FabCH

Are you a net positive?

Just because somebody pays taxes, it doesn’t necessarily make them a net positive.

For example, do you contribute culturally? That can be quite hard to do without speaking the language.

What about defense. Would you fight for the country? Hard to do if you don’t understand the orders.

What about spiritually? Emotionally?

If you are not a resident, don’t bother trying unless you plan to have 30M or more in the account.

If you are a resident, you can easily open a normal account in minutes… unless you are US, Russian or Belarus citizen.

Well, why is „learn the language“ not a rational and pragmatic requirement?

Seems rational to me. Want to live in country X permanently? Learn language X.

Your aunt is sort of correct, but not really.

If you move to CH on your German EU passport, register at the local authorities and get your residency card, most traditional Swiss banks will open an account for you. You just won’t be able to do it online or with the Neo-banks. But an actual physical UBS office or Kantonbank will eventually be able to handle the paperwork for you.

It’s a super interesting example because the Swiss German in the question would also vehemently disagree that they have anything in common with the German :)

I’m actually curious if the GP expects „yes“ or „no“ as an answer, because I couldn’t even say. It’s probably „yes“, but…

YSK: This is a disputed view. Wether nation comes first, or the state, is something academic historians don’t agree on.

While it sort-of fits if you limit it to France, it breaks down even when you cross the border to Germany.

Three different countries speak German as their official language, and Germany itself wasn’t really a nation-state until Nazism. It was a multi-ethnic empire before that, and a bunch of random kingdoms and ducheys before that. And after 1945, it was not a nation-state either, since it was somewhat famously 2 states.

I mean, even if you insist on viewing it as a business deal, what exactly prevents one side to put language requirements in the business deal?

That’s how deals work, both sides state their position and either they find a middle ground or they don’t.

As a counter point, I would not like your proposed design.

Why would you use 50% of the screen space when you can have 100% and flip between prompt and render?

I don’t think there is a formal definition of E2EE.

Here’s Wikipedia’s definition:

„End-to-end encryption (E2EE) is a method of implementing a secure communication system where only the sender and intended recipient can read the messages“

Note the complete lack of client/server distinction. It’s simply about intended recipients.

True. But the server is not completely unprotected even if not stored in my basement.

The disks are fully encrypted, so the attacker must be careful not to accidentally interrupt power or force a reboot.

And they can’t just log into the machine, it is still a normal Linux machine with passwords.

So they need to attach to a running system and actively hack it, which is completely possible but is not going to be done by a random employee for no reason.

In memory. If the police shows up and they disconnect my server to sieze it, for example, the photos are lost to them.

And the Hetzner employee would need to specifically target me, because I doubt they would implement a dragnet that pierces through the bespoke random process on my bare metal server to scan the photos in memory.

That is a lot more secure than „Google scans all pictures routinely and fully automatically sends the police to your door, and you have no recourse if they are wrong“ that the EFF article discussed.

Ok but again, that is introducing an arbitrary split that is not based on tech. What if I have two phones? Would you expect phone A to see images taken by phone B? If yes, obviously my phones need to share keys.

So what is different in saying „All family devices should see images taken by any device“? They are all clients, including the storage&processing device.

Insisting that E2EE have „ends“ on clients is not useful. It’s much better to define „end“ based on control.

What is the relevant definition of client and server if they are both peer devices under roughly equal level of control of a single entity?

Prices have jumped considerably, but basically anything on Server Auction is good https://www.hetzner.com/sb/

I pay 60/month for 50 TB with a 10 year old intel xenon.

This is only true if you are so highly individualistic you don’t consider a family unit as a single entity.

If you consider nuclear family as an entity, it’s e2ee. Practically.

Putting aside the fact that yes, the server can be compromised if somebody chose to attach to the live RAM and recover keys. But practically, nobody will. Same way Google will not deliver a special compromised image of the mobile app on my phone, even though they completely can.

I do happen to have some experience.

For 99.99% of the population, does the threat model really include targeted NSA attack with higher probability than „Google’s automated system sent the police to my door“? No, no it doesn’t.

It is demonstrably more secure for even a semi experienced sysop to host Immich for their family than for them to use Google/Apple.

But I do agree that _some_ experience is required.

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now.

Hetzner community provides official full-disk encryption documentation:

https://community.hetzner.com/tutorials/install-debian-with-...

Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy that handles SSL for you.

