Jun 17, 2026 · Edited

Wed, Jun 17, 2026

Fifteen releases split across five beats with no dominant signal. Nostr clients shipped five updates: Citrine added Negentropy and NIP-42 AUTH, Amethyst included public chat mentions in notifications, Coracle fixed repost visibility, Sprout Buzz patched reconnect storms, and Nostur shipped build 506. AI side saw seven items, mostly infrastructure: llama.cpp optional USM allocations for large GPU buffers, ComfyUI 0.25, Maple 3.1, Agent Eval dependency pins, OpenAI deployment simulation research, and two minor project commits. Privacy beat delivered Mostro 0.17.5, Obscura VPN debug-bundle naming fix, and NetNewsWire 7.1b3 with Activity Log detail and memory improvements. Bitcoin side: Nunchuk Android 2.6.0 added off-chain inheritance phased rollout. Matrix Synapse 1.155 warned Debian 12 support ends next release. No Lightning, no CVEs.

by Freedom.Tech Jun 10, 2026 · Edited

Wed, Jun 10, 2026

Privacy claimed half the wire. Fourteen of 28 releases landed on the privacy beat, but only three matter operationally. OnionShare 2.6.4 patches two security issues: symlink traversal and unauthorized file upload. Signet 1.11.0 fixes a NIP-17 gift-wrap command forgery that let attackers bypass admin-command signature checks. NewPipe 0.28.8 restores YouTube playback after SABR enforcement broke extraction. The rest are routine version bumps, UI tweaks, and dependency updates. AI delivered nine releases, all tooling and model-support additions. Bitcoin, Lightning, and Nostr combined for six items. No protocol work. No CVEs beyond the OnionShare and Signet patches.

by Freedom.Tech Jun 9, 2026 · Edited

Tue, Jun 9, 2026

A scattered day across five beats with no unifying thread. Privacy claimed five slots but none intersect: BasicSwap patches a lock-transaction verification bug, FreeTube hotfixes content fetching, Logseq ships a nightly, NetNewsWire adds observability windows. AI landed three: llama.cpp supports Gemma-4 multi-turn prediction assistants, Qwen Code cuts a preview, ElevenLabs Python regenerates SDK. Freedom Tech contributed three unrelated Nym releases and an EFF event recap. Bitcoin and Nostr each placed one. No CVEs, no consensus work, no clustering. Each release serves a different operator.

by Freedom.Tech Jun 8, 2026 · Edited

Mon, Jun 8, 2026

Eight releases land across four beats with no shared thread. Nostr shipped three: Signet adds NIP-46 relay management, NYM Chat hotfix, Ditto version bump with no detail. AI contributed three: two Anthropic SDK patches deprecate Claude Opus 4.1 and fix streaming citations, llama.cpp relaxes sampler name matching. Payjoin Dev Kit hit RC3 with cancel APIs and fallback typestates. GrapheneOS tagged a build for Pixel 6 through Pixel 10a. No CVEs, no protocol changes, no clustering.

by Freedom.Tech Jun 7, 2026 · Edited

Weekly Recap - May 31 to Jun 7, 2026

Four CVE-flagged releases arrived early in the week, three shipping urgent patches before the rest of the cadence arrived. AdGuard Home 0.108.0-b.88 disclosed CVE-2026-41448, Tails 7.8.1 carried a kernel and Tor client fix under CVE-2026-43503, HiveTalk SFU removed ngrok for CVE-2025-57282, and Ledger Live Desktop 4.6.1 shipped with a Patch now tag but no disclosed CVE. By mid-week the signal shifted: Lightning produced two stable releases within 24 hours—lnd 0.21.0-beta completed the payment-store SQL migration and Core Lightning 26.06.1 fixed a bwatch plugin registration failure. The privacy beat remained high volume but low severity—Thunderbird for Android iterated three times from 19.1 through 19.2, Delta Chat shipped calls and channels as non-experimental defaults in 2.51, and Vanadium tracked Chromium to 149.0.7827.59. AI infrastructure continued its patch velocity with llama.cpp landing seven tagged builds addressing vision models and tensor alignment.

