I like to roll a d4.

4 - Adlib an outcome that is favorable to them, beyond all reason. With my players, sometimes this just means nothing at all happens. In these cases I’ll use anything to make it work out for them, from divine favor, to a key NPC breaking rank “I always loved you guys!”

3 - They achieve what they hoped for, and as many weird (but reasonable) side effects as I can think of also happen.

2 - As little happens as is reasonably possible. Often, with my players, that means just 6d6 fire over a 20ft radius. Often after having whatever they tried misfire first, only to have them try again.

1 - I unpack a nice handful of d12 and roll for blast radius, save DC and damage.

Modified, of course, for the situation.

Specific damage on a 2 or 1 should - like anything they couldn’t reasonably prepare for - be attention grabbing, but unlikely to be lethal. A 2 should as anticlimactic as reasonably possible.

Oh hey, thanks! I never particularly wanted any of my apps to route around the VPN, but there the option it is under Advanced, when split tunneling is enabled. Could be handy. Thanks!

If you’re interested in that level of control, it’s time to look hard at GrapheneOS. “Internet” is a permission you can grant or deny for each app, under GrapheneOS.

But I’m not aware of a way to selectively direct phone traffic through Proton VPN, at the phone. Even on GrapheneOS.

Enough skill with an expensive router could do it, but only on your home network, or only while routing all of your phone traffic back to your home network via yet another VPN.

Edit: TIL, Proton VPN supports split tunneling. Sweet! Look under Settings - Advanced - Split Tunneling - then pick your apps to include/exclude.

Edit 2: TIL DivestOS also supports “Internet” as a per app Permission. Very cool.

12d1 is the way to go.

In epic scaled games, I work around this with a “reroll at -20”. So the rogue in this case would have had about a 25% chance to recover on a DC10 check.

I also always include an in-game explanation. In this case, I would have made it a huge flashy “boon of insight” from the Paladin’s deity.

Then it’s all the more fun if the rogue actually manages the re-roll. “Dude, I even tricked your god!”

I would also RP right into it. “A voice from on high intones ‘I dunno, seems legit, to me.’”

Similarly if the rogue actually fails:

“A voice from on high intones ‘Seriously, you need to stop falling for this crap. I’m going to send you an amulet of insight or something. What’s your next stop?’”

I’ve had players have this exchange, and then the Paladin decided to ignore the rogue’s critical miss, and just roll with it.

Paladin to the rest of the party “I forget what they said exactly, but it was a very convincing argument!”

I assume you mean to check on his often they’re is the breaking changes? :)

Declarative style isn’t perfect, but it’s a massive improvement from straight bash scripting.

I think you’re looking for Ansible. Have fun!

The difference between an Anible playbook and a script, is Ansible has a ‘check’, ‘change’, ‘verify’ pattern, and is declarative (meaning that once the playbook is made, it tends to keep working on future versions of Ansible.)

Have a look at the Onyx Boox line of devices.

They run Android under the hood, so various file sync apps just work (i.e. to move books wirelessly from your own Network Attached Storage.)

But beware that the tablet versions default to a much lower screnn refresh rate than a typical ebook, since they don’t need the refresh when you’re taking notes. There’s configuration options to make them act more like an ebook reader, at the cost of some of the battery life.

A Synolgoy network attached storage device is very easy to set up to backup to AWS Glacier, and it has good apps for Android phone backup.

I don’t know how the app support is for iPhone is, though.

Yeah. It gives very strong black mage vibes! (In the best way!)

That’s awesome. Brennan has earned the right to be the DM approves meme.

I love doing this.

“Oh, right, you have that plus-one from that amulet. So twenty-eight. Yeah, that does hit.”

(Monster AC is actually 14, but I’ll let them sweat for a round or two anyway.)

You’ve clearly ridden safer subways than I have.

Come to think of it, I’m pretty sure a variant of that attack featured prominently in Final Fantasy: Advent Children.

legitimately had someone try to argue to me that Kermit the Frog was more intimidating than King Shark.

They probably owed him money. I feel bad for them. I would not want to be indebted to that ruthless aquatic muppet.

Seems like enough cash on hand to somehow get away with murder.

Good point. And it’s even less on discount Thursdays.

I, too, have searched for such a list and not found it.

I’d really like to hear from some people that have actually done this about what to do and what their experience is with grapheneos. I’m leery of spending hundreds of dollars on a phone that may or may not work as I want.

I’ve done this, here’s my takeaways:

On the install:

• The install guide is long and detailed, and it felt important to take my time and do every step exactly as it says.
• In spite of the length of the guide, I was done with my install in about 45 minutes. I spent about 30 of those minutes sipping coffee and reading on my Kindle while my phone applied updates automatically. -By the time the install finished, my feeling was “that was it? I feel like I clicked like 4 links and it did everything.”

On owning it:

• My $300 GrapheneOS Pixel 6 is substantially more responsive than my previous $1000 phone. I migrated to a 3 year old phone and if feels like a big upgrade.
• My camera opens quickly, snaps pictures quickly, and is ready to snap another picture, quickly. This shouldn’t be a big deal, but some of your with $1000 Android phones know what I’m talking about. I’ll die on the “this should never have been hard in the first place” hill. But in the meantime, the responsive camera is the most important quality of life upgrade I got from GrapheneOS.
• Installing apps from Aurora, with it’s privacy insights, was very eye-opening for me. I mention this mainly for context on my next point.
• App compatibility has not been an issue for me; but I quit using certain really invasive apps when I saw their tracking details in Aurora store. (Cough - Paramount Plus - cough)
• I’ve heard bank apps can be a challenge, but mine works perfectly. I now love GrapheneOS enough that I am realizing I will move my money if that changes.

I too, degoogled and then regoogled.

The Google Play framework service is very sandboxed on GrapheneOS. Most stuff just works, and - as long as all went to plan, which it seems to - the invasive stuff fails silently or with a harmless error message.

It’s been a better experience than I expected!

For the most part, Google has no idea what apps I’m even installing, beacuse I get free apps without login through Aurora.

For the apps that are important enough to me to purchase through Google Play, Google knows I bought and installed them. But even those are talking to GrapheneOS’ sandboxes Google Services Framework. For the most part, nothing changes in how I use those apps, beacuse the sandboxes framework drops and reports ‘success’ on unsupported framework calls, and the vast majority of apps I have used just move on.

The exception has been anything that only supports Google’s auth layer. I like Google’s auth layer, but I don’t use it anymore. So those apps I can’t use at all. I don’t expect it to work well on GrapheneOS, but I haven’t honestly tried.