Privacy

3982 readers

216 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago

MODERATORS

submitted 1 week ago by Blaze@piefed.zip to c/privacy@programming.dev

17 comments fedilink hide all child comments

That's my next project to get things from Google/Apple.

The options I've seen so far

Immich: great if you can self-host, but I prefer not to, so that's out for me
Nextcloud on a VPS (Hetzner or others): you need E2EE to prevent the providers from seeing your photos, but then all the apps like Memories etc don't work ( https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/3 )
Ente: has E2EE embedded, the face recognition happens on the clients. Can be self-hostable, so that gives more trust that other providers can launch their own European instances in the future.
https://zeitkapsl.eu/en/ : has E2EE, but no self hostable option, so you kind of have to trust them that they implement their design (which is actually kind of nice: https://zeitkapsl.eu/en/e2ee-architecture/ . They have a security audit on their roadmap (announced 8 days ago: https://zeitkapsl.featurebase.app/en/p/formal-security-audit )

Any option I am missing?

you are viewing a single comment's thread
view the rest of the comments

[–] Blaze@piefed.zip 1 points 6 days ago

Snapshot VM (in case things go terribly wrong)
Backup data somewhere (space/object storage)
Reinstall OS with hetzner installimage (reboot VM into rescue). https://community.hetzner.com/tutorials/install-ubuntu-2004-with-full-disk-encryption (Maybe first take a test VM as the post install script will take a few attempts to customize it for debian)
Provision VM
Restore data

The definition of "cumbersome" will vary from person to person.

I am now convinced that you are a little overwhelmed by the thought of managing a VPS.

Indeed, that's why I want to avoid to self host in the first place.

Not sure about the "talking out of my ass" part.