Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

161–170 of 313 posts

Re: Immich 3.0

#161

Post by slaye »

An incredible piece of software, on par with Google Photos. I've been using it behind Tailscale for months with no problems ever since I first got into homelabbing.

Actually, moving from Google Photos to Immich after I hit my 100GB storage limit was the whole reason I got into self-hosting, and what a fun ride that has been!

I can't believe self-hosted products of this caliber are free. Huge shout-out to HomeAssistant, PiHole, paperless-ngx, Dawarich, and countless others for the same reason.

Congrats to the team on the release and thank you for helping me catalogue my personal memories

Re: Immich 3.0

#162

Post by Gasp0de »

AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

You seem to be mixing up e2e encryption with at-rest-encryption?

If you have a server in your homelab where you self-host I mich just encrypt the hard drive with LUKS.

Re: Immich 3.0

#163

Post by gf000 »

drdexebtjl wrote: post #125
TalkingCodeMonk wrote: post #122

Earlier quoted context omitted.

Seriously! How do techies and devs of all people not understand that the cloud is someone else's computer, and that the best way to prevent leaks, exploitation, or abuse of user data is to prevent anyone from being able to decrypt it but the end users themselves. IMO this is the single greatest problem with the selfhosted community; the idea that E2EE is only necessary for passwords and other highly sensitive PII. It…

I don’t agree E2EE is right for everything, and especially not for a personal photo library. I don’t want to hold the keys to my photo library on someone else’s computer. I want to actually have all the bits and all the hardware in my house. I want to have access to it even if the Internet ends.

Especially that it would come with the loss of quite a few features, or at least a significantly worse way to implement them.

Like if you have to bring the data to your client device to do any kind of processing, you are quite bottlenecked when it comes to bulk operations (e.g. searching).

Sure there is very interesting research into managing that (homomorphic encryption), but I think it only makes sense on a Google cloud/apple scale. For a small, self-hosted app, I would much rather have my own hardware with FS-level encryption , or some kind of trusted compute as a whole. I don't think this has to be solved by an image host service.

Re: Immich 3.0

#164

Post by gf000 »

TalkingCodeMonk wrote: post #136
konart wrote: post #129

Earlier quoted context omitted.

> It should be standard for anything hosted on someone else's computer. As long you understand the risks. I'd rather have my family photos beying unencrypted than a very good possibilty of loosing them which happed more than once with other e2e things simply because I have no key to decrypt. Then again - if I have to chose I'd rather have the at my home lab.

Why is there "a very good possibility" of losing your photos because they are E2EE? Do you not use a password manager and backup your data? There is no reason why E2EE services can't provide recovery or emergency access mechanisms, or implement plaintext export functionality from clients for storage elsewhere. Most reputable providers already have functionality to enable recovery and backup.

> can't provide recovery or emergency access mechanisms

If they can do that then they are not e2ee.

Re: Immich 3.0

#165

Post by cuu508 »

cromka wrote: post #160

I have a different bash with them than the lack of E2EE: they do not make it easy to import from other servicesvlike Google Photos or iCloud, which should be a priority. They rely on immich-go project, which is ridden with bugs and basically abandonware by now. Their own iOS app, which can also be used for syncing iCloud gallery, has outstanding, 2 y/o or so bugs that will fail to upload the Live Motion photos. My ph…

> I just don't get it!

This is open source, volunteer developers often focus on doing things that are fun to them, or that scratch their own itch. I can't imagine dealing with Google Photos semi-broken exports is fun to anybody, and you only deal with the pain of the import once, afterwards there's no itch to scratch.

Re: Immich 3.0

#166

Post by cromka »

cuu508 wrote: post #165
cromka wrote: post #160

I have a different bash with them than the lack of E2EE: they do not make it easy to import from other servicesvlike Google Photos or iCloud, which should be a priority. They rely on immich-go project, which is ridden with bugs and basically abandonware by now. Their own iOS app, which can also be used for syncing iCloud gallery, has outstanding, 2 y/o or so bugs that will fail to upload the Live Motion photos. My ph…

> I just don't get it! This is open source, volunteer developers often focus on doing things that are fun to them, or that scratch their own itch. I can't imagine dealing with Google Photos semi-broken exports is fun to anybody, and you only deal with the pain of the import once, afterwards there's no itch to scratch.

They make money on that, it's not just a hobby project

Re: Immich 3.0

#167

Post by Valodim »

cromka wrote: post #166
cuu508 wrote: post #165

Earlier quoted context omitted.

> I just don't get it! This is open source, volunteer developers often focus on doing things that are fun to them, or that scratch their own itch. I can't imagine dealing with Google Photos semi-broken exports is fun to anybody, and you only deal with the pain of the import once, afterwards there's no itch to scratch.

They make money on that, it's not just a hobby project

Their business model is basically donations, it's not a for-profit operation. Maybe if you consider yourself less of a customer and more the beneficiary of a community effort, it'll be easier to "get"

Re: Immich 3.0

#168

Post by maccard »

gchamonlive wrote: post #106
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

If they steal your homelab, e2ee doesn't help, it's encryption at rest. E2ee is for rogue devices sniffing the network, which is more or less of a concern depending on your setup. I'd not have unencrypted traffic in my network if I had for instance those shady TV boxes.

e2e is not for rogue devices sniffing the network. TLS protects against that without any E2E.

Re: Immich 3.0

#169

Post by Valodim »

slaye wrote: post #161

An incredible piece of software, on par with Google Photos. I've been using it behind Tailscale for months with no problems ever since I first got into homelabbing. Actually, moving from Google Photos to Immich after I hit my 100GB storage limit was the whole reason I got into self-hosting, and what a fun ride that has been! I can't believe self-hosted products of this caliber are free. Huge shout-out to HomeAssistan…

Please buy a license if you are happy with the project :) it's free, but you can still buy a license for a small amount of what you saved

Re: Immich 3.0

#170

Post by Groxx »

tclancy wrote: post #86
ivanjermakov wrote: post #53

Earlier quoted context omitted.

Beware that migrating back from Immich to iCloud/Google is not something Immich cares about. There is no "download all" anywhere, best way is to go to the server and get raw files from there. https://github.com/immich-app/immich/discussions/14365

They’re literally on a disk drive I can physically touch. I think I can figure out a migration strategy for that.

The immediately obvious and simple to handle on-disk format for everything I cared about was one of the things that convinced me to give it a try. Well-crafted exporters are great and all, but I really like being confident that I can convert it by hand even if the company ceases to exist.

Backups are easy too: you can very reasonably just rsync the library folder, and it'll be recoverable from that alone (I tried it! Worked great). You'll lose accounts and image-content search and iirc faces (possibly painful), but most of that is trivially rebuilt or not very interesting for single-person scenarios.

Post reply on HN