The worst I had was a credential-stuffer bot that used a set of leaked credentials to get on my mail server and send spam. I changed the password within 5 minutes and it stopped. That was the end of it.
Once I had someone deface a website because wordpress wasn't patched. I just restored the site from backup and moved on with life.
I would think that most of the time, you just join a botnet.
BUT someone getting into your email can let them do password resets to all your accounts. Then again, I self-host my email because all mail providers are reading your email by default. I'd still rather self-host it.
You can still just open it to the internet. Just do it on IPv6 instead. You won't find it by scanning IP ranges like they do on IPv4. You'll want to set up DNS for it though. Also get a free TLS cert from LetsEncrypt. It's a bit of work initially.
I've really wanted to ditch JPEG. It's a 34 year old format.
The problem is that AVIF, JPEG-XL and HEIC/HEIF don't work in many places. At a minimum I would want them to display in my gallery app (currently Nextcloud memories), display in a browser, and have native support at an OS level (i.e thumbnail previews). Neither format comes close to this.
I may even move away from Nextcloud over it. I didn't want to deploy docker just for immich (I love LAMP, btw). However Nextcloud is SO MUCH maintenance compared to the 50 other services running on my server.
You don't need to delete them entirely. You can convert a 5MB/22 megapixel JPEG to a 500KB/2 megapixel AVIF that looks 95% as good when viewed on a phone screen.
Of course, I have no idea if immich can do this. It would be nice though.
This sounds a bit like a passport-stamping scheme. But the passport doesn't have your name and photo on it. Hopefully it only stores verifiable stamps, but not who stamped it.
I hope they use this to tackle age verification. I'd like to just have a token to prove my age without handing over an actual ID to questionable companies.
My friend has a Tesla. He is absolutely this person.