Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

291–300 of 313 posts

Re: Immich 3.0

#291

Post by wookmaster »

eddythompson80 wrote: post #112
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

It would make hosting a "Family and/or friends" instance possible. I do go back and forth on the accessibility tradeoffs of E2EE for average people though. In this scenario, lose or forget your key/password and you lose ALL of your photos which are very important to some people. Losing them is pretty catastrophic. Google Photos or iPhotos really gives people a sense of security about their photos. ps: It would also m…

Who wants to be support for family and friends.

Re: Immich 3.0

#292

Post by wookmaster »

I've been self hosting immich for the past 6 months. It's pretty awesome. The App has some performance issues but the web is flawless. I cut down on my iCloud plan since I deleted most of my videos from it. I use restic to manage backups with my own key offsite.

Re: Immich 3.0

#293

Post by cromka »

troupo wrote: post #226
cromka wrote: post #192

Earlier quoted context omitted.

It seemed like that for me, too, until I realized my photos were botched. The only way to know that was looking into the logs: I have some 9000 photos which it silently fails to extract metadata from. The only sign in the UI that something is off is the fact those 9k photos never get processed, you can try in perpetuity. The logs reveal they were botched either by immich-go or iOS app, ffmpeg freaks out when processi…

> mmich gives you that clean, very easy UX/UI, targeting every regular user as a real alternative to Google or Apple offerings, yet you can't easily and safely import your photos. That's inconsistent at best. Misleading. How do you imagine this wold work, given that there are no APIs for Google Photos or iCloud Photos to batch import them into a different service while preserving all data. At best you can work with t…

> How do you imagine this wold work

The way it CURRENTLY already works. Through Google/iCloud takouts, or the Android/iOS apps if user chooses to do so.

Re: Immich 3.0

#294

Post by tredre3 »

eddythompson80 wrote: post #275
palata wrote: post #258

Earlier quoted context omitted.

> You can run it on an encrypted volume on a VPS. If you run it on an encrypted volume on the VPS, you get encryption at rest (e.g. if someone steals the disks, it's encrypted), but still your VPS provider is able to decrypt it (otherwise it just couldn't run).

Normally I either encrypt a non-boot drive (if the VPS provider offers such a thing) or use gocryptfs. It’s still a pain though when reboots happen, unless you also put your key there. Application layer encryption makes it easier.

gocryptfs is great, I use it to encrypt storage in embedded scenarios where the OS doesn't have the userspace tools or kernel modules to manage encrypted block devices.

Re: Immich 3.0

#295

Post by FloatArtifact »

p4bl0 wrote: post #212

I teach a free software development course to my undergrad students. It's really exciting to stumble upon one of the work they did for my class in the wild (it's the first listed bug fix — which is the last of the three pull requests this student got merged in Immich during my course). I feel so proud! :)

Thank you for supporting Open Source as a professor!

Re: Immich 3.0

#296

Post by bastawhiz »

eddythompson80 wrote: post #112
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

It would make hosting a "Family and/or friends" instance possible. I do go back and forth on the accessibility tradeoffs of E2EE for average people though. In this scenario, lose or forget your key/password and you lose ALL of your photos which are very important to some people. Losing them is pretty catastrophic. Google Photos or iPhotos really gives people a sense of security about their photos. ps: It would also m…

Two people in my life when I was a kid have since been sent to prison for pedophilia. There's a 0.0% chance I'm hosting encrypted media for anyone other than my spouse. The low but nonzero risk of the cops asking me about some encrypted files I'm holding for a friend simply would not be worth the risk for saving someone the tens of dollars a month to self host their own content.

Re: Immich 3.0

#297

Post by yownie »

gchamonlive wrote: post #124
AussieWog93 wrote: post #120

Earlier quoted context omitted.

Not sure why you're continuing to argue, GP's right. e2ee means that the encryption keys are stored client-side by the intended recipient. It's not just in transit and in rest.

Freedom of speech

yes that does guarantee you the right to espouse stupid opinion, correct!

Re: Immich 3.0

#298

Post by troupo »

cromka wrote: post #293
troupo wrote: post #226

Earlier quoted context omitted.

> mmich gives you that clean, very easy UX/UI, targeting every regular user as a real alternative to Google or Apple offerings, yet you can't easily and safely import your photos. That's inconsistent at best. Misleading. How do you imagine this wold work, given that there are no APIs for Google Photos or iCloud Photos to batch import them into a different service while preserving all data. At best you can work with t…

> How do you imagine this wold work The way it CURRENTLY already works. Through Google/iCloud takouts, or the Android/iOS apps if user chooses to do so.

You can't provide an easy UX-friendly alternative to takeout, and it already backups photos through Android/iOS apps if user choses so.

Re: Immich 3.0

#299

Post by fragmede »

gonzalohm wrote: post #22
fragmede wrote: post #17

Earlier quoted context omitted.

Perfect is the enemy of the good. While there's an ideal case where you're hosting it on a box in your house, that's not for everybody. So while hosting it on AWS doesn't remove every dependency on big tech, at least it's not a full on Google hosted SaaS product.

I think "perfect is the enemy of good" is actually an argument against AWS integration. Using S3 as a backend is a lot more complex than using local storage so it would take a lot more time to implement, that's why local storage is good enough

Only if we look at resources it takes to implement features as limited and we're in starvation mode. With AI writing code these days, if they choose to use it, it's less about the resources to make the features and more about what having the features enables.
Post reply on HN