News for hackers. Stuff that matters.
Re:Humble Bundle just killed most of their security through ... by brindleth on Thursday November 12, 2026 @03:24AM (#50464488)
The article doesn’t seem to provide any direct proof the new site was vibecoded? I mean, probably it was, but people were writing insecure software long before AI came along.

Without evidence, accusations like this are, ironically, just vibes-based.

Re:Humble Bundle just killed most of their security through ... by gbingles on Thursday November 12, 2026 @03:28AM (#50464509)
Yeah we just say that about anything now.
Re:Humble Bundle just killed most of their security through ... by Kwpolska on Thursday November 12, 2026 @03:47AM (#50464631)
What other reason would there be for a complete rewrite without any sort of security? They had a fully functional and secure backend, why would it require replacing just to redesign the site?
Re:Humble Bundle just killed most of their security through ... by Bishonen88 on Thursday November 12, 2026 @04:23AM (#50464916)
Incompetence. Corporate politics. Malice. Shady intent. Or a mix of some of that + AI.
Re:Humble Bundle just killed most of their security through ... by hollowturtle on Thursday November 12, 2026 @04:01AM (#50464742)
It was ok before, not perfect but more than ok and secure. The new version it is indeed vibecoded doesn't matter if with ai or not, vibecoding to me means careless and sloppiness, either it be human or not
Re:Humble Bundle just killed most of their security through ... by Keeeeeeeks on Thursday November 12, 2026 @07:16AM (#50466097)
You get regressions in design and security when you: - never documented how the old site work - never asked a good model/person to comb through the old codebase, and write a spec + PRD for how it works - ask a cheap LLM to redesign the whole website (without migrating auth, or some material % of old content)