DoH & DoT still leak the domain name (and of course IP address) you’re connecting to. The domain name leak can be solved by Encrypted Client Hello but that’s still a draft and not turned on for many servers.

Except Alpine & those based on it, which uses Linux but not GNU libc or GNU coreutils or GNU BASH… Just musl libc & Busybox. I.e. the entire subject of this thread is one of the non-GNU Linuxes.

Yes, I listed sysvinit for that reason. And Musl instead of glibc. GNU is optional in a Linux distro, except for the kernel’s use of a GNU license.

Sure, I should have gone further.

Systemd/GNU libc/GNU Coreutils/GNU BASH/Linux/X11//GTK/GNOME
Systemd/GNU libc/GNU Coreutils/GNU BASH/Linux/X11/GTK/LXDE
Systemd/GNU libc/GNU Coreutils/Zsh/Linux/X11/GTK/GNOME
Systemd/GNU libc/GNU Coreutils/Zsh/Linux/X11/GTK/LXDE
SysVInit/musl/Busybox/tcsh/Linux/csh
Systemd/GNU libc/GNU Coreutils/Zsh/Linux/Wayland/QT/KDE Plasma
Systemd/GNU libc/GNU Coreutils/Zsh/Linux/Wayland/QT/LXQT

etc, etc.

There are thousands of combinations of the possible layers needed to make an OS.

Systemd/GNU/Linux/GTK or Systemd/GNU/Linux/QT, really…

It tastes like death and I love it.

It’s often used as the name for ammonium chloride on black licorice. The ammonium chloride also makes a great soldering iron tip cleaner!

I eat them all the time because I have a fucking problem, but I don’t enjoy it.

Aah, like salmiakki (salty licorice). Tastes terrible, but I just can’t stop eating them.

A thousand Roman paces. A pace is two steps, each about 1m, so 1mi is about 2km. The conversion from paces to meters isn’t exact, and definitions have shifted over time.

Swap files are useful if you are still on EXT4 or similar. If you’re using ZFS or BTRFS or BCacheFS, they have no benefits.

Oh, I’d only do that if the players are similarly powergaming. If they’re not it’s unfair, if they are the base game balance becomes koring. The challenge should scale to the party!

Pretty much how I DM.

Bosses have prep time. Glyph of warding can be cast on a page in a book, with trigger conditions specified by the caster. E.g. when a good-aligned creature with ≥8 int comes within 10ft of it.

Explosive runes are 5d8 damage (dex save for half) per glyph.

Nothing says it can’t be cast on more than one page.

A 50 page book with a glyph on every page means 100 dex saves for 5d8 each. Evasion is nice but you’ll fail a save eventually.

Your “friendly” neighborhood lich has had time to prepare dozens of these. That tempting library full of magical books might just be a TPK.

As a “consolation prize” at least the player gets to roll 100 d20s at once! Multiple times if they survive the first book.

DoH looks identical to normal website traffic. If it’s slow, it’s probably the DoH provider and not the ISP.

The players know that. Their characters don’t.

You mean SNI, not ESNI. ESNI is the Encrypted Server Name Indication that gets around that, though the newer ECH (Encrypted Client Hello) is better in many ways. Not all sites support either though.

Terok Nand had better data storage.

KeePass + Syncthing is pretty convenient.

Buttercup looks to be using AES-CBC with PBKDF2 and no authentication, but I only took a very brief look so I may have missed important details. That’s not secure if an attacker can alter the vault file, and PBKDF2 isn’t a great KDF to use. If you use this, you definitely need a 128-bit or higher entropy passphrase (10 Diceware words). You usually want that anyway, but using a weaker string for your master password will be less secure than you expect compared to something using a modern KDF.

That ^

Boot to the head!

I’ll second Fastmail.