Open Source Friday with Ente's Vishnu Mohandas

Key Concepts

• End-to-end encryption: Ensuring data privacy by encrypting data on the user's device before it's transmitted and decrypting it only on the recipient's device.
• Self-hosting: Running the ENT server on your own infrastructure, giving you complete control over your data.
• Hosted service: Using ENT's cloud infrastructure to store and manage your data, offering convenience and reliability.
• Open source: Making the ENT code publicly available, allowing anyone to inspect, modify, and distribute it.
• On-device AI: Running machine learning models directly on the user's device to provide features like face recognition and semantic search without compromising privacy.
• Reproducible builds: Ensuring that the software build process is transparent and verifiable, allowing users to confirm that the distributed binaries are built from the provided source code.
• Monorepo: A software development strategy where all projects and their dependencies are stored in a single repository.

ENT: An Open Source Cloud for Photos and Videos

Overview

ENT is an open-source cloud solution designed for storing, sharing, and preserving photos and videos with a strong emphasis on end-to-end encryption and user privacy. It offers both a self-hosted option and a hosted service, catering to different user needs and technical expertise.

Key Features and Functionality

• End-to-End Encryption: ENT encrypts data on the user's device using a master key derived from their password. This master key never leaves the device unencrypted, ensuring that neither ENT nor any third party can access the data.
• Self-Hosting and Hosted Service: Users can choose to run ENT on their own servers using a quick start script or opt for the hosted service, where ENT manages the infrastructure and data storage. The hosted service offers 10GB of free storage.
• Cross-Platform Compatibility: ENT provides apps for Android, iOS, web, Linux, and Mac, ensuring that users can access their data from any device.
• Data Migration: ENT allows users to easily migrate their data between the self-hosted and hosted versions. It provides a single-click button to export all data incrementally, as well as a CLI client for more technical users.
• On-Device AI Search: ENT runs machine learning models on the user's device to provide features like face recognition and semantic search without compromising privacy. This includes face detection, embedding clustering, and CLIP-based semantic search.
• Authenticator App (O): ENT also offers an end-to-end encrypted authenticator app that provides secure backups of two-factor authentication tokens.

Vishnu Wandas's Journey and Motivation

Vishnu Wandas, the founder and CEO of ENT, started the project out of a personal need for a safe and private place to store and share his photos. Dissatisfied with the vendor lock-in and privacy concerns of existing services like Google Photos and iCloud, he decided to build his own solution.

• Problem Statement: Vishnu wanted a service that offered the same level of polish and user experience as big tech companies while maintaining absolute sanctity of user data.
• Inspiration: His personal frustration with existing services and a desire to control his own data led him to create ENT.
• Open Source Commitment: Vishnu believes that open sourcing the client is essential for verifying end-to-end encryption claims. He also open-sourced the server to give back to the open-source community and ensure the longevity of the project.

Technical Architecture and Implementation

• Lib Sodium: ENT builds on top of the lib sodium library for cryptographic operations.
• Master Key Derivation: A master key is derived from the user's password and used to encrypt all data. This key never leaves the device unencrypted.
• White Paper: ENT provides a detailed white paper on its architecture and cryptographic operations at nio/architecture.
• On-Device AI Implementation: ENT runs machine learning models on the user's device to provide features like face recognition and semantic search without compromising privacy. This includes face detection, embedding clustering, and CLIP-based semantic search. A white paper detailing the on-device ML implementation is available at ent.io/ml.

Community and Contributions

• GitHub Discussions: ENT encourages users to suggest improvements and discuss potential features on GitHub Discussions.
• Documentation and Translations: Users can contribute to the project by improving documentation and providing translations.
• Marketing and Spreading the Word: ENT encourages users to help with marketing and spreading the word about the project.
• Code Contributions: ENT is selective about code contributions to maintain a consistent vision and user experience. Code contributions are encouraged only after thorough discussion and alignment with the project's goals.

Security and Audits

• Cryptography Audit: ENT has had its client apps audited by cryptographers to ensure the soundness of its end-to-end encryption implementation.
• Continuous Security Measures: ENT continuously monitors its architecture and code for potential security vulnerabilities.
• Reproducible Builds: ENT uses GitHub Actions to provide reproducible builds, allowing users to verify that the distributed binaries are built from the provided source code.

Roadmap and Future Plans

• Long-Term Goal: To ensure the perpetual existence of ENT as a reliable and private cloud solution.
• Short-Term Focus: Improving the photo experience, particularly in the areas of discovery and sharing.
• Mid-Term Plans: Exploring additional products and services beyond photos, such as secure file storage and document sharing.

Community Engagement and Support

• Discord Community: ENT has an active Discord community where users can get help and support.
• GitHub Discussions: Users can ask questions and provide feedback on GitHub Discussions.

ENT's Name

The name "ENT" means "mine" in Malayalam, Vishnu's mother tongue. It also means "duck" in German, which aligns with the project's playful branding and use of a duck as a mascot.

Conclusion

ENT is a promising open-source cloud solution that prioritizes user privacy and data security. Its end-to-end encryption, self-hosting option, and on-device AI features make it a compelling alternative to traditional cloud storage services. Vishnu Wandas's vision and commitment to open source ensure that ENT will continue to evolve and provide value to its users.