Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

131–140 of 313 posts

Re: Immich 3.0

#131

Post by konart »

Terretta wrote: post #81
stogot wrote: post #55

Earlier quoted context omitted.

There’s no download all in apple photos either unless they added it

And yet, the same is true for Apple photos about ease of export: If you set the pref to keep originals locally, they're all on your drive, in original form, as well as the derived versions including caches of raw to jpeg, resolutions, and edited versions. That said, Apple Photos does let you export even if only in cloud. Open the library, select all, and File > Export ... > Export Unmodified Originals. It pauses for…

Or you can get all you data from https://privacy.apple.com/account

Re: Immich 3.0

#132

Post by PhilipRoman »

nicce wrote: post #43
PhilipRoman wrote: post #31

Earlier quoted context omitted.

How are VPNs related to end-to-end encryption?

Their primary purpose is usually encrypt the connection between different endpoints… by creating virtual private networks…

When we talk about "E2EE" messenger apps, that usually means more than just using HTTPS. VPNs can certainly help with encryption in transit, but that's a very different concept.

Unfortunately this comes up a lot, with people asking if Immich supports end-to-end encryption and getting told to use LUKS or Tailscale.

Re: Immich 3.0

#133

Post by FabCH »

NikxDa wrote: post #58
FabCH wrote: post #52

Earlier quoted context omitted.

Fair enough, but the Immich provider they link to also uses SSL and claims to encrypt at rest. It they don’t consider that e2e encrypted, literally nothing is then…

Encryption at rest means they have the key. End to end means they don‘t. Huge difference!

Yes but magical homomorphic encryption aside, the person has conflicting requests at that point. They are asking for an image app that can’t view their images.

That’s not an image app anymore, that’s just encrypted storage.

Re: Immich 3.0

#134

Post by drdexebtjl »

eddythompson80 wrote: post #126
drdexebtjl wrote: post #125

Earlier quoted context omitted.

I don’t agree E2EE is right for everything, and especially not for a personal photo library. I don’t want to hold the keys to my photo library on someone else’s computer. I want to actually have all the bits and all the hardware in my house. I want to have access to it even if the Internet ends.

E2EE means the keys are on your own computer (or device or brain etc). The “someone else’s” computer is just hosting encrypted blobs.

I understand what it is. I still don’t want the encrypted blobs outside my control.

Sure, they’re useless without the keys. But the key is also useless without the blobs, in the sense that I don’t have my photos.

Re: Immich 3.0

#136

Post by TalkingCodeMonk »

konart wrote: post #129
TalkingCodeMonk wrote: post #122

Earlier quoted context omitted.

Seriously! How do techies and devs of all people not understand that the cloud is someone else's computer, and that the best way to prevent leaks, exploitation, or abuse of user data is to prevent anyone from being able to decrypt it but the end users themselves. IMO this is the single greatest problem with the selfhosted community; the idea that E2EE is only necessary for passwords and other highly sensitive PII. It…

> It should be standard for anything hosted on someone else's computer. As long you understand the risks. I'd rather have my family photos beying unencrypted than a very good possibilty of loosing them which happed more than once with other e2e things simply because I have no key to decrypt. Then again - if I have to chose I'd rather have the at my home lab.

Why is there "a very good possibility" of losing your photos because they are E2EE? Do you not use a password manager and backup your data?

There is no reason why E2EE services can't provide recovery or emergency access mechanisms, or implement plaintext export functionality from clients for storage elsewhere. Most reputable providers already have functionality to enable recovery and backup.

Re: Immich 3.0

#137

Post by Mashimo »

kQq9oHeAz6wLLS wrote: post #67

I got annoyed with Immich and external storage, because in order for every user to have their own facial recognition data on a large set of photos, you have to add the folder as external storage for each user, which means image previews for each user, even though the source image is the same. So if you have 3 users, you use up 3 times the space for the same thumbnail image. It got to where I had 20% of my space was j…

I don't think that has changed, but AFAIK is on the Roadmap. Or at least they talked about it.

Re: Immich 3.0

#138

Post by poisonborz »

I wish they would better support external image sources - images not uploaded/managed by Immich, just a folder of images it has access to - especially if it's read only. It mostly works, but the UI and logic breaks in a lot of little ways.

Re: Immich 3.0

#139

Post by TalkingCodeMonk »

drdexebtjl wrote: post #134
eddythompson80 wrote: post #126

Earlier quoted context omitted.

E2EE means the keys are on your own computer (or device or brain etc). The “someone else’s” computer is just hosting encrypted blobs.

I understand what it is. I still don’t want the encrypted blobs outside my control. Sure, they’re useless without the keys. But the key is also useless without the blobs, in the sense that I don’t have my photos.

Sounds like you want your photos on a unencrypted HDD, which you can do regardless of whether or not a cloud service is E2EE, so I don't see how E2EE is an issue...

Re: Immich 3.0

#140

Post by Cider9986 »

drdaeman wrote: post #115
Cider9986 wrote: post #26

When I was switching to GrapheneOS from iOS, I decided to self host my photos. I considered Immich, but I settled on Ente because of the encryption. Ente Photos is extremely polished and it's comparable quality to Apple photos. It's cool they keep the server open and selfhostable instead of only open clients like many e2ee projects do. I like how you can share an album and anyone can contribute to it without an accou…

> Ente Photos is extremely polished and it's comparable quality to Apple photos. If only. It can’t even upload photos any reliably (I self-host). I had it simply fail to upload anything for days (it doesn’t provide any diagnostics, gotta figure out how to build and debug it myself), with no apparent reason. That’s despite keeping app in the foreground, on a charger, for hours, with video uploads and ML features all d…

Well I'm a complete newb, self-hosted it completely by just following instructions from GLM 4.7 (didn't log in) and it works reliably.

Did you try it with the free 10GB on their hosted servers?

I'm using Android so maybe it's different on iOS.

Post reply on HN