News for hackers. Stuff that matters.
Re:Humble Bundle just killed most of their security through ... by 1313ed01 on Thursday November 12, 2026 @03:39AM (#50464574)
Can someone there please just click the rollback button now and we can all forget this ever happened. I don't think that new site can be saved. The old site was fine. Just leave it like it was. I bought a bundle as recently as last month. Three bundles I think.

If they just focus on finding more fun bundles to sell and don't touch the site code again, ever, it will be fine. I have been happily buying things I usually do not need from them since Humble Indie Bundle 1.

Re:Humble Bundle just killed most of their security through ... by marisen on Thursday November 12, 2026 @03:49AM (#50464652)
That's assuming the LLM manned for rollacks
Re:Humble Bundle just killed most of their security through ... by imtringued on Thursday November 12, 2026 @04:29AM (#50464965)
This is something I don't get. The old development process was slow, but it was mostly safe and reliable.

People are rebuilding working things from scratch with AI just because they can.

AI eroded the greenfield advantage of rewriting a project from scratch because a rewrite generally meant that the code went through the fingers of the new developer. With AI that advantage is gone so you are better off incrementally improving the old code base to minimize overall maintenance costs and as a result reduce the headcount needed.

Re:Humble Bundle just killed most of their security through ... by ulrikrasmussen on Thursday November 12, 2026 @04:36AM (#50465017)
To be fair, the greenfield advantage of a complete rewrite was also overestimated and frequently just lead to ungodly amounts of wasted resources on systems that never shipped or ended up being overly complicated. See https://en.wikipedia.org/wiki/Second-system_effect

AI lowered the cost of rewriting which means that more shitty systems ship because the rewriters don't run out of money before the rewrite is canceled. But it doesn't the solve the underlying problem of the people in charge of rewriting not understanding what features in the old system were actually important and which had to go.

Re:Humble Bundle just killed most of their security through ... by Dannymetconan on Thursday November 12, 2026 @07:14AM (#50466068)
I don't think the kind of people that did zero manual testing before deploy had a robust rollback plan