logoalt Hacker News

Humble Bundle just killed most of their security through vibecoding

105 points • by rdmuser • today at 6:52 AM • 23 comments • view on HN

Comments

Ekaros • today at 7:55 AM

Perfect example of when rewrite is functionally worse for users and done for sake of doing it...

I wondered why I did not get email code from them for login. Then it arrive one hour later... Seems like pretty big oversight...

rozenmd • today at 7:56 AM

"A computer can never be held accountable, therefore a computer must never make a management decision"

➕ show 1 reply
aurareturn • today at 7:50 AM

Why blame vibe coding?

It's always up to the skill of the human.

➕ show 8 replies
laruss5 • today at 7:56 AM

[flagged]

xx__yy • today at 7:49 AM

Sounds like shotgun project, cheap model with low effort, at the controls of someone who doesn't know how to build software, end to end.

AI doesn't produce bad software, people do.

➕ show 5 replies
xavdid • today at 7:54 AM

Wow, that's an impressive downgrade. Not only is the site uglier (gradients, gradients everywhere!), but I could log in without needing my 2FA at all. Shame too, since I found the old Humble site pretty charming.

mococa • today at 7:54 AM

They fired their devs and put marketing people to code

dorkwood • today at 7:56 AM

[dead]

gabucino • today at 7:59 AM

>To start with, 2-factor authentication no longer exists, it does not ask for any tokens to log in, so your password is the only security on there.

i thought i'd be hearing about downsides?.. elaborate plz