Why Web Sessions Are Locked to One Device and Hard to Transfer

·1 views

A blog post on Earendil.com explores the concept of session portability on the web. Web sessions are typically tied to a specific browser or device, making them difficult or impossible to transfer. The author examines the technical and security reasons behind this limitation. The piece raises questions about whether users should have more control over their own authenticated sessions. The article has gained some attention on Hacker News, sparking interest in the topic of session management.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Clean Architecture Explained: Key Principles and How to Implement Them

Clean Architecture is a software design philosophy popularized by Robert C. Martin that organizes code into concentric layers, with dependencies always pointing inward toward core business logic. The approach emphasizes keeping business rules independent of frameworks, databases, user interfaces, and external services. Code is structured across distinct layers — entities, use cases, interface adapters, and frameworks — each with a clearly defined responsibility. This separation improves testability, maintainability, and flexibility, allowing developers to swap out infrastructure components without altering core logic. Developers are advised to start simple, use interfaces at inner layers, and avoid common pitfalls such as mixing business logic with infrastructure or creating unnecessary layers in small projects.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Podium Leaderboard Benchmarks Reveal Real Cost of Fair Tie-Breaking Logic

The Podium team, developers of a Redis-backed leaderboard system for games and competitive apps, has published detailed benchmark results after redesigning how tied player scores are handled. The updated system uses a Lua script, a per-leaderboard sequence counter, and dual sorted sets to ensure deterministic, fair ordering when players share the same score. To measure the performance impact honestly, engineers built two benchmark layers testing five distinct workloads — including inserts, score changes, unchanged submissions, and rank reads. Results were described as reassuring in some areas but uncomfortable in at least one, with the team noting that a faster design is not automatically acceptable if it fails behavioral correctness checks. The full benchmark harness and methodology have been made publicly available alongside the findings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Podium Forces Redis Cluster to Handle Leaderboard Writes Atomically

Redis Cluster distributes keys across 16,384 hash slots by default, which can scatter related leaderboard data across different nodes and break atomic Lua script execution. Podium, an open-source Redis-backed leaderboard engine for games, solves this by using Redis Cluster hash tags to ensure all keys for a single leaderboard land on the same node. The system URL-safe-base64-encodes each leaderboard ID and embeds it as a hash tag in every related key, including score indexes, member mappings, and tie-break sequences. This co-location allows a single Lua script to atomically update all related state — allocating tie-break sequences, writing indexes, and returning a final rank — without risking a CROSSSLOT error. The trade-off is that an individual leaderboard cannot itself be sharded across multiple nodes, meaning Redis Cluster provides dataset distribution but not intra-leaderboard horizontal scaling.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Podium Fixes Redis Leaderboard Tie-Breaking With Atomic Lua Sequences

Redis sorted sets break score ties using lexicographic ordering, which is deterministic but not meaningful to players or game designers. Podium, an open-source Redis-backed leaderboard service, addresses this by assigning a unique ordering token whenever a player reaches a new score. Common approaches like millisecond timestamps and floating-point score packing were ruled out due to clock skew, concurrency collisions, and IEEE 754 precision limits. Instead, Podium uses an atomic Lua script to decrement a per-leaderboard counter starting at the maximum signed 64-bit integer, generating tokens that naturally preserve first-arrival order under concurrent writes. The encoded token is stored as an internal member name mapped to the public player ID, ensuring correct removal and re-insertion when scores change.

0 comments Read more at DEV Community