IanTwenty

'Last year, we asked the public for their views on smart products in a series of workshops. People shared concerns that products collect too much personal information, and said that they feel powerless to control how their data is used and shared'

Thank you to these people!

https://www.lostsongsofstkilda.com/

I'm checking this out!

..could it be your phone's storage is failing then?

I have not yet had a chance to try it but there's this:

https://domainaware.github.io/parsedmarc/

Currently I use my own Python script to do some basic reporting but would rather pool effort.

I don't see anyone talking about the human side so I'll ask - what is the appetite for change? I can see you yourself are motivated and that's great. How do you feel the attitude is with the others there? Migrating a company that's been working analogue for decades sounds like a big change programme regardless of the tech choices you ultimately make. This sounds like process change as well as technology change and that requires using another set of skills to wrangle the people.

I would advise to pick a small area first that's causing the most pain but also very amenable to common tech most people are already familiar with and is only a small change to existing processes. Get an early visible success.

The photo management might be a good start as we all are used to these apps on our phones and the tech is mature and easy to find in FOSS.

Everyone loves Immich though it has some big warnings on its github page about its own maturity. Maybe something simpler: just file/photo synching and a shared gallery? It can always be upgraded in future. Syncthing is solid, some kind of NAS and one of the older/mature galleries running on top. Get your backup process nailed down and run a real recovery process before too many photos are at stake.

Anyway it sounds exciting and kudos to you for looking to FOSS. Good luck!

There is some distribution of effort/expertise at least:

When an individual researcher or an organization discovers a new bug in some product, a CVE program partner — there are currently a few hundred across 40 countries — is asked to assess the vulnerability report and assign a unique CVE identifier for the flaw if and as necessary.

https://www.theregister.com/2025/04/16/homeland_security_funding_for_cve/

Not on Firefox, some site functionality is disabled: https://medium.com/@leonardodna/the-ultimate-newbie-guide-for-self-signed-certificates-d81aa3b9987b

I know what you mean but using real self-signed certificates (i.e. no CA at all) with modern browsers causes so many issues I find them unusable.

I'll mention this as no one has yet but you can be your own CA. Tools like mkcert make it easy

https://github.com/FiloSottile/mkcert

This is potentially more hassle (than using public DNS) as you have to get your CA certs onto every device. However it may be suitable depending on the situation.

Take a look at https://fedi.tips/ also

It's a bit like using directories/folders to organise your work - you don't have to have separate projects in separate folders but it really helps the more projects you have going on. Also once you have two Python projects that require different versions of the same dependency things will get messy.