// the find
secluso/core
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
Secluso is a Rust workspace for a self-hosted Raspberry Pi security camera that streams live video, sends alerts, and stores encrypted clips without a cloud provider. The README describes the relay as untrusted, so phones and the Pi exchange encrypted data through a server the user runs or rents. It is aimed at DIY hobbyists who are willing to maintain a small VPS and accept beta-stage software.
The crate split matches the threat model: camera_hub handles capture behind a traits.rs abstraction with Raspberry Pi, IP, and Android backends, client_lib holds client-side crypto state, and server is a separate relay that never needs plaintext. Group key management goes through OpenMLS, which is the standard mechanism for the forward secrecy and post-compromise security the white paper claims, and CI pins the OpenMLS lockfile to catch version drift. The reproducibility tooling is real rather than aspirational: there are CI workflows and a checker in releases/ so the shipped binaries can be compared against source. Motion detection is built as a local ONNX pipeline (NanoDet in motion_ai), so footage analysis does not depend on a cloud API.
The core repo does not contain the phone app or the OS image, which live in separate repos (mobile_client and os). Anyone auditing the full system has to follow three repositories, and the reproducibility claim spans all of them. The README is mostly links and marketing lines. It does not say what the relay can observe (connection timing, object sizes, account metadata), and for a privacy tool that is the first question a reader needs answered. Hardware support is narrow: a Pi Zero 2W and specific OV5647 or IMX219 sensors. The 5-minute setup depends on a desktop Tauri app and a prebuilt image, and the build-from-source path is not described. The free beta relay is operated by the company, and the README gives no independent security audit or third-party review, which matters for a project whose pitch is privacy.