News for hackers. Stuff that matters.

A comment on Humble Bundle just killed most of their security through vibecoding.

Re:Humble Bundle just killed most of their security through ... by londons_explore on Thursday November 12, 2026 @03:59AM (#50464733)
> managed to fuck up so bad that they have one-click payments enabled (which is illegal

Since when are one click payments illegal? Amazon's one-click payment patent expired in 2017

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by lptome on Thursday November 12, 2026 @04:03AM (#50464759)
One-click payments are not illegal in themselves, but the EU requires that online purchases go through an explicit Checkout Confirmation screen. From what others have said on this thread, it appears this is the step that Humble Bundle skips.
[ Parent | on HN ]