Cursebinder (5e Feat)

Cursebinder

Prerequisites: Wisdom 13 or higher
Extensive studies of curses has shown you how to control them in certain ways. You gain the following benefits:

You can cast Bestow Curse on yourself.
As a bonus action, you can share any curse or madness effect you suffer from with the target. The target must succeed on a DC 15 Wisdom check or suffer from an exact copy of your curse or madness. The effect stops if the target falls unconscious, the curse or madness of the caster ends, the caster takes a short or long rest, or the curse or madness gets removed using spells. This feat can be used twice, after which you need to finish a long rest before you can use it again.

Back to Main Page → 5e Homebrew → Feats

gollark: A search query which returns lots of results is going to take longer than one which returns none, mostly, thus you have access to some data you shouldn't.

gollark: For example, send a request to `https://interweb.site/search-some-private-data?query=thing` using a form or `img` or `script` or whatever, and see how long it takes (using `onload`/`onerror` handlers and such).

gollark: The timing attacks thing: since you can send GET requests to domains you probably shouldn't be able to, and time how long they take, you can infer some data you shouldn't be able to from other domains.

gollark: It is not okay, it is bees.

gollark: Because you can access cross-domain scripts and images without explicit optin by the site they're from, guess what? TIMING ATTACKS, *and* you can check whether there's an image or not at some arbitrary URL because while CORS weirdness won't let your code read the *content* of an image you include with `<img>` unless the site it's from opts in, you can check the width/height and whether it loaded or not.

This article is issued from Dandwiki. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.