Humble Bundle just killed most of their security through vibecoding

Re:Humble Bundle just killed most of their security through ... by voidUpdate on Thursday November 12, 2026 @03:13AM (#50464400)

Because if a human was to program it, they might have stopped for a second and thought "Is this really a good idea?" whereas the LLM just goes "You're absolutely right! Here's some updates to the security code:"

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by user43928 on Thursday November 12, 2026 @03:37AM (#50464564)

I don't think it does, I doubt SOTA models are going to sign off on this.

On the other hand, people incompetent enough to ship this couldn't have produced a working website if they had to handwrite the code, so in that sense LLMs are at fault.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by FranzFerdiNaN on Thursday November 12, 2026 @03:49AM (#50464648)

The human who thought pressing publish on this wouldn’t have thought stopped to think about security even if it was handmade.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by alwa on Thursday November 12, 2026 @04:12AM (#50464824)

My SOTA LLM spends disturbingly much time stopping me and telling me to shape up and do things right, especially on the security/legal/privacy side. Speaking from recent experience, it would NOT have anything CLOSE to this—I’d expect it to literally refuse to ship.

Whether that says more about me or about LLMs These Days, I’m not sure…

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by voidUpdate on Thursday November 12, 2026 @04:48AM (#50465087)

Are they programming with a SOTA model?

[ Parent | on HN ]