freedomtech

Quiet multi-beat day: Coldcard CVE, three AI releases

Bitcoin Optech flagged a severe COLDCARD vulnerability plus two Core Lightning denial-of-service bugs. The Bitcoin beat saw a Bisq hotfix for the BitcoinJ chainwork bug, Coldcard Firmware 6.6, and a Fedimint Web RPC stream fix. AI infrastructure shipped three updates: llama.cpp added a driver version check for Windows Intel GPUs to mitigate crashes, InvokeAI 6.14.0 added video generation via Wan 2.2, and Cline CLI 3.0.48 moved history rendering into the TUI. Privacy side saw Tuta Calendar 355.260730.0 and a Proton blog post on document management systems. Self-hosting saw rclone 1.75.0.

AI day: seven infrastructure releases, one pricing post

AI projects dominated the wire with seven of twelve items. Six were infrastructure: llama.cpp tested alternative convolution layouts, llm CLI switched its default model to GPT-5.6 Luna, Mistral Vibe added a skill-creator flow and session cache-hit tracking, and two ElevenLabs libraries shipped conversation and multipart-field fixes. OpenAI published a pricing post on GPT-5.6 Luna and Terra. Bitcoin contributed four stories: Sparrow 2.5.3 with XDG directory support and ERA hardware wallet compatibility, Coldcard 5.6.0, and a dummy Ledger Live release. Nostr saw Primal Android 3.5.25 ship a follow mute list and remote signer protocol updates. The only security work was AdGuard Home beta 90.

Self-hosting surge, three Nostr clients, one security fix

Self-hosting absorbed four releases: N8n 2.31.7 patched a credentials audit bug and S3 signing, Home Assistant shipped 2026.8 beta, Immich reached 3.1.0, and Portainer published 2.44.0. Nostr contributed three client updates across Sprout Buzz Desktop, Sidecar, and Jumble. Privacy saw Session iOS 2.15.4 and a Yubico phishing-resistant MFA piece for defense contractors. AI infrastructure landed two items: llama.cpp moved suppress-token handling to common sampling and OpenAI announced free ChatGPT access for 100,000 academic researchers. Bitcoin delivered a Liana Business release candidate. EFF published fitness-tracker privacy commentary. The N8n patch is the only security-relevant change on the wire.

Privacy tops seventeen releases, no protocol work

Privacy accounted for seven of seventeen items, the highest single-beat share of the day. Qubes OS published a Xen security advisory batch; OnionShare updated Tor dependencies; Delta Chat iOS retired its provider database and added experimental team-profile mode. AI infrastructure contributed five releases, all library or tooling updates. Nostr shipped two client releases. No Bitcoin protocol development, no Lightning network changes. Volume spread across maintenance patches and feature additions with no unifying technical thread.

Five AI releases lead a 14-item day

AI returned as the largest beat with five items, none of them model releases. llama.cpp b10155 added MiMo-V2.5 audio input support for RVQ-based models. Room Connect Ecr 0.3.0 optimised depth-map rendering and added hot-swap GLB. Packages React 1.11.0 exposed a streaming reasoning callback for agent workflows. Qwen shipped a non-production benchmark prerelease. Privacy contributed four releases, led by Proton VPN Windows 5.1.5 introducing a new protocol architecture for censorship resistance. Signal Android 8.21.0 enabled tablet linking. Bitcoin delivered three: ZEUS 13.1.3 added LND v0.21.1-beta support, JoinMarket-NG 0.35.0 shipped automatic history reconstruction on import, and Lightning Node Connect pushed an alpha. Self-hosting closed with Gitea 1.27.1 patching an OAuth2 2FA enforcement gap and Syncthing-Fork Android 2.1.3 documenting localhost connections across user profiles.

Security patch and three incremental releases

A light day with one security update and three feature additions spread across privacy, self-hosting, and AI. OpenWrt 24.10.8 is the only patch with CVE implications. Delta Chat Desktop 2.57.0 strips provider hints from login and fixes relay sync for older clients. AI infrastructure saw Maple 3.3.0 add local PDF OCR and expand Agent Mode, while llama.cpp b10142 landed preliminary text-only support for Minimax-M3. No protocol work, no Bitcoin releases, no Nostr activity.

A patch-heavy week led by a forced Bitwarden upgrade across every client

July's fourth week delivered a coordinated patch wave across password management, messaging, and self-hosting stacks. Bitwarden shipped version 2026.7.0 across all clients, iOS, Android, browser, server, and authenticator, requiring companion server updates and forcing Vaultwarden operators to upgrade to 1.37.0 or risk breakage. Element Android 1.6.62 patched a file-storage sanitization vulnerability flagged GHSA-fr74-76wm-x6pp. Invidious 2.20260723.0 hardened security and added instance-level API endpoint controls in response to YouTube backend changes. Bisq 1.10.4 fixed vulnerabilities identified during a recent security audit. Beyond security, the week saw RTL hit zero production vulnerabilities in 0.15.9-beta, Cake Wallet refactor its core engine, and Nextcloud Desktop ship a macOS 12-drop pre-release. AI volume again topped 40 items, nearly all nightly noise. Bitcoin and Nostr stayed quiet.

