Is the End-To-End Encryption (E2EE) of Joplin (notes app) secure enough for public Git repo?

Because privacytools.io recommends Joplin I am switching my notes to it. I add the text files to Git, and wonder if I can also use a public Repo and/or a cloud hosted Git server?

I will paste sensitive info like API tokens and passwords into the notes.

I enabled About End-To-End Encryption (E2EE)🔗 / docs with very strong pass (in local KeePassXC) and file synchronisation to a Git repo.

Encrypted data is encoded to ASCII because encryption/decryption functions in React Native can only deal with strings. So for compatibility with all the apps we need to use the lowest common denominator.

Too complicated for me.

DDOS attack mitigation – enough to analyse only GET/POST requests?

I am developing a DOS attack recognition module for application layer requests. The application has a backend consisting several APIs. They all are connected through an API gateway(developed in Nodejs). Every request is recorded to a database and another server (written in python-Flask) analyses the number of GET/POST requests for every 20 seconds and calculate the entropy of the incoming requests and block any suspicious IPs based on the entropy value.

My question is, In order to defend from DOS attacks, do I have to consider other types of TCP packets other than HTTP’s (ex: ICMP).

My backend APIs doesn’t allow any user to continue without logging in. In that case is it worth developing the DOS attack recognition module.

Architecture of the application

The research paper: https://www.sciencedirect.com/science/article/pii/S1877050915005086

Is changing pitch enough for anonymizing a person’s voice?

In every TV program where there’s a person that wants to remain anonymous, they change their voice in a way that to me sounds like a simple increase or decrease in pitch (frequencies). What I’m wondering is:

  • is the usual anonymizing method actually based on a simple change in pitch, or is it a more complex transformation that most TVs / media / etc. are using?
  • is a simple change in pitch enough to make it impossible, or very hard anyway, to recover the original voice? I would think that if a voice has been changed to have a higher pitch, by lowering the pitch I might try to get the original voice, but I’m not sure how hard or reliable it could be.

Note that I’m just talking about the voice quality, not about other features that of course could immediately deanonymize a person (like accent, dialect, personal vocabulary and slang, etc.)

is iptable whitelisting secure enough in AWS

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other’s IP.

Question: is whitelisting IP secure enough to ensure the identity of the request? Or it’s actually possible for a hacker server within the same data center to spoof IP, thus foolinga me thinking it’s one of my own servers.

Is testing for all executables without considering any files in the system is enough for deducing whether the system is infected with malware?

I came to know that the malicious activities will be carried out only by a software(program) whereas the malicious files(data to the softwares installed in the system) can’t perform the malicious activities directly by themselves but they can responsible for bringing those malicious softwares to the system( say like steganography).Hence those softwares also must be installed ( automatically or manually) before performing their activity.

If this is true scanning for malware in softwares before they get installed( triggered manually or automatically) is enough to say that the system is 100% secure(considering that our detector is ideally 100%accurate)?

What is the lowest level that an adventuring party can safely make enough money to take care of a city-state?

Lets say that a party has recently decided to retire from adventuring to focus their efforts in caring for a city-state in need of benefactors. I want to know what the lowest level a party can be and still safely make enough money to provide the required financial support to care for a city-state’s population, without their risking life or limb adventuring.

This isn’t an easy question since the economy of 3.5 is so screwed up that it’s difficult to determine how much a gold piece is worth, much less how many it takes to equal a nations GDP. So Let’s be a bit more exact on what I mean. Let’s say the party is in charge of a City-State the size of Rome, with a population of 35,000. They want to generously provide for it’s citizens by ensuring that each and every person can live a wealthy lifestyle, which costs 50gp/week/person. That means they need to provide 1,750,000 gp/week.

The adventuring party consists of 5 members, all at or below the party level you chose for your answer, of whatever classes you deem appropriate. The party can work any ‘safe’ job necessary to help earn the income required. At the time of their retirement they have at their disposal an amount of money expected for a party of their level, based off of wealth/level guidelines, to spend on purchasing items or equipment which would assist in providing for the City State.

If necessary the party can take up to a month’s worth of time, starting at the moment of retirement, to prepare for providing for the city. This could be spent building equipment, training underlings, or saving up money for a large purchase; whatever will help them to best provide for their city.

The lucky members of the city are being cared for without being required to earn the support, meaning they can not be utilized as part of the parties money making scheme. However, the party can employ any underlings or hirelings they would otherwise have access to.

Any solution must be sustainable long term, at least until the original party grows too old to continue providing for the city. Bonus points for minimizing cheese factor (though I’m open to answers with some low degree cheese) or for not requiring every member of the party to be equal to the total party level

Are those changes enough to save the Kineticist?

I’ve been toying with the idea of making a kineticist for a bit, now. The class is quite flavorful, with some interesting options and a nice set of utility.

…That said, its core sucks.

Like, really sucks.

