roxanedrawing

[roxanedrawing]

Okay so when I got sucked into the phantom zone last week while watching youtube shorts a lot of the content it fed me was ADHD tips and a lot of it was either useless for me or redundant but there was one REALLY good tip about taking breaks that wasn't about taking breaks it was about RETURNING from breaks and the tip is: when you are about to go on a break, before you step away from your task (work, craft project, school stuff) decide what you'll do as the first thing when you sit back down at your task and set up your workspace to do that thing.

That means you've got an easy re-entry point to go back to doing the thing instead of sitting back down and having to make a decision or having to reorient from break mode to task mode. You have pre-reoriented and can just go back into working mode.

I've been doing this by circling what my next task on my tasklist is and bringing up the windows that I'll need for the task before I step away from my desk.

Brilliant hack, works great for me, hope it works great for you as well.

[roxanedrawing]

This is part four in my series about making my first book, You Are a Sacred Place, and also about making literally anything at all.

Read parts 1–3

Order You Are a Sacred Place

[roxanedrawing]

draw it bad and draw it weird and draw it catered only to yourself and draw it wobbly and draw it too small and draw it with the default brush and draw it without using references and draw it and leave it unfinished and draw it for the first time and draw it

[roxanedrawing]

people are really fucking clueless about generative ai huh? you should absolutely not be using it for any sort of fact checking no matter how convenient. it does not operate in a way that guarantees factual information. its goal is not to deliver you the truth but deliver something coherent based on a given data set which may or may not include factual information. both the idolization of ai and fearmongering of it seem lost on what it is actually capable of doing

[roxanedrawing]

Cybercriminals are abusing Google’s infrastructure, creating emails that appear to come from Google in order to persuade people into handing over their Google account credentials. This attack, first flagged by Nick Johnson, the lead developer of the Ethereum Name Service (ENS), a blockchain equivalent of the popular internet naming convention known as the Domain Name System (DNS). Nick received a very official looking security alert about a subpoena allegedly issued to Google by law enforcement to information contained in Nick’s Google account. A URL in the email pointed Nick to a sites.google.com page that looked like an exact copy of the official Google support portal.

As a computer savvy person, Nick spotted that the official site should have been hosted on accounts.google.com and not sites.google.com. The difference is that anyone with a Google account can create a website on sites.google.com. And that is exactly what the cybercriminals did. Attackers increasingly use Google Sites to host phishing pages because the domain appears trustworthy to most users and can bypass many security filters. One of those filters is DKIM (DomainKeys Identified Mail), an email authentication protocol that allows the sending server to attach a digital signature to an email. If the target clicked either “Upload additional documents” or “View case”, they were redirected to an exact copy of the Google sign-in page designed to steal their login credentials. Your Google credentials are coveted prey, because they give access to core Google services like Gmail, Google Drive, Google Photos, Google Calendar, Google Contacts, Google Maps, Google Play, and YouTube, but also any third-party apps and services you have chosen to log in with your Google account. The signs to recognize this scam are the pages hosted at sites.google.com which should have been support.google.com and accounts.google.com and the sender address in the email header. Although it was signed by accounts.google.com, it was emailed by another address. If a person had all these accounts compromised in one go, this could easily lead to identity theft.

How to avoid scams like this

Don’t follow links in unsolicited emails or on unexpected websites.

Carefully look at the email headers when you receive an unexpected mail.

Verify the legitimacy of such emails through another, independent method.

Don’t use your Google account (or Facebook for that matter) to log in at other sites and services. Instead create an account on the service itself.

Technical details Analyzing the URL used in the attack on Nick, (https://sites.google.com[/]u/17918456/d/1W4M_jFajsC8YKeRJn6tt_b1Ja9Puh6_v/edit) where /u/17918456/ is a user or account identifier and /d/1W4M_jFajsC8YKeRJn6tt_b1Ja9Puh6_v/ identifies the exact page, the /edit part stands out like a sore thumb. DKIM-signed messages keep the signature during replays as long as the body remains unchanged. So if a malicious actor gets access to a previously legitimate DKIM-signed email, they can resend that exact message at any time, and it will still pass authentication. So, what the cybercriminals did was: Set up a Gmail account starting with me@ so the visible email would look as if it was addressed to “me.” Register an OAuth app and set the app name to match the phishing link Grant the OAuth app access to their Google account which triggers a legitimate security warning from no-reply@accounts.google.com This alert has a valid DKIM signature, with the content of the phishing email embedded in the body as the app name. Forward the message untouched which keeps the DKIM signature valid. Creating the application containing the entire text of the phishing message for its name, and preparing the landing page and fake login site may seem a lot of work. But once the criminals have completed the initial work, the procedure is easy enough to repeat once a page gets reported, which is not easy on sites.google.com. Nick submitted a bug report to Google about this. Google originally closed the report as ‘Working as Intended,’ but later Google got back to him and said it had reconsidered the matter and it will fix the OAuth bug.

[roxanedrawing]

went from fine to crying in four seconds

You are loved.

Reference here

[roxanedrawing]

this is so cool!

