Show HN:开源家庭隐私安防监控系统(端到端加密)
Show HN: Open-source private home security camera system (end-to-end encryption)

原始链接: https://github.com/secluso/core

Secluso 是一款专为树莓派(Raspberry Pi)设计的开源私有家庭安防系统。该系统由计算机安全与隐私领域的专家联合创办,用户无需依赖第三方云服务,即可通过移动应用监控实时视频、接收警报并访问录像。 主要功能包括: * **隐私至上:** 提供端到端加密的远程访问,并采用无信任中继设计。 * **透明度:** 该项目完全开源,操作系统、移动应用及二进制文件均支持可重现构建,用户可自行验证代码。 * **用户友好:** “Secluso Deploy”工具支持 5 分钟快速部署,可自动处理镜像创建和中继配置。 * **硬件灵活性:** 兼容树莓派 Zero 2W 及标准摄像头模块,支持使用个人 Linux VPS 托管或免费的 Beta 版中继托管。 Secluso 为希望掌控监控数据的用户提供了一种安全、自托管的替代方案。虽然该项目强调安全性和透明度,但其以“现状”形式提供,不附带任何保证。用户在部署前应确保符合当地有关加密技术的法律规定。

“Secluso”(前身为 Privastead)的开发者分享了其开源端到端加密家庭安全监控系统的重大更新。该项目由开发者与 John Kaczman 共同开发,现已具备简化的设置流程,用户可通过全新的图形界面工具在五分钟内将系统部署到树莓派上。 主要改进包括: * **定制操作系统:** 摄像头现运行在基于 Yocto 的精简操作系统上。 * **可复现构建:** 几乎整个技术栈(包括操作系统、服务器二进制文件、部署工具和安卓应用程序)现已支持可复现构建,以实现更高的安全验证。 * **优化的移动端体验:** 该项目现已在 iOS App Store 和 Google Play 上架重新设计的应用程序,并支持 UnifiedPush 以提供注重隐私的通知服务。 该系统架构利用“摄像头中心”来记录并加密数据,随后通过云服务器将数据安全地中继到移动应用程序。开发者还在其 GitHub 仓库中提供了详尽的“自建”指南,以帮助新用户上手。
相关文章

原文

Secluso is a private home security camera system for Raspberry Pi. Watch live video, get alerts, and open recordings from your phone without handing your footage to a cloud provider.

Secluso is developed by Secluso, Inc. and co-founded by:

  • Ardalan Amiri Sani, a UC Irvine professor with expertise in computer security and privacy,
  • John Kaczman, an open source and privacy enthusiast with experience in automation, systems, and AI.
  • End-to-end encrypted remote access: Watch live video, get alerts, and open recordings from your phone.
  • 5-minute setup: Secluso Deploy handles image building, pairing, and relay setup in the normal path.
  • Open source: Inspect the code, self-host it, and contribute.
  • Fully reproducible releases: Verify the released runtime binaries, deploy tool, Android mobile app and Secluso OS against the public source code.
  • Raspberry Pi: Raspberry Pi Zero 2W
  • Camera: Raspberry Pi Camera Module V1 and V2 (or any camera with a OV5647 or IMX219 Sony sensor)
  • Relay: your own Linux VPS login, or an email to us for free beta relay hosting while testing
  • Phone: Android or iPhone for pairing, alerts, and playback

Set up in 5 minutes (Quick Start)

  1. Download Secluso Deploy from the latest releases.
  2. Generate your personalized Secluso OS image and camera secret QR code locally
  3. Let Secluso Deploy provision your relay over SSH, or email us if you want free beta relay hosting while testing.
  4. Boot the Pi and pair it in the mobile app.

If you need help choosing hardware or a VPS, Build Your Own Guide gives you hardware suggestions and a simple starting path.

A demo picture of our Secluso Deploy tool

After setup, use the mobile app to check in remotely, review recent events, and open encrypted clips.

iOS Mobile AppAndroid Mobile App

A demo picture of our Secluso Deploy tool

See WHITE_PAPER.md for the full security model, including the untrusted-relay design, forward secrecy, and post-compromise security. See SECURITY.md for how to report a vulnerability.

We do distribute a prebuilt Raspberry Pi image called "Secluso OS". Secluso Deploy generates unique credentials on your machine and injects them into this prebuilt image. Secluso OS, the deploy tool, our runtime binaries, and our Android app are completely reproducible.

See releases/README.md for the reproducibility checker for the binaries and deploy tool. See mobile_client/tool/repro/README.md for the reproducibility checker for the Android mobile app. See os/README.md for the reproducibility checker for Secluso OS. The image must be checked before the deploy tool modifies it (download from our releases directly).

Questions and contributions are welcome. Contributions are made under the project license in LICENSE.

If you need help with anything else, please feel free to contact us at [email protected]

This project uses cryptography. Check your local laws before use.

Use at your own risk. The project authors provide no guarantees of privacy or home security.

联系我们 contact @ memedata.com