I just realized this almost reads like a Terramaster ad, that’s not my goal; you can search for similar options from other fabricants.

I don’t mind that, I’m actively looking for recommendations. I also got pointed to https://www.minisforum.com/products/n5-air, but that one is 500 with no RAM at all, which is quite hefty.

So far I’m leaning towards trying to assemble something generic from used components, though I’m not quite sure what to pick best, motherboard being the hardest one.

As for TrueNAS - I might check it out if I do get off the shelf NAS, but I don’t imagine I’ll be using the Web UI much, to be honest. And I know about Jellyfin, I’m sticking to Plex just because I already have a lifetime Plex Pass and I like the app on my TV. If they keep shoving “community” features down my throat though - I’ll do the switch.

ECC is not a hard requirement for me, but if I can get it - I’ll try to, as to me it makes sense for something that runs 24/7 and handles my personal data.

I have a very strong aversion to separating storage from my server. I just don’t see why I need to route power and network to 2 small boxes (none of which would do what I need it to do on its own + considering very crappy room layouts in rented apartments) and then fiddle with network access, when 1 slightly bigger box would do what I need it to do. Some 7-8 years ago I’ve bought dirt cheap second-hand Huananzhi x79 with Xeon E5 and DDR3-ECC with some low profile NVIDIA GPU and it all still works now - and something like that would mostly be OK for me even now (except I left it in another country).

That said, it’s possible a reasonably powerful NAS will be enough for me on its own?

storage box and a services box

That’s exactly what I want to avoid though. I see no reason to power and network 2 different small boxes when just one slightly bigger one will do. And as mentioned - 500 is without HDDs, I plan to use the ones I have for now and extend it later.

so - yes, there is a bypass for an indefinitely enabled apk installation with the annoyance of 24 hour wait when you first get the phone.

not great though, I agree.

then what is the point of it existing, if it can’t be used seriously? why should people spend their time on it, when there isn’t a solid base to build on? if you want to do something useful - contribute to an existing project. if you just wanna hack away at something - sure, do that, just don’t be surprised if other people happen to hate it when you try to present it as a serious project. nobody would bat an eye if you presented it as “I wanted a to try and implement Signal protocol, this is what I’ve learned and how far I’ve gotten”.

of course they asked for a professional one… but those that ask, must know that they are all prohibitively expensive. especially for a solo vibecoding dev like myself

then… vibe-code something else?.. why do you think that you should be making something you are not an expert in, that can potentially put your users into danger and make you liable for it? if it’s a learning project - great, go wild. but if it’s intended to be used, then sorry - this is just an irresponsible approach that should not be entertained by anyone. I get that you have “positive intentions” but pick some other venue that you can get right. or contribute to an existing project (being mindful of contribution guidelines).

Cryptography is notoriously easy to get wrong. If you don’t know enough about it - you should not offload it to the hallucination machine, because you will not be able to verify it properly, and those who can - will not bother to.

This is not what a real audit looks like and it should not be presented as such. This “audit” is, in fact, slop.

Auditor: Security Analysis (Automated + Manual Review)

Do you not see the problem in this line?

The implementation uses real cryptographic primitives

Or this?

Buying the product gives people the right to use it

It’s implied, but it’s not clear - which is why whenever you “buy” software you actually buy a license to use it which clearly states how, where and by whom it may be used, on how many devices, under which conditions, etc etc etc.

Since there’s no license file, it defaults to all rights reserved, which means full files can’t be redistributed.

I’m not a lawyer, but I would argue this actually means that even people who get it from Gumroad can’t use it “legally”. There should be a license which expresses your intent.

The project is closed‑source

It’s not though. It may not be FOSS, and by omitting a license you do keep the copyright by default, but it’s definitely not closed source either, it’s “source available”. Unless I’m missing the joke?

If there’s anything to learn here it’s that you absolutely can follow in Ross’s footsteps and organize a movement that will fight for what you deem important. He said multiple times “I’m doing this only because nobody else does, not because I’m a good fit for this”.

“let’s not do this because it’s not as important as X” is a bad argument, because the alternative is not that Ross suddenly picks some other topic and starts to drive it, the alternative is that nothing happens at all.

It’s WashedBlue: https://iczelia.net/about/#my-setup

Her blog is worth a read: https://iczelia.net/