Six releases across five beats, no clustering

No single beat dominated today. Privacy shipped two incremental updates: Delta Chat Desktop 2.56.0 reworked relay management and removed OAuth, Bitwarden iOS Authenticator 2026.7.0 added fill-assist domain models under the hood. AI infrastructure saw vLLM 0.26.0 land 411 commits from 212 contributors. Bitcoin tooling contributed LNDg 1.11.0 with a new peer offline report and payment data optimizations. Nostr delivered Nostur 1.30.0 with nested replies and share-sheet integration. Self-hosting closed with Paperless-ngx 3.0.3 bug fixes for proxy trust and Gotenberg conversion. A distributed day with no actionable CVEs and no protocol-layer work.

Three Bitwarden security patches lead privacy-heavy day

Privacy tooling dominated the wire. Three security patches shipped from the Bitwarden ecosystem: iOS and Android Password Manager 2026.7.0 fix authentication crashes and autofill failures, Vaultwarden 1.37.0 is required for compatibility with the new client versions. The remaining privacy releases were maintenance: Mullvad Browser 16.0a9 rebased to Firefox 153, KeePassDX added Passkey PRF extension support, NetNewsWire 7.1 fixed parsing bugs. AI work centered on Claude Opus 5 announcement and incremental updates. Bitcoin delivered btcd 0.26.2 input-parsing hardening. Self-hosting saw Miniflux 2.3.3 add feed language detection. A quiet Nostr day with Ditto 2.34.0 as the sole entry.

Two security patches: Invidious hardens, Bisq audit fixes

Security dominated the signal. Invidious patched YouTube backend breaks and hardened its API surface. Bisq shipped fixes from a recent audit. The remaining 15 items spread across wallets, AI SDKs, and privacy clients. Bitcoin brought Cashu offline-rehydration docs, BTCPay BIP-329 label import, Fedimint beta and UI releases, and two Ledger Live updates. Privacy saw Tor Browser alpha nine, Bitwarden browser and CLI with Keepass import, and a Nym Wallet patch. AI released llama.cpp NVFP4 activation-quantization work and two Anthropic SDK updates for Managed Agents threading. Self-hosting shipped Nextcloud iOS media-preview backfill handling. Proton covered the EU Google fine.

Privacy leads with six items, Bitcoin and AI trail

Privacy tooling took the front seat today with six of eighteen items. Delta Chat Android added multi-file sending and missed-call notifications, NewPipe dropped Android 5 support, and Anytype Desktop shipped collection-sorting fixes. Vanadium and Proton Pass iOS both pushed version bumps. The rest split across Bitcoin (five releases including a Cashu database migration and a Wasabi Wallet update), AI infrastructure (four items, notably llama.cpp adding depthwise convolution and Elevenlabs Python shipping HMAC-signed webhook config), and self-hosting (BorgBackup 2.0 beta and StartOS start-tunnel switching to per-device signing keys). Core Lightning patched to 26.06.6 after pypi publishing issues. No Lightning protocol work beyond that. Blockstream published a technical explainer on zero-confirmation infrastructure for Liquid and Elements. OpenAI announced Presence, an enterprise agent platform for voice and chat workflows.

Two security patches, nine AI releases, quiet protocols

Security work centered on Element Android and Bitwarden Server, both addressing file-handling and data-handling issues. AI infrastructure saw nine releases, led by LangChain's reasoning-effort parameter additions for Anthropic and OpenAI integrations, Cline Desktop's first public macOS agent client, and InvokeAI's security patch. Privacy tooling contributed seven items, including Tuta timezone support and Notesnook Android and Bitwarden client updates. Bitcoin delivered three wallet releases: BlueWallet 8.0.1 with iOS 26 Liquid Glass design and BC-UR v2 air-gap support, Trezor Suite 26.7.1 with Tron staking and EVM transaction cancellation, and a Vexl patch. Nostr added Sidecar 1.5.0 on Firefox, strfry 1.1.1, and Ditto 2.32.0. No Lightning, no protocol CVEs beyond the two patches.

Privacy day: five releases, one tablet feature

Privacy tools dominated the wire. Five of thirteen items came from the Privacy beat, led by Signal Android adding tablet linking, Thunderbird for Android shipping an incognito keyboard setting, and maintenance releases for Anytype and NewPipe Extractor. AI projects released three library updates with minimal operational detail. Nostr saw Amber improve multi-request approval grouping and Wisp add tracking-param stripping. Bitcoin releases were routine: Cake Wallet added home-screen upgrades and Zcash updates, Liquid GDK bumped dependencies, and Fedimint Web issued a canary build. No Lightning. No protocol patches. Operators running Signal or Thunderbird on Android gain new privacy controls; the rest is dependency churn.

Two Lightning security disclosures, three quiet releases

Security day on the Lightning side. Ride The Lightning ships a dependency patch with zero production vulnerabilities. Delving Bitcoin surfaces twin memory exhaustion DoS vectors in Core Lightning. The rest of the wire is maintenance: Bitcoin Safe rebrand and BDK 3.0 bump, Radicale MIME fix, Qwen Code point release. No protocol changes, no bitcoin-core, no infrastructure alerts. Operators running RTL or CLN should read the disclosures; the remaining updates are low-urgency.

Weekly Recap - Jul 12 to Jul 19, 2026

Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security fix, also tagged patch-now. Both releases anchored a scattered maintenance wave across privacy and self-hosting stacks, Vanadium tracking Chromium to 150.0.7871, AdGuard Home pushing two beta builds and a stable 0.107.78 patch, uBlock Origin 1.72 refining scriptlets. No coordinated disclosure, no CVE cluster, but enough operator-lift releases to keep patch logs busy. AI volume again topped 40 items, mostly nightly churn. Bitcoin and Lightning stayed quiet; Nostr shipped incremental client updates. The week had a clear self-hosting security pulse at the top and long tail below.

