Thanks, good to know!

I think their question is, what do you mean by “secure”? Because as the saying goes for internet services: usually, if you’re not paying, you’re not the customer, you’re the product.

Agreed. Anyone who thinks it’s ok to just expose ssh on 22 to the internet has never looked at their logs. The port will be found in minutes, and be hammered by thousands of login attempts by multiple bots 24/7. Sure you can block repeat failed logins, but that list will just always be growing.

Normal for who? I wouldn’t expose SSH on 22 to the internet unless you have someone whose full time job is monitoring it for security and keeping it up to date. There are a whole lotta downsides and virtually no upsides given that more secure alternatives have almost zero overhead.

As someone who majored in CS and is now in a software engineering position, the people in tech who come from a completely different field are always my favorite. On top of just proving people wrong about the “right” way to get into the field, they’ve been around, they know how to think about problems from other perspectives, and they’re usually better at working with other people.

Honestly, I think more people should minor in CS, or if they did their undergrad in CS, they should have to do their grad work in something else. The ability to compute things is only useful if you’re well versed in a problem worth computing an answer to, most of which lie outside of CS.

I see several Amcrest options that look like they have integrated AI object detection. Frigate on the other hand says you should get a “Google Coral Accelerator”. Do you know if Frigate (or RTSP, I guess) has a way to leverage the built in detection capabilities of a camera (assuming they are built in, and not being offloaded to the cloud)? Or am I better of looking at the “dumb” Amcrest cameras, and just assuming all processing for all cameras will happen on my Frigate hardware?

Hah I had the same thought. Trillian, though. Named after the character from HHGttG.

I feel like this is the perfect place for Right to Repair legislation: the product is broken? And it’s outside your support window? Then give customers what they need to make the fix themselves. It’s not good enough to say “meh, guess you gotta buy one of our newer chips then 🤷”

Legalized and well regulated*👌

I forget the order 5 times in the middle of crimping each side, so you’re doing better than me.

Yes, I highly recommend not relying on alpha software ever as your daily driver. I never give my photo viewing software write permissions on my images, so there’s never any risk of losing data. And yeah, I’m not directing anyone outside my household to it, so I currently don’t need to worry about servicing a bunch of users.

The app/webapp mismatch issue has been more annoying that I think it needs to be. I understand the need to make security updates, but breaking compatibility this often is unusual.

But again, my point is, the money you give them is a donation. If you don’t want to donate, then don’t. There should not be any incentive to get you to donate, besides seeing the project continue.

I don’t follow the argument you’re trying to make. Immich is fast and simple which fits my requirements where others don’t. If you know of a better alternative, I’m all ears.

Should I not be able to use the software if I’m donating?

You should be able to use it fully regardless of whether you’re donating.

I’m not going to pay for the mere possibility of it being useful at some undetermined point in the future.

That’s fine, by definition, a donation means you’re not paying for anything.

Immich has demonstrated it has no intention of ever becoming a useful project

I take it you haven’t been in the self-hosted photo space long. Even despite their alpha status and frequent breaking of backwards compatibility, it’s still the best experience I’ve had (comparing to Plex, Nextcloud, and Photoprism). But if you can find something better, I’m all ears.

What I don’t get is what would compel me to get a license.

Ideally nothing. Maybe a sticker or a theme, but nothing important to the function of the tool. If the personal gratification that comes with offering financial support to a FOSS project (along with the resulting product itself) isn’t enough, then this “license” (or whatever they end up calling it) isn’t for you…ideally.

I like having more ways to support the project, but I don’t think “license” is the correct terminology they should use, unless they intend to release paid-only features which I’m not a fan of at all.

Something to look for besides bandwidth is actual packet routing throughput. It’s possible you enabled a feature (ex. Deep packet inspection) that is limiting how many packets can be routed per second given the speed of your hardware.

Simplex is the first platform I’ve heard of that doesn’t use IDs (which doesn’t make much sense to me, practically, but sure). So would you say everything is less secure than simplex?

What makes session less secure? This is the first I’ve heard of it.

It’s normal for it to heat up under load, but it’s not normal for it to be under load 24/7 indefinitely.

Why is that? Does the motherboard effectively just not have enough inputs for all the disks, so that’s why you need dedicated hardware that handles some kind of raid configuration, and in the end the motherboard just sees it all as one drive? I never really understood what SCSI was for. How do the drives connect, SATA/PATA/something else?