Add cron based automated backup of the entire Immich data to a local encrypted NAS and there you go. Reliable, end-to-end, encrypted at rest setup. So far, it required exactly 0 maintenance.

It’s also more secure because I just drop traffic from all but 3 geographies at the IP level. And you can also add a WAP on the Nginx proxy.

It is also more more secure than Google/iCloude because the „employee of the company“ attack vector is much smaller. It’s documented that Google looks at your photos and is perfectly happy to file false police reports: https://www.eff.org/deeplinks/2022/08/googles-scans-private-...

By comparison, yes it is theoretically possible for Hetzner employees to access my server physically and extract the encryption key from RAM, or setup a fake SSH server to try to steal the key, but that is far more complicated attack and hasn’t been documented yet. And it risks detection.

Yes but magical homomorphic encryption aside, the person has conflicting requests at that point. They are asking for an image app that can’t view their images.

That’s not an image app anymore, that’s just encrypted storage.

Fair enough, but the Immich provider they link to also uses SSL and claims to encrypt at rest.

It they don’t consider that e2e encrypted, literally nothing is then…

What do you mean Immich is not end-to-end encrypted? You control both ends, you can encrypt it any way you want…

They did? There is the whole "alternative app stores" kerfuffle going on right now between Apple and the EU.

They are not allowed to lie about it though.

Lying to the police that the reporters are an "active threat" is criminal.

It may or may not be unethical, but I can 100% certainly say it is not universally illegal.

The Coca-Cola formula was reverse engineered in 2026 by a sufficiently motivated individual.

Here it is.

Per liter of cola:

104 g sugar

1 mL Flavor Solution A

10 mL Flavor Solution B

Carbonated water to volume

Flavor Solution A (Essential Oils):

Dilute 20–21 mL of the following oil mixture to 1 L using 95% ethanol:

45.8 mL lemon oil

36.5 mL lime oil

8 mL tea tree oil (emulates decocainized coca leaf extract)

4.5 mL Cassia cinnamon oil

2.7 mL nutmeg oil

1.2 mL orange oil

0.7 mL coriander oil

0.6 mL fenchol

Flavor Solution B (Chemical and Color Base):

Dilute the following ingredients to a volume of 1 L using water:

320 mL Shank's caramel color or 190 mL Durkee caramel color

160 g glycerin

45 mL 85% phosphoric acid

10 mL vinegar (5% acidity)

10 mL vanilla extract

10 g wine tannins (emulates decocainized coca leaf extract)

9.65 g caffeine

axpo is not independent. They have an agenda.

Solar doesn’t require more materials per kWh. LCOE of solar is order of magnitude lower than Nuclear.

And we do have more mountains that we can build out.

Yeah I think I he could have done a better job communicating in that thread that creating Workspace CLI was literally his job. He didn’t go rouge or didn’t follow the process.

He was officially Google DevRel and routinely created such tools in the past. It’s not crazy to assume that if you build 56 tools and everything was fine, 57th tool should be the same.

That massively changes the story in his favor.

You can also use the same money to flood many of those empty bunkers we have with water and pump it up and down indefinitely, with no radioactive waste to get rid of and no dependency what so ever on other countries.

Solar panels on each square cm of roofs together with agrovoltaics and solar on every farm and a few more of those 2TWh hydro storage plants we have, and we are energy independent and can service a large part of our infrastructure ourselves.

Codeberg hosts some decently high profile projects.

It’s probably the one to go for.

Consider donating for their hardware costs. They are completely transparent about their costs and where the money goes.

They are not leeching clout off anyone. And they are not using another entity's name.

They _are_ Amazon Employees. They are in no way factually incorrect by calling their group "Amazon Employees in support of <insert topic here>" and are entitled to call themselves that, because that is who they are.

Just because the words "Amazon Employees" contains the word "Amazon", that doesn't mean they are not allowed to use it. If Amazon would prefer them not to call themselves "Amazon Employees", Amazon is free to not employ them in the first place. Now that Amazon did employ them, it has to allow them to use the objectively correct way to describe their group. And apparently, if Amazon would like to stop employing them, it gets to pay a settlement to them or explain it in a court, because there are rules against that.

If multiple people are calling you out, you should probably consider you are wrong.

They are Amazon Employees. It is factually correct to name the group „Amazon Employees …“.

It doesn’t automatically mean they are representing the company.

And obviously it’s legally permitted, since they had to settle the complaint.