Sun, Jul 19, 2026

A slow day across beats. Self-hosting delivered the only security work: BorgBackup 1.4.5 patches a low-severity issue alongside feature additions. Privacy logged two client updates, Trilium notes and Yattee video. AI contributed two llama.cpp commits within the same build window. No protocol changes, no Lightning, no Bitcoin core. Operators running Borg should stage the update; the rest is maintenance.

Sat, Jul 18, 2026

AI claimed four of nine releases, all framework or library patches. No models. Privacy logged Whonix and Proton Mail Android. Nostr shipped Zap Store 1.1.0 with device keys and background auto-updates, plus a Mostrix point release. Bitcoin contributed a single Ledger Live Desktop build. The day carries no protocol changes, no security advisories, no Lightning. Operators running Mistral tooling, llama.cpp, or Buffa have updates staged.

Fri, Jul 17, 2026

AI claimed half the wire, shipping six infrastructure releases spanning model runtimes, CLI tooling, and mobile SDKs. No model weights, no protocol changes. Privacy logged three items: FreeTube shipped feature work, Nostr VPN and Logseq posted routine builds. Bitcoin added two wallet updates. Self-hosting contributed one Nextcloud Android RC. No clustering within beats, no security advisories, no Lightning. Operators running llamafile, llama.cpp, or Transformers have patches waiting.

bch bchnostr nostr bitcoincash nostrexplained decentralizedsocialmedia bitcoincashcommunity openprotocols web3 cryptography freedomtech

2561af6e

The Nostr Edit Button Mystery: Why Your BCHNostr Post Doesn’t Always Change Instantly

Ever wondered why a Nostr post sometimes cannot be edited, why some apps show an edit option while others don’t, or why your edited post appears different depending on where you view it? The answer is hidden inside how Nostr works. Unlike traditional social media, Nostr does not store your posts in one giant database that can simply overwrite old content. Instead, it uses cryptographic events, relays, and replacement mechanisms. This article explains how editing works in BCHNostr, why it behaves differently from platforms like Facebook or X, and why understanding this concept helps you appreciate the freedom and design behind decentralized social media.

Thu, Jul 16, 2026

AI and Privacy dominate the wire with eight and seven releases respectively. The AI cluster is pure infrastructure: llama.cpp b10034 excludes miscompiled MoE kernels on Adreno GPUs, ComfyUI 0.28.0 fixes Qwen3-VL tokenizer crashes, Hugging Face Transformers 5.14.0 adds Inkling multimodal support, and Maple 3.1.5 introduces MCP server support. Privacy moves span messaging, VPNs, and mapping: Signal Desktop 8.20.0-beta.1 ships disappearing call events, IVPN Desktop 3.15.13 upgrades Electron from v25 to v42, Organic Maps patches route warnings and opening hours. Bitcoin logs four client updates including Nunchuk Android 2.7.0 with USDT-on-Liquid support and Payjoin Dev Kit payjoin-cli 1.0.0-rc.0 migrating from sled to rusqlite. Self-hosting rounds out the count with n8n 2.31.1, authentik 2026.5.5, Nextcloud Desktop 34.0.0-rc2, and StartOS start-tunnel 1.1.0 adding HTTP-to-HTTPS redirects. No Lightning. No Nostr. One policy item from EFF on wearable transparency reports sits outside the release pattern.

bdc75fcb

Wed, Jul 15, 2026

Two releases on the wire. Nostr posted Ditto 2.31.0. AI logged llama.cpp b10015, addressing OpenCL buffer creation for CL 2.x targets and shipping updated macOS, iOS, and Linux binaries. No security patches. No protocol work. A quiet mid-week day after Tuesday's 27-item slate.

Tue, Jul 14, 2026

Privacy projects took half the wire: six of twelve releases. Two self-hosting tools carried security patches: Gitea 1.27.0 hardened access checks and migration validation, AdGuard Home 0.107.78 shipped five fixes. The privacy beat logged maintenance across the stack: dnscrypt-proxy added post-quantum DNSCrypt 2026 support, Logseq entered 2.0 beta with database-backed storage, Session updated both iOS and Android clients. Nostr posted Noscall 0.6.0 with integrated Cashu wallet and Lightning flows. AI logged llama.cpp b9993 adding Tencent Hunyuan 3 MoE architecture support and an ElevenLabs Python SDK refresh. One Bitcoin release rounded out the day.

Mon, Jul 13, 2026

A quiet Monday after a four-beat weekend. Nostr shipped Sprout Buzz Desktop 0.4.1, Privacy logged a Syncthing macOS bundle update to 2.1.2-1, and AI posted llama.cpp b9982. The Sprout release addresses agent restart behavior and timeline rendering. The Syncthing wrapper bundles the 2.1.2 core. The llama.cpp build fixes per-request reasoning budget handling in the OpenAI-compatible server endpoint. Three maintenance releases, no new features or protocol work.