Love the new work you’re putting out✨ the cnc frames are genius! for real tho how have you been able to stretch those so smoothly? I always have trouble with creases or unsightly corners when working on non-rectangular frames 🖼 any lil tips for a fellow wobbly- shape lover ?

thank you b! 

i had a lot of help stretching!!! i have bad tendonitis and don’t have a lot of the arm strength required for making canvases, tbh. so i had help at my grad school’s woodshop, but basically we just made folded ruffles! stretch, fold, staple, stretch, fold, staple. tons and tons of staples. 

when we would get to an indent, cut the canvas at the deepest v and then stretch in both directions, if that makes sense. i don’t rly have any good pics of the back except this one, but you can hopefully sorta see what i’m talking about if you look at the dips at the top and where it curves. 

hundo percent would’ve been so much easier just to work on laser cut panel, but 1. i was worried about heaviness and 2. my gut said that they should be canvas!!! i prefer the texture of oil on fabric. you can also see here how i cut with the cnc; i included bracing at the back to keep it straight but hollow. also, the tech was able to include a 1/4 inch lip in the design so they would stretch easier. important to add!!! 

not shown are the long french cleats we attached to the back after stretching, and weighted for 24 hours so it would not bend and curve. also, hot water spritz where the canvas had buckling rly helped smooth it out, and then gesso afterwards p much resolved anything left over. also weighted it while the gesso dried to again keep it flat- this was partially bc i used thinner wood than i should’ve, but it was what was available. but yeah, gotta apply a lot of pressure to keep them flat while they’re being made! so far so good tho!!!!

i would love do this again and make them way bigger but yeah needed a lot of help !! hope this answered your question!!! it’s nice to get messages ! 

[roxanedrawing]

when i say i wanna abandon my current life, move to iceland, isolate myself from society and become self-sufficient, this is what i mean (ig: h0rdur)

[roxanedrawing]

tell me everything?

i'm too sad to tell you. i love this place too much.

[roxanedrawing]

Uhhhhhhhh that seems bad

[roxanedrawing]

I see a lot of posts saying "teach boys about consent".

While that is true, a lot of parents will do that and fail to see how their own actions are the problem.

If you've spanked him, he's less likely to understand consent.

If you've forced him to sit on Santa's lap, he's less likely to understand consent.

If you've forced him to give hugs and kisses to family members, he's less likely to understand consent.

If you've grabbed him in order to force him to sit still, he's less likely to understand consent.

If you've labeled him as "too sensitive" for not wanting to be touched, he's less likely to understand consent.

If you've assumed he's okay with something because he technically allowed it even though he felt pressured, he's less likely to understand consent.

If you're only going to criticize his actions but not your own, it won't work.

[roxanedrawing]

My dear lgbt+ kids, 

Trans women are women.

This post doesn’t fix anything. It doesn’t roll back harmful laws, it doesn’t offer you legal protection. It’s understandable if you currently feel more bitter than encouraged when you see statements like that on social media. What can a silly little slogan do against this wave of hate and danger we are currently experiencing?

And yet, I think it’s more important than ever to post those silly little slogans. Here’s some reasons why: 

Silence can look like agreement. Transphobes and fascists love to paint the picture that the „silent majority“ agrees with them, that they’re just saying out loud what everyone else is thinking. The „silly little slogans“ provide an accessible way to disprove that. They don’t fix everything but they offer an easy way to break that silence and show that transphobia actually isn’t as common or fashionable as fascists would like people to believe. 

Complying in advance is never a good idea. If you give up on posting stuff like this because it feels like the transphobes are winning anyway, well, then you’re giving them exactly what they want. You’re basically agreeing that they already won. Quiet surrender is awfully convenient to fascists. Don’t give them that power. 

Social media posts are also seen by trans people. Even if you feel like you’re not gonna change anyone’s mind: you can at least let trans people know you care. We need little rays of hope now more than ever, and social media posts definitely can be a way to make each other feel a little less alone. In fact, I think repeating a slogan can actually be ideal for that because they’re so easily recognizable. There’s comfort in that clarity. It takes off some of the mental load of trying to figure out if you’re a safe person or not. And that’s valuable in exhausting times like these. 

So no, this post doesn’t fix anything. But it doesn’t have to. It just has to be one small, firm act of resistance. A reminder that not everyone has given up. A reminder that trans people are real, loved and deserving of protection.

Trans women are women. Let’s say it again and again. Lets say it out loud. Lets say it until the hate feels small in comparison.

With all my love, 

Your Tumblr Dad 

[roxanedrawing]

i made a ceramic cat dish and sometimes his eyes do a weird reflective thing like maybe one day he would like to be a real cat

[roxanedrawing]

Best of favorite dance moves 💃🕺 via @ Ed People on Youtube https://twitter.com/TansuYegen/status/1560874626380857344

[roxanedrawing]

reflection of phone taking a selfie in my glasses

[roxanedrawing]

meet my hyper-glossy space cat who is so sparkly but I can barely photograph him through his hi-gloss coating

[roxanedrawing]