Humble Bundle just killed most of their security through vibecoding

Re:Humble Bundle just killed most of their security through ... by halflife on Thursday November 12, 2026 @04:02AM (#50464749)

I just used Claude opus 5 high to refactor our permissions model to an hierarchical one. In the validation function, if a part of a permission grant was missing in the hierarchy, claude happily granted them approval instead of rejecting, fail open for permissions.

Always review the code an LLM creates.

(When I told Claude that this is very bad, its reply was “Good catch!”)

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by postepowanieadm on Thursday November 12, 2026 @06:13AM (#50465618)

That's the problem: it's a possible code, not the best or even the right one.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by devilsdata on Thursday November 12, 2026 @02:26PM (#50472821)

You forgot to add “make no mistakes”, obviously

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by halflife on Friday November 13, 2026 @01:31PM (#50487726)

This is my system prompt

[ Parent | on HN ]