Weekly Recap - Jul 5 to Jul 12, 2026

The week delivered a coordinated hardware security push and a scattered maintenance wave. BitBox02 forced a bootloader update to v1.2.2 via firmware 9.26.2, Pi-hole 6.4.3 closed a local privilege-escalation path from the pihole user to root, Bisq 1.10.3 shipped a trade-protocol validation fix flagged during an ongoing audit, and SecureDrop released 2.16.1. Across those four, only the OpenAI passkey-mandate announcement carried a policy signal; the rest were surgical fixes. Privacy infrastructure saw two dozen incremental patches—Immich 3.0.2, Vanadium tracking Chromium to 150.0.7871, uBlock Origin 1.72.2, Bitwarden Server 2026.6.2—but no breakage or rollbacks. AI volume topped 48 items, mostly SDK churn and nightly builds with no operator-lift. Bitcoin shipped three Core minor releases (29.4, 30.3, 31.1) plus foundation-wallet updates and a StartWRT 1.0.0 stable. Lightning and Nostr stayed quiet. The week had teeth at the top and long tail below.

Sun, Jul 12, 2026

Nine items, four beats. AI posted four maintenance releases: vLLM 0.25.0 with 558 commits from 232 contributors, a Hugging Face Transformers patch enabling vLLM compatibility, llama.cpp b9968 with OpenCL int8 optimizations for Adreno GPUs, and Maple Proxy 0.1.11. Privacy logged a GrapheneOS build tag for Pixel 6 through Pixel 10a, Am I Exposed 0.35.8, and a Tuta blog post on Meta's Muse image generator. Bitcoin shipped Ashigaru Desktop 1.1.0, a redesign adding dedicated Whirlpool mixing, private Electrum server discovery over Tor, and transaction privacy tooling. Nostr released Divine 1.0.16.

Sat, Jul 11, 2026

Start9 shipped the first stable release of StartWRT, the OpenWrt-based router OS that wires Security Profiles to Ethernet ports, WiFi passwords, and inbound VPN tunnels. The broader slate spans four beats without a clear cluster. Bitcoin logged a Bitcoin Core 29.4 patch, Payjoin Dev Kit rc.4, and umbrelOS 1.7.4 fixing Tor connectivity. AI saw Ollama 0.32.0 add Qwen3.5 parser support, Claude Agent SDK 0.2.116 with CLI permission fixes, and llama.cpp b9957 server tools refactor. Nostr posted Vector 0.4.0 and NYM Chat localization. Privacy landed Proton Pass Android 1.40.2 and a Logseq nightly. EFF published an executive-director note. A quiet Saturday ahead of the weekend close.

2561af6e

Fri, Jul 10, 2026

Seven AI releases dominate the count, but most are maintenance: koboldcpp fixes terminal output for thinking traces, llm CLI patches a JSON error on empty tool-call arguments, ElevenLabs JS bumps to 2.57.0, and llama.cpp adds Hexagon tiling for unary ops. Dify ships an experimental Agent interface with a malicious-user warning. The sole AI news item is an Anthropic reflection feature. Privacy logs four entries: OpenAI now requires hardware-backed passkeys for Trusted Access Cyber members, BAT Roadmap 4.0 introduces agentic payments and a BravePay stablecoin protocol, BasicSwap DEX hits 0.17.0, and Session Desktop patches to 1.18.1. Nostr contributes five releases, headlined by Lightning.Pub's first tagged version, a Nostr-native LND wrapper for account operators.

freedomtech foundation privacy ai bitcoin nostr lightning

Thu, Jul 9, 2026

Two security patches headline the wire: BitBox02 Firmware 9.26.2 ships a bootloader update, SecureDrop 2.16.1 closes out the Privacy security work. The rest scatters across five beats without a unifying theme. Bitcoin Core 31.1 arrives with no visible summary detail. Foundation Envoy 2.3.0 and Passport Prime 1.3.0-beta land on the same day, both major releases. Stratum v2 SRI 1.11.0 focuses on binary reliability and fuzz coverage. LNbits 1.5.5 adds Revolut and Square as fiat funding methods. AI sees four maintenance items from LangChain and llama.cpp, no model work. The remaining releases are incremental: Yubico Authenticator, rclone, Nextcloud Desktop, Obtainium, Cashu TS. Vector 0.4.0 is the lone Nostr entry with no technical detail in the notes.

freedomtech foundation privacy ai bitcoin lightning nostr

Wed, Jul 8, 2026

Privacy and AI each claim four releases. The privacy slate is light: Tuta ships sync improvements and the first beta of email migration, Vexl bumps to 1.43.9, Logseq issues a nightly build. The YubiKey item is enterprise noise, not a technical release. AI is all infrastructure: llama.cpp fixes speculative-decoding model loading, MLX bumps to 0.32.0, and the VLA harness adds a LeRobot bridge with reproducible Docker. SeedSigner ships 80 PRs from 20 contributors and 13 new translation teams. Aqua Wallet patches bugs. Nym Binaries publishes 2026.13-ziller. No Lightning protocol changes, no Bitcoin Core movement, no model releases.

freedomtech foundation privacy ai bitcoin lightning nostr

abdeacf7

Tue, Jul 7, 2026

Eight of fifteen items came from the privacy beat. Bisq 1.10.3 closes trade protocol and message authentication gaps found during audit. The rest are maintenance: Pi-hole shell script fixes, Thunderbird Android crash patches, Standard Notes Super editor tweaks, and a Radicale CalDAV extension. The AI cluster is shallow: Mistral's Python client adds telemetry PII redaction, llama.cpp merges a Metal kernel, and three minor versioning bumps. Bull Bitcoin propagates a BDK dependency update. Jumble issued a Nostr client tag. Anthropic published a Claude case study covering Alberta government security scanning. No Lightning, no protocol work.

freedomtech foundation privacy ai bitcoin lightning nostr

Mon, Jul 6, 2026

Four releases across two beats. restic 0.19.1 is the sole privacy item. AI infrastructure supplies the rest: two LangChain partner modules and a llama.cpp fix for tensor-split parameters affecting draft models. No protocol work, no CVEs, no Lightning. The signal is shallow. Sunday's inactivity carried forward.

