News for hackers. Stuff that matters.
Re:Humble Bundle just killed most of their security through ... by origini on Thursday November 12, 2026 @03:33AM (#50464539)
At least 2fa got removed. Man i hate this, every single shit wants 2fa.

Let me do 2fa when i have to pay not to just login to services i care very little.

And yes blizzard my wow account is not worth anything either.

Re:Humble Bundle just killed most of their security through ... by syshyk on Thursday November 12, 2026 @04:05AM (#50464768)
I wholly agree with this. People already took shortcuts with passwords, excessive MFA causes the same _need_ from people to flow through it, and we see it everywhere already (addons to autofill MFA etc).
Re:Humble Bundle just killed most of their security through ... by crote on Thursday November 12, 2026 @04:09AM (#50464807)
> And yes blizzard my wow account is not worth anything either.

Plenty of other players would strongly disagree. Blizzard pushes so strongly for 2FA because the support costs associated with people complaining about their WoW accounts getting compromised and drained are massive. If every player were to just shrug and start over from scratch, Blizzard wouldn't have bothered with it.

Re:Humble Bundle just killed most of their security through ... by origini on Thursday November 12, 2026 @07:47AM (#50466361)
There is a differecen between Blizzard adding it as an optional feature and forcing it onto me.
Re:Humble Bundle just killed most of their security through ... by m000 on Thursday November 12, 2026 @04:34AM (#50465010)
I have mixed feelings about the removal, mostly because their 2FA sucked anyway.

IIRC it was only via email, which is a PITA. I don't want to switch to my email every time I login.

Re:Humble Bundle just killed most of their security through ... by latexr on Thursday November 12, 2026 @09:02AM (#50467232)
> IIRC it was only via email, which is a PITA.

Nope, it was also the regular time-based ones.

Re:Humble Bundle just killed most of their security through ... by venzaspa on Thursday November 12, 2026 @04:43AM (#50465064)
For a lot of services I'd rather just get a 'magic' link in my email and not have to deal with a password at all. I've got good email security so it's worth hanging a few lesser services off of that.
Re:Humble Bundle just killed most of their security through ... by Keeeeeeeks on Thursday November 12, 2026 @07:20AM (#50466139)
> And yes blizzard my wow account is not worth anything either.

You’d be surprised; a friend of mine had a battle.net account under one of his emails, because apparently his email was used to make a WoW account in college and was banned. He had never played wow before, contacted support, and they didn’t say what happened but revoked the ban