• 0 Posts
  • 27 Comments
Joined 11 months ago
cake
Cake day: May 28th, 2024

help-circle












  • You may simply have aphantasia. The inability to picture things clearly in your “mind’s eye”. This ranges from being able to VR your imagination into the real world like it’s something that’s really there, to only ‘seeing’ a faint idea of what it is you’re thinking of, all the way to not seeing anything at all.

    My mother was blessed with hyperphantasia, and art came easier for her than most - but it was always better with practice.

    I most definitely have aphantasia (trauma based), but I’ve been able to practice ‘seeing’ things in my minds eye by taking pictures, practicing remembering the picture, drawing it from memory, and then comparing it afterwards. I’m no photocopier like you seem to be, I mostly deal with engineering drawings all day so I think my mind has simply adapted to putting together sets of rules like a puzzle.


  • Does anyone have good recommendations for someone who seems unable to gain any proficiency at drawing?

    Practice. Practice, Practice, Practice, Practice.

    You’re going to suck. It’s okay to suck. You only get better through failure. Drawing and art is a skill that you develop over time like training a muscle. Don’t throw away your old stuff. Keep it. Look at it, decide on something you don’t like - then focus on doing that better the next time. Repeat. Draw. Like…draw a LOT. Like a LOT A LOT. Draw anything. Try different styles.

    The biggest thing to remember is you’re going to suck. Everyone sucks. The people who don’t suck, are people who kept at something long enough to not suck. Remember also – you are going to be far more critical of your art and the mistakes you made vs others. Don’t get discouraged - especially if you post that shit on the internet. Someone will tell you it’s terrible and you’ll get discouraged. Surround yourself with people who will lift you up and encourage you.

    Procreate on an old iPad 6 + Apple Pencil is what I did for my daughters and they both are so much better at drawing now than they ever were - so you just have to keep doing it.

    The biggest misconception that people have is that you’re just born with this talent - those people weren’t born with the ability to make great art, they were born with the ENTHUSIASM to do it every day, constantly, as an obsession. And then they developed a SKILL, based on that enthusiasm.


  • kitnaht@lemmy.worldtoSelfhosted@lemmy.worldHow do I securely host Jellyfin? (Part 2)
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    edit-2
    14 days ago

    And again - if you put those behind a fail2ban; and you 404 5x in an hour, which is likely - you’ve solved that issue. Had my jellyfin instance publicly available for 2 years on its own VM with passthrough GPU, and haven’t had any issues. People poke around quite often, and get blackholed via the firewall for 30d.

    It wouldn’t stop a dedicated attacker, but I doubt anyone’s threat model here is that intense. Most compromised servers happen from automated attacks probing for vulnerabilities in order to get RCE; not probing for what movies you have – Because having movies on a media server doesn’t prove that you didn’t rip them all off of blu-ray…it just means you have movies.

    You’re not going to have 100% privacy when you put up ANY service on your network. Everything leaves a trace somehow; but I’m starting to think half of you are Chinese spies or something with the amount of paranoia people here show sometimes. :P



  • kitnaht@lemmy.worldtoSelfhosted@lemmy.worldHow do I securely host Jellyfin? (Part 2)
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    edit-2
    14 days ago

    If they need SSL certs, they’ve got to. Jellyfin doesn’t accept self-signed certs, which means DNS entries in a domain, and access from the internet.

    Really, honestly - what they need to do is just install Jellyfin on the Raspberry Pi and ditch the encryption requirement altogether. There’s no reason to have it on a LAN-only environment. They aren’t going to need it, nobody is going to MITM their lan environment, and VPNs will regularly allow LAN passthrough.

    If ProntonVPNs own client doesn’t allow LAN connections, they either need to swap to the Wireguard vanilla client (if that’s allowed on free tier), or upgrade their VPN service.

    OR switch VPNs altogether.

    There isn’t a way to do this without breaking one of their requirements

    Only options here are to publicly host with real SSL certs, on a domain and tunnel out – Or swap VPN providers/software so that you can achieve LAN access and forego HTTPS altogether.

    Edit: And sorry – the previous post is gone regarding their only needing access within the home, there’s no way I could have known that.

    There’s a bit of paranoia going on here to begin with - There’s no reason they need this level of “security” within their home network on the LAN side anyhow. They could possibly buy a managed switch and make the jellyfin server only visible to a specific vlan that didn’t include the router, but that doesn’t quite match up with what it sounds like they’re needing.



  • kitnaht@lemmy.worldtoSelfhosted@lemmy.worldHow do I securely host Jellyfin? (Part 2)
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    2
    ·
    edit-2
    14 days ago

    Do. And make sure your logs are piped through fail2ban.

    All of these “vulnerabilities”, require already having knowledge of the ItemIDs, and anyone without it poking around will get banned.

    The rest of them require a user be authenticated, but allows horizontal information gathering. These are not RCEs or anything serious. The ones which allowed cross-user information editing have been fixed.


  • kitnaht@lemmy.worldtoSelfhosted@lemmy.worldHow do I securely host Jellyfin? (Part 2)
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    14 days ago

    Tailscale is only for the server/host. You’re not changing all of your VPN services over to this, you’re using it in a ‘reverse’ fashion. You’re VPN-ing the server out to the world so it’s reachable and you have port forwarding options, etc.

    From there, it can be reached by any client on the internet as a service. From there though, I don’t know how you’d get to it securely without a domain and SSL (Let’s Encrypt/Caddy) certs.

    A domain is only like $16/year. So it’s not prohibitively expensive.