freedomtech foundation privacy ai bitcoin lightning nostr

Weekly Recap - Jun 28 to Jul 5, 2026

The week split cleanly in two. A single Tor Browser vulnerability forced a coordinated patch wave across the freedom-tech stack: Tails 7.9.1 shipped CVE-2026-43503 and CVE-2026-46331 on July 2, and the Tor Project published alpha 16.0a8 the following day. That was the week's only Patch-now signal. Elsewhere, privacy infrastructure continued its grind—Immich released 3.0.1 patching a mobile album-display bug introduced by the 3.0 major, Vanadium tracked Chromium to 150.0.7871, and Nextcloud Desktop shipped 33.0.7. AI volume stayed high at 42 items, but most were incremental patches. Lightning remained quiet. Bitcoin Safe 2.0.0 moved Compact Block Filters to default, and Cashu shipped three releases across CDK, Nutshell, and the TypeScript client. Nostr saw nine client-side polish releases and no infrastructure changes. The week had one sharp edge and a long tail of maintenance.

Sun, Jul 5, 2026

A quiet Sunday on the wire. The only item is llama.cpp b9873, which adds a guard to prevent dereferencing unallocated key-value rotation buffers. No protocol work, no privacy releases, no CVEs. The AI infrastructure cluster from earlier in the week has gone silent.

freedomtech foundation privacy ai bitcoin lightning nostr

Sat, Jul 4, 2026

Eleven releases with no center of gravity. Four AI items all ship infrastructure plumbing: Transformers adds KimiK model support, Diffusers brings Cosmos 3 pipelines, llama.cpp patches StepFun reasoning loops, Mistral Vibe adds worktree options. Privacy beat splits between two Mostro releases and a Cashu hardening patch. StartOS publishes two SDK packages, start-cli reaches 1.0 and start-sdk fixes its bundled linter. KeePassDX beta adds search animation and passkey fixes. Ditto and the two StartOS items offer no changelog detail. No protocol work, no exploit fixes, no model releases.

freedomtech foundation privacy ai bitcoin lightning nostr

Fri, Jul 3, 2026

Privacy beat leads with three releases: Brave desktop ships native Containers in v1.92, Anytype Android pushes a Kanban view alpha, Logseq drops a nightly build. Tor and Mullvad both publish alpha browsers at 16.0a8, Firefox 152 underneath. Coldcard Firmware 5.5.1 arrives with no detail. Dangerzone 0.11.0 ships stability and security fixes. Granary 11.0 breaks the as2 API to escape HTML in plain text. llama.cpp adds a model ftype name helper. Nine releases across five beats. No CVEs. No protocol work.

freedomtech foundation privacy ai nostr lightning bitcoin

Thu, Jul 2, 2026

Tails 7.9.1 ships with Tor Browser 15.0.17, the only security patch on the wire. Coldcard released two firmware builds dated 2026-07-01, versions 1.4 and 5.5.1, with no public changelog detail. AI beat contributes four items: Hermes Agent 0.18.0, llama.cpp b9858, Elevenlabs Python SDK, and an Anthropic Sonnet 5 model announcement. Privacy tools add Cashu TS 5.0.0-rc.2 and ownCloud Android 4.8.2, which redacts cookie headers in logs and fixes infinite-edge bugs. Nostr entries are Ditto 2.24.0 and Applesauce Signers 6.2.2, which drops an encoded-entities dependency. Yubico published a blog post on NFC FIDO2 key support in Google Play Services.

freedomtech foundation privacy ai nostr bitcoin lightning

Wed, Jul 1, 2026

Privacy beat dominates with ten releases, nearly half the wire. Tuta Drive launches as a standalone Android app with streamed uploads and big-file support. OpenWrt ships the fifth service release in the 25.12 series. Vanadium updates to Chromium 150.0.7871.63. Notesnook patches Linux startup crashes and Android builds. Yubikey-manager fixes YubiKey 4 FIPS PIN commands. Bitwarden reverts a native-messaging change in a 2026.6.1 hotfix. Obscura VPN adds notification buttons. AI tools contribute six items, all SDK and infrastructure work. Ollama 0.31.1 ships 90 percent faster Gemma 4 inference on Apple Silicon via multi-token prediction. ComfyUI adds int8 convrot support. Anthropic updates PHP SDK and CLI for managed-agent streaming. llama.cpp registers attention norm tensors for Qwen3. Lightning Terminal bundles lnd 0.21.1-beta. lnd 0.20.2-beta.rc1 ships with no migrations. Ledger Live updates desktop and mobile to 4.10.0. Arti 2.5.0 released.

freedomtech foundation privacy ai bitcoin nostr lightning

Tue, Jun 30, 2026

Seven of fourteen items come from AI projects, all infrastructure. vLLM ships 0.24.0 with 571 commits from 256 contributors. llama.cpp adds DeepSeek V4 conversion support. Open WebUI 0.10.0 introduces team folder sharing. InvokeAI, Checkpoint Engine, and Vla Evaluation Harness each publish maintenance or observability updates. Bitcoin Safe switches to Compact Block Filters by default in 2.0.0. Lightning contributes NodeGuard 0.25.2 fixing rebalance race conditions. Privacy brings Thunderbird for Android Beta 21.0b2, Proton Mail Android 7.10.1 with folder expand-collapse in the sidebar, and a Logseq nightly. EFF publishes a Supreme Court Fourth Amendment ruling on location data. No protocol work, no CVEs.

