• 2 Posts
  • 15 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • Some models are getting better, but it’s still a point of difficulty. There are a lot of valid ways for fingers to be, so “finger like” areas have a lot of valid ways to be drawn. You need a fair bit of context to be able to say “wait, this is far too many, and the angles are all over the place”. They also seem to do less well when more detail needs to be given to other areas.

    Some images from a model that tried to do better at hands, and a prompt that pushes it to focus in the hands:






  • So, you’re going to run into some difficulties because a lot of what you’re dealing with is, I think, specific to casaOS, which makes it harder to know what’s actually happening.

    The way you’ve phrased the question makes it seem like you’re following a more conventional path.

    It sounds like maybe you’ve configured your public traffic to route to the nginx proxy manager interface instead of to nginx itself.
    Instead of having your router send traffic on 80/443 to 81, try having it send the traffic to 80/443, which should be being listened to by nginx.

    Systems that promise to manage everything for you are great for getting started fast, but they have the unfortunate side effect of making it so you don’t actually know what it’s doing, or what you have running to manage everything. It can make asking for help a lot harder.


  • You’ll be fine enough as long as you enable MFA on your Nas, and ideally configure it so that anything “fun”, like administrative controls or remote access, are only available on the local network.

    Synology has sensible defaults for security, for the most part. Make sure you have automated updates enabled, even for minor updates, and ensure it’s configured to block multiple failed login attempts.

    You’re probably not going to get hackerman poking at your stuff, but you’ll get bots trying to ssh in, and login to the WordPress admin console, even if you’re not using WordPress.

    A good rule of thumb for securing computers is to minimize access/privilege/connectivity.
    Lock everything down as far as you can, turn off everything that makes it possible to access it, and enable every tool for keeping people out or dissuading attackers.
    Now you can enable port 443 on your Nas to be publicly available, and only that port because you don’t need anything else.
    You can enable your router to forward only port 443 to your Nas.

    It feels silly to say, but sometimes people think “my firewall is getting in the way, I’ll turn it off”, or “this one user needs read access to one file, so I’ll give read/write/execute privileges to every user in the system to this folder and every subfolder”.

    So as long as you’re basically sensible and use the tools available, you should be fine.
    You’ll still poop a little the first time you see that 800 bots tried to break in. Just remember that they’re doing that now, there’s just nothing listening to write down that they tried.

    However, the person who suggested putting cloudflare in front of GitHub pages and using something like Hugo is a great example of “opening as few holes as possible”, and “using the tools available”.
    It’s what I do for my static sites, like my recipes and stuff.
    You can get a GitHub action configured that’ll compile the site and deploy it whenever a commit happens, which is nice.


  • Vpns and casting create a complicated network situation sometimes. Without being able to see exactly what was going on, it can be difficult to tell what’s happening.

    Sometimes casting involves sending the data from the controller, your laptop, to the renderer, your TV. That means you laptop pulls the data down and then forwards it.
    Sometimes it involves telling the renderer how to get the data so that it can pull it down and play it.

    When you use a VPN, you’re sending your traffic through a tunnel so that it’s “outside” your local network. There will be some exceptions for certain local behavior that needs to be local, unless you configured it not to but you probably didn’t.

    It’s honestly curious that it ever works, since the VPN should make it so you’re basically “not there”, and so casting shouldn’t be possible.

    My recommendation would be to use Plex if it works.
    Download on the VPN and then drop off to cast it is an alternative.

    There’s enough moving parts that you’re not going to have any fun figuring it out, and the answer will probably be something you can’t fix.





  • I don’t know that it’s discriminating so much as it’s unkind. Discriminating would be if you treated them unkindly because they were ugly.

    It’s not that everyone is beautiful, it’s that everyone deserves to be treated with respect and dignity, regardless of their appearance.

    The reason it sits wrong with me to say it’s discrimination is because the perception of beauty is a subjective thing closely related to perception of attractiveness, and is largely beyond an individuals control.

    OPs image, for example, bears a striking resemblance to what my father looked like, except angry and with bags under his eyes. I wouldn’t have called him ugly, because that would be a cruel thing to say to such a kind warm person, but he was not an aesthetically appealing man.
    It’s just a fact of life that 80 year olds are rarely beautiful in the conventional aesthetic sense. Doesn’t mean they don’t deserve respect, kindness and care.