iiinova — where your digital self keeps evolving

Robert Helmer

@rhelmer.org

I'm Rob Helmer, a software engineer with 20 years of experience building impactful projects and solving complex problems with code. www.rhelmer.org

Posts Replies Media

Robert Helmer @rhelmer.org · 22/03/2026

Part 2 of my series on multiplayer web games is live! Using HttpOnly + CHIPS to stop XSS and tracking while keeping subdomains seamless. I *think* it describes a reasonable CSRF mitigation, thoughts? 🔗 www.rhelmer.org/blog/stellar... #WebDev #InfoSec #WebSecurity #indiedev #gamedev

A sequence diagram showing a secure authentication flow between a User, Browser, Auth Server, and Game Server. The process begins with the User entering credentials into the Browser, which sends a POST request to the Auth Server. The Auth Server returns a "Set-Cookie auth token" to the Browser. The Browser then sends a "Join game with cookie" request to the Game Server. The Game Server validates the session with the Auth Server, receives a "Valid user ID," and confirms "Game joined" back to the Browser. A highlighted note at the bottom emphasizes: "Cookie never accessible to JavaScript."

194

Robert Helmer @rhelmer.org · 04/10/2025

Decided to learn modern C++ by building a game engine instead of Hello World. Now I have: ECS architecture, OpenGL renderer, cross-platform builds, and a working space shooter demo. Was this overkill? Yes. Would I do it again? Also yes. 🎮 www.rhelmer.org/blog/buildin... #gamedev #cpp

081