freedomtech foundation privacy ai nostr bitcoin lightning

Mon, Jun 29, 2026

No pattern Monday. Privacy ships uBlock Origin 1.72.0, Lightning patches Core Lightning 26.06.2 for minimal TLS setups, Nostr releases Signet 1.20.0 with a browser extension for NIP-46, AI updates llama.cpp b9835 with a UI fix. Each release stands alone. The day is quiet enough that the beat distribution is the only frame worth naming.

freedomtech foundation privacy ai nostr bitcoin lightning

Weekly Recap - Jun 21 to Jun 28, 2026

The week carved a clean two-part shape: defensive infrastructure responded to one serious vulnerability, and the AI segment drowned the signal with volume—51 AI items, most of them incremental. SecureDrop 2.16.0 shipped on June 24 carrying CVE-2026-50000, the only Patch-now advisory in the set. Privacy infrastructure iterated across a wide front: Nextcloud Desktop 33.0.6 updated API calls to match breaking changes in NextcloudKit 7.3.3, Immich pushed 3.0.0-rc.3, and Vanadium tracked Chromium to 149.0.7827. Lightning remained quiet—four releases, none marking urgent operator lift. Freedom tech shipped SimpleX Chat 7.0.0-beta.2 with channel web previews, and Nostr volume hit ten items but all client-side polish. The week had breadth but no depth: no coordinated patch wave, no architectural shift, no regression that rippled.

Sun, Jun 28, 2026

Privacy and AI each ship two packages on a slow Sunday. Invidious 2.20260626.0 hardens playlists and search, Wasabi Wallet reaches 2.8.0. The AI beat delivers koboldcpp 1.116 with Krea 2 Turbo support and llama.cpp b9825 fixing a Vulkan step operator bug. Nostr contributes Nostur 509. The only non-release item is a Delving Bitcoin post on expiring HTLCs without free relay. No Bitcoin wallet updates, no protocol patches, no model releases.

freedomtech foundation privacy ai nostr bitcoin lightning

Sat, Jun 27, 2026

Five of twelve items land on the AI beat. No models ship except an Olmoearth pretrain release and the OpenAI GPT-5.6 Sol preview. The rest is tooling: Claude Code Action reaches 1.0, Cline 4.0.0 switches to an SDK-backed VS Code runtime, llama.cpp cuts b9821 with help and version flags. Privacy contributes two releases: Bitwarden iOS 2026.6.0 tightens encryption coverage and Miniflux 2.3.2 adds full-text search operators. Nostr ships three packages from the Applesauce suite and ngit-cli 2.6.0. Bitcoin work is confined to Stack Wallet 2.6.0 with CakePay gift-card support. Freedom Tech flags EFF's California 3D printer surveillance coverage.

freedomtech foundation privacy ai nostr bitcoin lightning

Fri, Jun 26, 2026

Privacy projects swept the wire. Ten of nineteen releases carried the Privacy tag. Bitwarden posted six platform drops in one day, all version 2026.6.0: Android and iOS authenticators, Android password manager, iOS authenticator, CLI, and desktop. Each mentions under-the-hood fixes; the Android password manager notes faster sign-in via app links, hidden passport numbers, and an autofill crash fix. Elsewhere Payjoin Dev Kit hardened the mailroom relay with bounded FD usage and transient-error recovery. Nextcloud Server patched to 34.0.1. Tuta Calendar reverted a folder change. Proton Pass CLI reached 2.2.0. AI work centered on inference and agent tooling: AnythingLLM 1.15.0 bills itself as an OS-wide agent, Dify 1.15.0 redesigned onboarding, Mistral Vibe 2.18.0 added clickable URLs in tool output and clipboard image paste on macOS, llama.cpp removed a hardcoded Mamba2 expansion factor, and OLMoEarth bumped to 0.0.6. Bitcoin coverage was confined to BTCPay Server 2.4.0. Lightning saw Blink Mobile jump to 3.0.0. Nostr had two items: Rx Nostr 3.7.5 fixed unexpected WebSocket throws, Nostur posted build 508.

freedomtech foundation privacy ai nostr bitcoin lightning

Thu, Jun 25, 2026

Privacy takes six of fourteen slots today. Home Assistant 2026.7 ships dependency bumps and group executor work, Obtainium 1.5.2 adds reproducible-build patches and .apkm detection, uBlock Origin 1.71 fixes strict-block rendering and adds two new scriptlets, Mullvad VPN Android highlights search terms in split tunneling, Logseq and Organic Maps post nightly builds. SecureDrop 2.16.0 closes a CVE. AI infrastructure fills four releases: LlamaIndex 0.14.23, Elevenlabs Android 0.10.0, Mistral Common 1.11.4, and llama.cpp b9787. Element Android 1.6.60 documents security fixes from 1.6.58. Nostur 507 for Nostr. EFF publishes newsletter 38.12 on Section 702 domestic surveillance. No Bitcoin, no Lightning, no protocol work.

freedomtech foundation privacy ai bitcoin nostr lightning

Wed, Jun 24, 2026

AI projects account for ten of thirteen stories on the wire. All are library updates or SDK releases, no new models, no protocol changes. ComfyUI, llama.cpp, Jan, and LocalAI ship point releases. Anthropic and Mistral push SDK updates across Java, C#, TypeScript, and Python. The single Nostr item is Mostro CLI 0.16.0. Privacy work is minimal: NetNewsWire 7.1b6 for Mac and a Proton blog post on cloud storage phishing. No Bitcoin, no Lightning, no CVEs.

