Still, linux desktop is going up, with a fraction of the marketing power Windows and Apple have.

This isn’t entirely true. Linux is getting a lot of help from Microsoft. <wink wink>

Probably folder structure and naming conventions.

If you still have some stubborn pieces of media, [imdbid-tt…] tags and even .nfo files can help.

A bit cumbersome if you are traveling and using a different public wifi every time though

You’re not wrong. But you’re probably also familiar with the “secure vs. convenient” dichotomy: the closer to the “secure” end of the spectrum you get, the more cumbersome things will inevitably get. If you feel like you’re jumping through too many hoops and you don’t know what for, chances are you’re overshooting the target in terms of your threat model and might get away with doing less.

Plex -> Jellyfin (I don’t use it but I’ve heard good things about it);

I do use it heavily and came here to recommend it over Plex.

1. Disable DNS once. Find out URL/IP of captive portal that way.
2. Add to hosts file (Win/Lin/Mac). Maybe even give an alias: “captive-school”, “captive-library”, etc.
3. Turn DNS back on. The hosts file will take prerogative over DNS settings, i.e. it is resolved first.

You are correct, it seems to have supported it for a while now, but it got more support now.

I’m afraid MusicBee is not for me since my household has been powered by Linux only for years now. I’ll look into that beets plugin though, which has been recommended to me somewhere in the comments before. Thanks!

Thanks for the clarification!

Confusing write-up. Care to clarify

• why exactly your phone fails attestation?
• what exactly it is you did to make it work?

Long-time immich user here, similar problem. The issue (for now) is that only the owner of the media has write access. With partner sharing, all you can do is read the media (and add them to albums).

What I do for now with “trash media” (e.g. photos of receipts and other stuff that one snaps pics of for practical reasons and then forgets): I add my partner’s trash to an album named “please delete”. I periodically ask them to go through it and remove anything they want to keep, then have them select and delete everything in that album in batch.

Why this may not be practical for you, OP: you have two “trash producers”, so you’d have to keep a “trash” album for each of them (and sort trash media correctly). This is tedious work and error-prone: if you have only one pic in you “trash” album that your account does not own, selecting and deleting everything will fail, sending you on a hunt for the one misclassified picture in a batch of >200…

What immich may do about this in the future, as according to their roadmap: in the past, they were planning to add “more granular permissions controls”. Right now, they’ve renamed that to

User groups: Manage groups of users and share albums with a group

I hope this will include permissions management as well.

Wither way, the feature is likely to come with a greater overhaul of partner sharing. Partner sharing, as of now, is partly “broken” due to past design decisions: you can’t

• write to your partner’s files
• share facial recognition data: each one needs to classify people in their pictures individually (e.g. both need to tag “Uncle Fred” individually in their own accounts)
• share memories: only pictures owned by you will show up in memories, not your partner’s

And before anybody asks: no, there’s no ETA…

Soon

Most lists from https://github.com/blocklistproject/Lists

It does say that, and yet I’ve been doing it for years without issue. You just need to know what you’re doing, i.e. you need to be able to tell apart the connections that are required to make a site work from those that aren’t needed and can be blocked without issue. If you don’t, Tracker Control will break a lot of sites, and they probably don’t want to deal with the resulting support requests.

But if you’ve been using NoScript for a while, you will feel right at home with TC and be able to use it with browsers as well, which is where a lot of tracking happens.

True, although we must concede there is a difference between the simple machine learning already present in paperless and LLMs where, depending on quantization, CPU-based inference doesn’t get you very far.

Hook up the TikTok repos and you’ll get downgrades every 20 seconds.

I do understand and share people’s hatred of corporate-owned, centralised cloud AI.

I understand (though share to a lesser degree) people’s ethical concerns about how these models were trained (copyright has been broken for a while now, this just exacerbates it).

But this level of outrage about using local models on an opt-in basis strikes me as hysterical.

Feel free to change my mind.

Man, that is so outdated! /s

The critical part is: how many supposed “quality” alternatives have been proven not to do any logging? Mullvad has been proven to be solid. They were raided and had jolly little to hand over to authorities on their customers.

How many of the other VPN services can say that about themselves?

I’ve seen Immich mentioned around here before, but I’ve honestly never set up even a real homelab or sever before, so that’s a bit daunting.

I haven’t been in this space for too long either, but immich is what brought me here. I tried it out locally - no deecated server, just spun up immich on my desktop machine to try it out. And it was just so good it made me want to have a server and learn the ropes.

I’d recommend you try it out this way too. We’ll see each other on the other side of that rabbit hole. ;)

I’m the violence.

It’s a mixed bag really. Disabling JavaScript thwarts a lot of tracking efforts. But at the same time it puts you into a very small niche of users that, combined with other data points (user agent, IP location) makes you pretty fingerprintable.

Coming from a fellow JS Disabler, mind you.

Thanks for providing some evidence at last. You’re not wrong on many of those points, but not entirely right either.

Phone numbers are an issue, true, though you can get around that using a burner SIM or even a virtual phone number. Also, contact discovery has been working without exposing your phone number for over a year now.

a phone from Google or Apple

The phone can be made by anyone. The OS needs to be Android or iOS at some point, which is unfortunate; pure (desktop) Linux usage isn’t possible. That said, deGoogled Android has been around for more than a decade, allowing you to use Android in a privacy-friendly way. So if you want, you absolutely can avoid being tied to Google and use Signal.

As you can see, there’s a lot more nuance here than “Signal isn’t private”; privacy, after all, isn’t binary, but rather a gradient. For what it’s worth, Signal is more private than many messengers out there by a long shot, and it allows you to use it in more privacy-friendly ways if you so desire. While there are messengers out there that go even further in terms of security, privacy and decentralisation, a lot of them come with usability and convenience drawbacks. The way I see it, Signal sits in a Goldilocks Zone of “private enough” (for most threat models) and “convenient enough” for mainstream adoption. You can have the most secure and air-tight messenger; if there’s nobody there to talk to, it’s no more than a technically sophisticated brick. For now, Signal may be our best shot for mainstream adoption of reasonably private and secure messaging. If your threat model is higher than that of average Joe, by all means, go for Briar, SimpleX chat or any of the more hardcore options.