While it has a nice group of stuff to do, most of its abilities are locked behind Burn costs. Burn, on itself, is a conceptually interesting idea: you cause some damage to yourself in exchange to do bigger, greater stuff. However, the amount of damage the kineticist takes is, honestly, ridiculous:

At 1st level, a kineticist can overexert herself to channel more power than normal, pushing past the limit of what is safe for her body by accepting burn. Some of her wild talents allow her to accept burn in exchange for a greater effect, while others require her to accept a certain amount of burn to use that talent at all. For each point of burn she accepts, a kineticist takes 1 point of nonlethal damage per character level.

and

A kineticist can’t choose to accept burn if it would put her total number of points of burn higher than 3 + her Constitution modifier (though she can be forced to accept more burn from a source outside her control).

Emphasis mine.

This mechanic makes it so that the Kineticist can’t really contribute that often in meaningful ways in combat by doing the coolest thing in her kit – blasting – without getting herself really close to dropping unconscious at the first lucky attack that manages to land. Plus, even if the Kineticist has a hefty HP pool and can handle all that damage without issues, the number of Burn points it can take is limited by that other clause (3 + Cons mod), which further hinders its usefulness.

So, I decided to do some changes – the fewer the better – to it, in hopes of pushing it to the goldylocks Tier 3. So far, those are the changes I’m thinking in doing:

Take away the “per level” clause.

For each point of burn she accepts, a kineticist takes 1 point of nonlethal damage per character level.

Burn was theoretically a mechanic introduced to keep the kineticist in check and preventing it from going overboard. This class, however, isn’t that strong to begin with, so I think that ‘nerfing’ Burn won’t make it too overpowered.

Secondly, just remove the entire con-based limitation.

A kineticist can’t choose to accept burn if it would put her total number of points of burn higher than 3 + her Constitution modifier (though she can be forced to accept more burn from a source outside her control)

This limitation makes no sense. Other classes can use their options several times per day, or have several different options to pick from. The Kineticist has a single pool of resource as it is, and it is far too limited to provide good gameplay. This needs to go.

Third, change how Gather Power works. Instead of offering a discount of Burn costs…

Gathering power in this way allows the kineticist to reduce the total burn cost of a blast wild talent she uses in the same round by 1 point. The kineticist can instead gather power for 1 full round in order to reduce the total burn cost of a blast wild talent used on her next turn by 2 points (to a minimum of 0 points). If she does so, she can also gather power as a move action during her next turn to reduce the burn cost by a total of 3 points.

…Make it so that Gather Power gives the Kineticist a nice (and much needed) damage buff:

Gathering Power in this way makes the Kineticist Empowered for a number of rounds equal 3 + its Con modifier. While Empowered, the Kineticist’s adds +1 damage to the damage of her Kinetic Blast, plus +1 for every 2 levels above beyond the 1st. The kineticist can instead gather power for 1 full round in order to increase the damage of her kinetic blast by 1d6, plus +1d6 for every 2 levels beyond the first.

I’m also thinking in bumping the Kineticist skills to 6 + int per level and giving it more or less the same class skill list the Magus has, but I’m not sure if this is needed.

Are these changes reasonable? Are they enough to push the Kineticist to Tier 3?

I am trying to make a homebrew campaign. I have been trying to brainstorm the idea for the start. Is this good enough?

The player’s characters were hired by Tulmund Bilsh, a silk merchant from Alablast, a diverse town which also happens to be the player character’s home town, to help escort him and his goods to a primarily human city, Vern, and will pay the players once the journey has been completed.

They begin in a tavern in a small swamp village named Stillwater, where they plan to rest and stay the night. Right before they hit the hay, though, the village is attacked by a tribe of lizardfolk, and Tulmund disappears during the attack. With enough questioning of the locals, the players will find out that lizardfolk in this region are nearing extinction, and they lurk in the ruins of a once proud city, the only building intact being a temple.

Assuming the players still want their pay, they will assault the temple, and fight their way through brainwashed villagers, strange constructs and a few lizardfolk sprinkled in. They find a multitude of cells along their way, but all of them empty or containing corpses, none of which are that of the silk merchant’s. They finally fight their way into a large room with an altar at the center, with a strange blue orb sitting on a pedestal. They find the silk merchant being forced to his knees, facing towards the orb by two brainwashed villagers as a blue mist begins to emit from the orb and make it’s way towards the merchant, this is presumably the way the lizardfolk brainwash people. A robed lizardfolk stands behind the altar, chanting and the players will engage combat with two constructs, some lizardfolk and some other brainwashed people.

If the players take out the ones holding Tulmund, the orb is taken off the pedestal or interrupt the robed lizardfolk, Tulmund will not be brainwashed. If the orb is taken off the pedestal, the altar will open and a shadowy aberration will begin to rise from the altar and the players will have to get 13+ on a wisdom saving throw or be inflicted with Crown of Madness.

Yes, I am aware that this is a sloppy mess and does require more finer details, but this is the general idea I had to start out my campaign without it being a basic “you start in a tavern” kind of deal.