Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

201–210 of 313 posts

Re: Immich 3.0

#201

Post by alper »

AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

Privacy extremists are always very vocal but most people do not care at all about this.

Maybe people have pornography production streams they want to manage using Immmich?

Re: Immich 3.0

#202

Post by palata »

TalkingCodeMonk wrote: post #136
konart wrote: post #129

Earlier quoted context omitted.

> It should be standard for anything hosted on someone else's computer. As long you understand the risks. I'd rather have my family photos beying unencrypted than a very good possibilty of loosing them which happed more than once with other e2e things simply because I have no key to decrypt. Then again - if I have to chose I'd rather have the at my home lab.

Why is there "a very good possibility" of losing your photos because they are E2EE? Do you not use a password manager and backup your data? There is no reason why E2EE services can't provide recovery or emergency access mechanisms, or implement plaintext export functionality from clients for storage elsewhere. Most reputable providers already have functionality to enable recovery and backup.

> How do techies and devs of all people not understand

I find it interesting to start with this, and follow with:

> There is no reason why E2EE services can't provide recovery or emergency access mechanisms

If the service can help you recover your data after you lose the key, it means that they have the key, and therefore it's not end-to-end encrypted.

That's the whole point of E2EE.

Re: Immich 3.0

#203

Post by logged4upvoting »

FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

I see e2e encryption over photo galleries a must since is a way of protecting yourself against misconfigured servers, future exploits or unpatched software.

Re: Immich 3.0

#204

Post by palata »

How does the mobile app sync work with Immich? My use-case is that I want to install the mobile app on the phone of my relatives (including iPhones), and it should keep syncing their pictures "forever" even though they never, ever open the app.

I tried Nextcloud, but the apps/server end up failing to sync after at most a couple month, and it's painful to recover from that. So it doesn't work for me.

I have been considering Immich and Ente, but I would love to know if somebody has experience with that.

Re: Immich 3.0

#205

Post by TalkingCodeMonk »

FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

FYI the setup you mention is not "end-to-end" encrypted. E2EE means client-to-client encrypted, with the server processing encrypted bits only. Your approach is encryption in transit and at rest. At rest is relatively irrelevent for large cloud providers, as they are probably better at managing the lifecycle of disks than most businesses or people. It's unlikely someone's going to physically rob a data center or end up with a refurb drive that hasn't been thoroughly processed and wiped.

It's not necessarily more secure than managed providers either, simply because you are probably not a security engineer, and have far less resources to secure your server. It does prevent Google/iCloud from scraping your data, but it certainly does not mean Hetzner can't access your data. They control the overarching hypervisor and control plane managing your servers/VM's, so there's no way to know what capabilities have been implemented. The majority of what intelligence agencies are capable of has not been leaked or documented publicly.

Re: Immich 3.0

#206

Post by vividfrier »

slaye wrote: post #161

An incredible piece of software, on par with Google Photos. I've been using it behind Tailscale for months with no problems ever since I first got into homelabbing. Actually, moving from Google Photos to Immich after I hit my 100GB storage limit was the whole reason I got into self-hosting, and what a fun ride that has been! I can't believe self-hosted products of this caliber are free. Huge shout-out to HomeAssistan…

[dead]

Re: Immich 3.0

#208

Post by reddalo »

kouru225 wrote: post #183
oliyoung wrote: post #41

Immich is such a no-brainer replacement for Apple Photos or Google Photos, combined with VPN like Tailscale, it's almost a drop in replacement

I’ve been using photoprism. Should I switch?

Give it a try, Immich is truly wonderful. Rich in features, polished UX, it's now better than Google Photos.

Re: Immich 3.0

#209

Post by pydry »

eddythompson80 wrote: post #112
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

It would make hosting a "Family and/or friends" instance possible. I do go back and forth on the accessibility tradeoffs of E2EE for average people though. In this scenario, lose or forget your key/password and you lose ALL of your photos which are very important to some people. Losing them is pretty catastrophic. Google Photos or iPhotos really gives people a sense of security about their photos. ps: It would also m…

You can host a family and friends' instance on your own hardware.

I have a small vps which just tunnels into a laptop running at home.

Half of the features of immich would become 10x harder to implement if encryption needed to be done client side.

Re: Immich 3.0

#210

Post by master-lincoln »

I would switch immediately if they added support for non-photo elements in albums like google photo has. E.g. texts and maps. And the option to chose the order of album elements yourself.

These make my albums feel like small blogs which really adds to the experience when sharing e.g. travel albums.

Post reply on HN