by Freedom.Tech Jun 7, 2026 · Edited

Sun, Jun 7, 2026

The wire spread evenly: three privacy patches, three AI releases, two Nostr wallet updates, and one Lightning client. No beat dominated. The AI work was all infrastructure. Anthropic's Go and Java SDKs added streaming fixes and deprecated Claude Opus 4.1; llama.cpp merged video support for Qwen3.5 models. Privacy shipped a Notesnook hotfix, a gopass release candidate, and a Logseq nightly. ZEUS added Cashu multi-mint sends and queue-less Nostr Wallet Connect for iOS. Shockwallet patched swap refunds. Ditto bumped to 2.20.0 with no public changelog. The day's only protocol-level work came through ZEUS and Shockwallet.

by Freedom.Tech Jun 6, 2026 · Edited

Sat, Jun 6, 2026

The White House issued an Executive Order on June 2 directing federal agencies to strengthen AI systems and develop a voluntary framework tying identity assurance to trusted AI. Yubico framed the order as elevating identity infrastructure to a national security concern. The rest of the day scattered: four AI releases, all tooling and infrastructure; four privacy patches spanning VPN, password manager, messaging, and a channel-enabled Delta Chat; two Ledger Live updates; two Nostr releases. No Lightning. No protocol work. Twelve items total, no beat dominated.

by Freedom.Tech Jun 5, 2026 · Edited

Fri, Jun 5, 2026

Three security items led the wire. Tails 7.8.1 shipped an emergency patch for a Linux kernel CVE and Tor client vulnerabilities. Ledger Live Desktop 4.6.1 followed with a hotfix. EFF testified to Congress on safeguards for government AI adoption. AI infrastructure took four of fourteen items: llama.cpp added kleidiai dynamic scheduling, Hugging Face Transformers 5.10.2 fixed a CLIP model conversion bug, Mistral Vibe 2.14.0 added image attachments and session deletion over ACP, Kimi Code 0.10.0 now allows the agent to edit its own config files. Privacy saw four releases: Delta Chat Desktop 2.51.0 removed folder options, Thunderbird and K-9 Mail 19.2 fixed QR code crashes, Nextcloud Android 34.0.0 added sync all folder and faster gallery search. Aqua Wallet 0.5.0 added Lightning Address support. Three Nostr client patches.

by Freedom.Tech Jun 4, 2026 · Edited

Thu, Jun 4, 2026

Privacy tools dominated the wire: Thunderbird for Android shipped both K-9 Mail and Thunderbird 19.1 with Thundermail configuration, Delta Chat iOS 2.51.1 enabled post-quantum cryptography by default, Tuta Calendar patched signup UI, and Vexl tagged 1.42.1. AI infrastructure saw ten releases but no models. Noteworthy: llama.cpp b9499 refactored FlashAttention with standardized quantization, Kimi Code 0.9.0 added Agent Client Protocol 0.23 support for IDE integration, and langchain-deepseek hit 1.1.0. Nostr clients Damus 1.17 and Nostur 499 both shipped. Stratum v2 SRI 1.10.0 improved share accounting and channel management. Both Tor Browser 16.0a7 and Mullvad Browser 16.0a7 updated to Firefox 151.0a1. One security patch: Cline 3.87.0 added MiniMax M3 model support.

by Freedom.Tech Jun 3, 2026 · Edited

Wed, Jun 3, 2026

Fifteen releases landed today, spread across five beats. Lightning shipped three: Core Lightning 26.06, NodeGuard 0.25.0, and Taproot Assets 0.8.0-rc3. AI infrastructure recorded six items: Ollama, langchain, llama.cpp, Kimi Code, Search Starter App, and Elevenlabs Python. Privacy tools accounted for three releases: AdGuard Home beta 88, Syncthing-Fork Android 2.1.1, and Minibits 0.4.3-beta. Freedom Tech saw Arti 2.4.0 and a GrapheneOS build. Bitcoin Keeper 2.5.13 was the sole Bitcoin entry. AdGuard Home beta 88 is the only security patch on the wire. No protocol changes, no CVEs in Bitcoin or Lightning, no model releases.

