How to rate a CVSS score for a vulnerability on an identity provider

I’m having difficulty to rate a CVSS for an Identity Provider. Imagine you have a vulnerability where you can bypass an authentication mecanisme.

How would you rate :

  • Confidentiality (C)
  • Integrity (I)
  • Availability (A)

as you don’t how with which system it will be connected ?

The scope is changing, but I can’t just asume the worst scenario, it will just raise the score unnecessarily.

In a DAG, finding the path with the highest score

Given a directed, acyclic graph in which each node has an assigned integer score, what is a fast way of finding the path from a start and end vertex with the highest cumulative score? I thought of a DFS approach in which we start at the end and run the graph in the reverse way, saving at each node the best cumulative score attainable. To print the results, we start at the first node and greedily pick the next node with the highest cumulative score. However, I don’t think this is the best way as we might be traversing the same paths a lot of times if we are given an unfriendly graph. Is there a better way of doing this?

Skill Base Ability Score Changing Diplomacy from Charisma to Intelligence

I’m not sure if my google-fu is just off tonight or if there’s a way to change the 3.X/Pathfinder skill Diplomacy from being a Charisma based Skill to an Intelligence based skill.

I’d prefer 3.X (including sources like Kingdoms of Kalamar) and Pathfinder to be open… as well as a few other not so specific sources like Green Ronin press, or Book of Erotic Fantasy, etc…

I’m trying not to homebrew something myself, or to at least use outher sources as a reference. I’ve already looked at the X to Y reference, but didn’t find anything for changing Diplomacy form a Charisma based skill to Intelligence…

Are there any larger implications of allowing a variant rule Ability Score Improvement/Feats in a multi-classing campaign? [duplicate]

Are there any larger implications of allowing a variant rule Ability Score Improvement/Feats in a multi-classing campaign?

In one campaign we have all multi-class players. There has been a frustration about having to take a 4th or 8th level in a class for the sole purpose of having access to an Ability Score Improvement (ASI) or a Feat.

I want to suggest we have a character level progression system instead of class, when it comes to ability score improvements and feats. This seems simple enough. The majority of classes get an ASI or feat at levels 4, 8, 12, 16 and 19, with the exception of a Fighter who also gets this at levels 6 and 15.

The variant rule would be that a PC gets the option of an ASI/feat when it reaches character levels: 4, 8, 12, 16 and 19. If the player chooses to develop into the Fighter class, then that PC would get an ASI/feat upon reaching Fighter level 6 and 14.

There is a similar mechanic with cantrips for mult-classing players, where the upgrades depend on overall character level, rather than class level (PHB, p.164).

Variant Rule: Ability Score Improvement, or Feat

When you reach 4th level on your overall character level, and again at 8th, 12th, 16th, and 19th level, you can increase one ability score of your choice by 2, or you can increase two ability scores of your choice by 1. As normal, you can’t increase an ability score above 20 using this feature. The increase is based on your character level, not your level in a particular class. Using the optional feats rule, you can forgo taking the Ability Score Improvement feature and take a feat of your choice instead.

In addition, if you train as a Fighter, you get an Ability Score Improvement at upon reaching 6th and 14th level in that class.

Would this create any great unbalance? I can’t see it, but I might be missing something.

How to save javascript high score to usermeta

I built a simple addition math game for my son using javascript so he can practice his math facts. Basically, he has 90 seconds to answer as many questions correctly as possible.

I want to be able to save and track his high scores using the usermeta table, but I am having trouble figuring it out. I know that I need to use this function:

update_user_meta( get_current_user_id(), 'high_score', $  meta_value); 

but I cannot determine how to get my “var highScore” from Javascript into the PHP $ meta_value. I also need to figure out a hook or something that will trigger the function once the game is over.

Does armor proficiency from class also give the Ability Score increase from the proficiency feat?

Old school RPer coming back after long gaming hiatus and new to D&D 5e. Liking what I see, and happy to be rid of ThAC0, lol. I’m pretty sure I already know the answer to what I’m about to ask, but figure I’d ask anyways to make sure I didn’t miss something in the new system. Sorry if this is clearer to others or was addressed previously.

As I’m reading it seems feats are a little different now and fewer and further between when leveling, so I’m guessing they’re more valuable than they used to be. Going through the feats list I noticed that a lot of the feats also give an Ability Score increase and I have a question about those increases. (Example: Moderately Armored feat gives proficiency in medium armor and also increases STR or DEX by 1.)

IRC in the old system if you were proficient in an armor type you effectively had the armor feat for it. My question is, does a class in D&D 5e that starts with proficiency in medium armor have the Moderately Armored feat and get the Ability Score increase from above example? Or is the feat totally separate and they can just wear the armor but don’t get the Ability Score increase unless they take the feat?

How to determine Sender Score IP to look up if straight query fails?

I’m checking up on my email set-up and came across Sender Score as part of my research and tests.

We are sending email through Outlook’s mail server. Our original mailfrom domain is If I put that into Sender Score, I get “no data available”.

The DKIM records are validated from That domain again doesn’t have any data. However, it shows around 300 related sending domains, like which do give you a sender score for some IPs if queried. Why does this not work for our domain? Are we not sending enough emails?

From the email headers, I can find that client-ip= Is that the correct IP to put into the query field? Is there another way to discover sending IPs that doesn’t require looking up email headers? For example, checking SPF records? If so, how do I do it?

How do ability score improvements improve modifiers?

First time player in a group figuring out things as we all go.

I just hit level four as a Ranger, and I get to improve one ability score of my choice by 2, or I can increase two ability scores of my choice by 1.

My first thought was Strength, as I’ve been rocking a score of 11 with a mod of +0 so far. But I read that Rangers use (wisdom mod + 10) for their spell casting modifier. Currently my wisdom is 13, with a mod of +1. If I increase either STR or WIS, will the modifier increase as well? How and why?

A Monk in our party went from 9 CON to 11 during their ability score improvement, and by doing so their modifier went from −1 to 0.

We’re all pretty new, so between eight people we’re currently sharing one book, and all trying to locate our own copies for later campaigns. That’s making it… inefficient for us to learn these things quickly.

Is there any way to improve ability score without items, only with spells or class features?

I found a few, but they are all bad, like true Polymorph to improve ability scores (but I lose class features), does someone know any way to improve ability scores without losing class features, and without using magical items, only spells and class shenanigans? temporary and permanent increases are welcome my objective is improve warlock damage from lifedrinker