Two security patches: Invidious hardens, Bisq audit fixes
Security dominated the signal. Invidious patched YouTube backend breaks and hardened its API surface. Bisq shipped fixes from a recent audit. The remaining 15 items spread across wallets, AI SDKs, and privacy clients. Bitcoin brought Cashu offline-rehydration docs, BTCPay BIP-329 label import, Fedimint beta and UI releases, and two Ledger Live updates. Privacy saw Tor Browser alpha nine, Bitwarden browser and CLI with Keepass import, and a Nym Wallet patch. AI released llama.cpp NVFP4 activation-quantization work and two Anthropic SDK updates for Managed Agents threading. Self-hosting shipped Nextcloud iOS media-preview backfill handling. Proton covered the EU Google fine.
Bitcoin
- Bisq 1.10.4. Important security update addressing vulnerabilities from recent audit.
- Cashu TS 5.0.0-rc.5. Adds offline rehydration docs and changes default proof selection to prefer stale keysets.
- BTCPay Server 2.4.1. BIP-329 label import now supported; editable invoice comments added.
- Fedimint 0.12.0-beta.0. Pre-release candidate; not recommended for mainnet.
- Ledger Live Mobile 4.12.0. 19309 27da624 Thanks @mateuszpalosz-ext!
- Ledger Live Desktop 4.12.0. 19411 ca37cfe Thanks @dilaouid!
- Fedimint UI 0.7.4. Same application code as 0.7.3; CI change only.
Privacy
- Invidious 2.20260723.0. Fixes YouTube metadata and playback breakage; adds option to disable API endpoints.
- New Alpha Release: Tor Browser 16.0a9. Tor Browser 16.0a9 is now available from the Tor Browser download page and also from our distribution directory; This version includes important security updates to Firefox.
- Bitwarden Clients Browser 2026.7.0. New save-and-fill flow; direct Keepass import; new installs prompt for browser password-manager settings.
- Bitwarden Clients CLI 2026.7.0. Direct Keepass import support added.
- Nym Wallet 1.2.24. The v1.2.24 release of the Nym Wallet The full list of changes is in the CHANGELOG.
- EU fines Google $1 billion over its search and Play Store. EU regulators fined Google $1 billion for favoring its own services in search and restricting Play Store developers.
Self-hosting
- Nextcloud iOS 34.0.0. Liquid glass + button; Constrain and truncate media viewer titles.
AI
- llama.cpp b10099. Improved CUDA NVFP4 W4A4 activation quantization; fused per-channel amax and quantization kernels.
- Anthropic Cli 1.19.0. Adds Managed Agents model effort, initial session events, and threads delta streaming.
- Anthropic Sdk Typescript 0.113.0. Adds Managed Agents model effort, initial session events, and threads delta streaming.
Read on Freedom.Tech: https://freedom.tech/posts/2026-07-24-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/
Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.
Write a comment