by Freedom.Tech Jun 2, 2026 · Edited

Tue, Jun 2, 2026

Privacy beat takes seven of twenty items. Proton ships three updates: VPN Windows refreshes a certificate ahead of February 2027, VPN Android patches minor bugs, and Bridge Oberbaum 3.25.0 adds error mapping for recipient addresses. Tuta ships paired Android releases for mail and calendar. Nitrokey publishes a release candidate for firmware 1.9.0. PhotoPrism flags security and reliability fixes without detail. The AI side ships six releases, all infrastructure: ComfyUI 0.23.0 adds MediaPipe face detection and multi-threaded model loading, Open WebUI 0.9.6 ships a knowledge base sync tool, llama.cpp b9469 lands a hexagon GELU patch. Two security fixes: HiveTalk SFU 0.0.5 removes ngrok to close CVE-2025-57282, and Bitkey App 2026.10.0 ships without detail. Nostr logs three releases including Amber 6.2.0 with NIP-44 v3 encryption. Bitcoin sees three items including BlueWallet 8.0.0 and Liana Business 0.2 alpha.

by Freedom.Tech Jun 1, 2026 · Edited

Mon, Jun 1, 2026

Three of five releases land in the privacy beat. Bitwarden ships matching iOS updates for its password manager and authenticator, both adding camera-based card scanning and TOTP countdown color changes. Cashu 0.20.1 ships a database migration for mint operators. The AI side sees two infrastructure items: openclaw 2026.6.1-beta.1 improves recovery from interrupted tool calls and session binding errors, and llama.cpp b9444 adds weak ETag handling to the server. No protocol changes. No model releases. No security advisories.

by Freedom.Tech May 31, 2026 · Edited

Weekly Recap - May 24 to May 31, 2026

The week was dominated by two currents: a high-urgency OAuth-binding vulnerability in Miniflux and a step-function model release from Anthropic. Miniflux 2.3.1 arrived flagged Patch now for an account-hijack vector in its OAuth implementation, placing it alongside Bitcoin Optech's disclosure of a remote Core Lightning crash vulnerability as the week's hardest security signal. AI infrastructure saw Claude Opus 4.8 land mid-week with claimed strength in agentic work and long-running tasks, while llama.cpp maintained its rapid patch cadence with seven tagged builds addressing vision models, tensor alignment, and operator ergonomics. Privacy tooling shipped a cluster of minor releases: Vanadium tracked Chromium through 149.0.7827, Thunderbird for Android reached major version 19 with notification-action configuration, DAVx5 and Radicale both landed patch releases addressing CalDAV edge cases. The Lightning beat remained quiet; lnd's third 0.21.0 release candidate advanced payment-store migration to native SQL, but no stable releases shipped.

by Freedom.Tech May 31, 2026 · Edited

Sun, May 31, 2026

A quiet Sunday on the wire. Two of three releases are AI infrastructure plumbing. llama.cpp patches tensor parallelism granularity for Qwen 3.5 and 3.6 models running on three GPUs. koboldcpp adds experimental continuous batching to handle parallel text generation requests instead of queueing. One Nostr maintenance release rounds out the day.

by Freedom.Tech May 30, 2026 · Edited

Sat, May 30, 2026

AI releases still dominate the wire. Six of thirteen releases are AI infrastructure: vLLM ships 459 commits from 230 contributors, Cline adds Claude Opus 4.8 provider support, llama.cpp adds DeepSeekOCR 2 multi-tile dynamic resolution, llamafile patches GPU acceleration probing and dylib paths, whisper.cpp posts a maintenance release with performance improvements, Kimi Code adds a KIMI_MODEL environment variable to override config.toml, Mistral Vibe enables system trust store opt-in for corporate TLS, and xAI SDK Python adds grok-build-0.1 and context compaction. Privacy saw four Bitwarden releases: Android Authenticator, CLI, and Browser all ship minor maintenance, Browser updates URI mismatch warnings. Lightning and Bitcoin each had one: lnd release candidate migrates payment store to SQL, BDK FFI ships 3.0.0 language bindings. One JoinMarket-NG privacy release improves deep wallet scanning. Optech Newsletter 407 discloses a Core Lightning remote crash vulnerability.