Tue, Jun 23, 2026

Privacy projects dominate the wire with six releases. Nextcloud Desktop patches content policy inheritance and API calls. Thunderbird for Android 20.0 and K-9 Mail 20.0 ship the same Thundermail configuration surface, account-drawer fixes, and notification actions. Joplin 3.7.3 adds an AI chat backend, note embeddings indexer, and MCP server. NetNewsWire 7.1b5 fixes timeline scroll performance and a search-index regression. Logseq ships a nightly build. On the Bitcoin beat, Nunchuk Desktop 2.6.0 rolls out off-chain inheritance protocol and Foundation Envoy 2.3.0-beta drops a major release. Nym Binaries 2026.12 appears on the freedom-tech side. AI releases cluster around tooling: llama.cpp b9760 refactors server input-file schema, Kimi Code 0.19.1 patches ACP editor starts, Kimi Cli 1.48.0 escalates repeated-tool-call reminders, Qwen Code 0.19.0 ships, and OpenAI announces Daybreak security tools.

Mon, Jun 22, 2026

Privacy tools dominate the wire. Tuta ships archive actions for push notifications and orphaned folder cleanup. Cashu TS gates proof creation to active keysets and hardens DLEQ nonces with rejection sampling. The Bitcoin slice is three wallet releases: Ledger Live Desktop and Mobile both cut 4.9.0, Utreexod reached 0.6.0. nostream 3.0.0 adds Linux DNS docs and closes a TODO. llama.cpp b9756 fixes a server crash on appending at end of file. The Samsung enterprise deployment is a corporate announcement with no technical detail for operators.

Weekly Recap - Jun 14 to Jun 21, 2026

The LND zero-timestamp gossip DoS disclosure dominated the defensive signal this week. No other CVEs followed. Privacy infrastructure iterated quietly: Vanadium tracked Chromium to 149.0.7827, Cashu CDK 0.17.1 fixed proof handling for inactive keysets, and Immich released RC2 for v3.0. AI volume reached 49 items, mostly patch releases and nightly builds. Lightning Terminal did not ship this week, and the only Lightning activity came from ZEUS beta, Phoenix patch, and Arkade pre-releases. Freedom tech delivered Tails 7.9 bundling Tor Browser 15.0.16, Tor Browser itself, and SimpleX Chat's 7.0 beta introducing channel web previews. The week was spread thin: 40 privacy items, 12 Nostr clients, 10 Bitcoin releases, 5 Lightning, all incremental.

freedomtech

Sun, Jun 21, 2026

A second consecutive quiet weekend day. Four of seven items came from privacy projects: Haveno 1.8.0 added passphrase protection for all offer types and IPv6 Monero node support, Joplin 3.6.15 fixed resource filename handling and tag creation bugs, Mostrix 0.2.1 shipped, and DAVx5 4.5.15-ose patched DateTimeException issues. AI logged two llama.cpp commits and a Claude Agent SDK Python release bundling CLI 2.1.185. The only non-release item was a Delving Bitcoin post on running wallet privacy heuristics without a node. All maintenance-grade work.

Sat, Jun 20, 2026

A quiet Saturday. Six items on the wire: one Bitcoin, three Privacy, two AI. The Bitcoin entry is ESP-Miner 2.14.1 adding board version 603 support and swarm device fixes. Privacy brought KeePassDX Flexible Ninja beta with OTP token hiding and autofill suggestion settings, plus routine builds from Nostr VPN and Logseq nightly. AI logged llama.cpp b9733 with WebGPU adapter toggles for F16 on Vulkan and NVIDIA, and Hermes Agent 0.17.0 news citing 1,475 commits since 0.16.0. All maintenance-grade work. No protocol changes, no CVEs, no major feature milestones.

Fri, Jun 19, 2026

Fifteen items across six beats with no dominant theme. Privacy logged four: Bisq 1.10.2 relaxing trade limits from the previous release, IronFox 152.0, NetNewsWire 7.1b4 adding Activity Log detail, and a Yubico post on Salesforce MFA enforcement. AI brought four items, all client tooling: llama.cpp b9721, Mistral Vibe 2.17.0 adding MCP auth commands, Google DeepMind on agent security controls, Kimi Code 0.18.0 capping AgentSwarm concurrency. Freedom Tech saw Tails 7.9 updating Tor Browser to 15.0.16, an EFF commentary on AI regulation, and SimpleX Chat 7.0.0-beta.0 with channel web previews. Lightning: Phoenix 2.8.1 adding iOS swap-in transaction signing. Bitcoin: btcd 0.26.0. Nostr: Grain 0.8.0-rc1. One protocol discussion thread on transaction privacy opened on Delving Bitcoin. A scattered day, client patches and dependency rolls.

Thu, Jun 18, 2026

A fragmented slate across five beats. Privacy dominated by count, Delta Chat 2.53.0, Mullvad VPN Android, and a Logseq nightly, while Mullvad Browser 15.0.16 and SimpleX Chat 6.5.5 landed on the Freedom Tech side. llama.cpp shipped b9697 and three minor AI client updates arrived. Blockstream Green Desktop 3.4.1 brought BOLT12 offer description support. NYM Chat patched group-chat relay logic. No protocol CVEs, no Lightning, no major security work.

