Humble Bundle just killed most of their security through vibecoding

Re:Humble Bundle just killed most of their security through ... by geraneum on Thursday November 12, 2026 @03:40AM (#50464580)

It’s the person’s fault who says you don’t need to review/read/understand the code. “2fa? that’s just gobbledygook”.

I doubt you have to fight anything to get there.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by forgetfreeman on Thursday November 12, 2026 @03:55AM (#50464700)

Nah. Pre-AI you'd never make it deep enough into a project to actually ship with this level of incompetence.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by geraneum on Thursday November 12, 2026 @04:05AM (#50464767)

Then you’d be surprised what the hype is doing to people.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by UqWBcuFx6NV4r on Thursday November 12, 2026 @04:20AM (#50464888)

This just simply isn’t true. How short is your memory? Bad software, AND bad software of this nature, existed in plentiful quantities before “AI”.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by forgetfreeman on Thursday November 12, 2026 @11:45AM (#50470229)

No. This isn't "bad software". This is Code Bootcamp 2nd semester lab levels of incompetent. Most of the security lessons this product ignores were known (and solved) 20 years ago. The last time I saw a website in the wild that fell down this badly on basic user account security it was written in Perl.

[ Parent | on HN ]