Wed, Jun 17, 2026

Fifteen releases split across five beats with no dominant signal. Nostr clients shipped five updates: Citrine added Negentropy and NIP-42 AUTH, Amethyst included public chat mentions in notifications, Coracle fixed repost visibility, Sprout Buzz patched reconnect storms, and Nostur shipped build 506. AI side saw seven items, mostly infrastructure: llama.cpp optional USM allocations for large GPU buffers, ComfyUI 0.25, Maple 3.1, Agent Eval dependency pins, OpenAI deployment simulation research, and two minor project commits. Privacy beat delivered Mostro 0.17.5, Obscura VPN debug-bundle naming fix, and NetNewsWire 7.1b3 with Activity Log detail and memory improvements. Bitcoin side: Nunchuk Android 2.6.0 added off-chain inheritance phased rollout. Matrix Synapse 1.155 warned Debian 12 support ends next release. No Lightning, no CVEs.

Tue, Jun 16, 2026

Privacy tools dominated the wire with five releases, Immich pushed a 3.0 release candidate, Tuta Calendar shipped view defaults, KeePassDX patched OTP tags, Kopia and Logseq issued point updates. AI infrastructure contributed six items, all routine: llama.cpp SYCL reordered-weight MoE work, Continue VS Code config cleanup, Hugging Face Transformers PEFT bounds, and three SDK releases from Z.AI and Moonshot. Bitcoin side saw only Liquid GDK 0.77.5 with Tor fixes and Python 3.14 wheels. Nostr had one client update. Orbot shipped a Tor 0.4.9.9 beta. No Lightning. No protocol CVEs. A workday slate with no unifying technical theme beyond the privacy cluster.

freedomtech privacy ai bitcoin lightning nostr

Mon, Jun 15, 2026

The wire delivered a mixed slate with no dominant theme. Five releases and two SDK updates. Bitcoin side saw Blockstream Green iOS add LNURL, BOLT12, and BIP-353 payment support plus Keystone 3 hardware wallet firmware. Privacy tools pushed incremental fixes: Tuta calendar defaults and Notesnook beta. AI infrastructure continued the grind with llama.cpp CUDA refinements, Qwen Code desktop MCP persistence patches, and an Elevenlabs Python SDK regen. No protocol work. No Lightning node software. No CVEs.

Weekly Recap - Jun 7 to Jun 14, 2026

Privacy volume held steady at 58 items while AI delivered 52 and Lightning produced just 7. No CVEs arrived this week. The clustering tells the story: incremental iteration across privacy tooling—Vanadium tracking Chromium, Cashu CDK migrating databases, Bitwarden removing feature flags—while AI infrastructure continued to churn through patch releases and nightly builds. Lightning Terminal bundled lnd 0.21.0-beta into RC, the payment-store SQL migration now packaged into a higher-level distro. The freedom tech stack shipped two stable releases—Qubes OS 4.3.1 and OnionShare 2.6.4 with symlink-traversal and upload-bypass patches—against a backdrop of 12 Bitcoin releases and 14 Nostr clients iterating without major flags.

freedomtech

Sun, Jun 14, 2026

Three of four releases land in privacy tooling. Syncthing-Fork upgrades onboarding UI to Material Design. Radicale adds birthday conversion templates for shared calendars. KeePassDX ships two keyboard fixes. The lone AI item is llama.cpp b9630 adding Cohere2MoE vocab support for TINY AYA. No protocol work. No Lightning. No CVEs.

freedomtech privacy ai nostr bitcoin lightning

Sat, Jun 13, 2026

Seven of twelve releases fall under privacy, none under protocol or Lightning. The privacy slate includes a Cashu CDK database migration, Mostro Mobile 1.2.8, Nextcloud Desktop 34.0.0-rc1, NetNewsWire 7.1 for iOS, Notesnook Desktop 3.4.0-beta.1, and Proton Pass CLI 2.1.3. AI logged five items: vLLM 0.23.0, Hugging Face Transformers 5.12.0 adding MiniMax-M3-VL support, llama.cpp b9616, koboldcpp 1.115 with Anthropic API support, and two SDK or program announcements. No model releases. No CVEs. No Freedom Tech entries.

freedomtech privacy ai nostr bitcoin lightning

Thu, Jun 11, 2026

Six AI releases and four privacy releases dominate a fifteen-story day with no clear pattern. AI side is model profiles, LangChain dependency bumps, llama.cpp normalizer refactor, LocalAI 4.4, and xAI SDK file storage additions. Privacy side is Anytype, Logseq nightly, Macadamia amount concealment, and Proton Mail stability fixes. Lightning sees lndinit bundle lnd 0.21.0-beta. Nostr logs Ditto and Nostur version bumps with no detail. Trezor Suite adds TRON. EFF posts enshittification merch commentary. OpenAI announces Oracle Cloud integration. No CVEs, no protocol work, no operator-critical patches.

Wed, Jun 10, 2026

Privacy claimed half the wire. Fourteen of 28 releases landed on the privacy beat, but only three matter operationally. OnionShare 2.6.4 patches two security issues: symlink traversal and unauthorized file upload. Signet 1.11.0 fixes a NIP-17 gift-wrap command forgery that let attackers bypass admin-command signature checks. NewPipe 0.28.8 restores YouTube playback after SABR enforcement broke extraction. The rest are routine version bumps, UI tweaks, and dependency updates. AI delivered nine releases, all tooling and model-support additions. Bitcoin, Lightning, and Nostr combined for six items. No protocol work. No CVEs beyond the OnionShare and Signet patches.