Humble Bundle just killed most of their security through vibecoding

Re:Humble Bundle just killed most of their security through ... by dtech on Thursday November 12, 2026 @04:16AM (#50464853)

> You can also change your password without confirmation - you don't need to either enter the previous password or double-enter the new password.

This seems to be mostly people who don't know what they are doing? I'd any model would default to requiring this since it's pretty much the default everywhere.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by Jolter on Thursday November 12, 2026 @04:23AM (#50464912)

If they asked Fable (or Opus?) to build this, for sure it would not mess up like that. Maybe they used something cheaper?

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by rrcrsc on Thursday November 12, 2026 @04:29AM (#50464972)

My experience with Opus 5.5 is that, it wouldn't, unless there is a framework that guides them to do it. Most of the times if I don't instruct him to do something more complex, it usually avoids it.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by bigstrat2003 on Thursday November 12, 2026 @03:24PM (#50473662)

That's hogwash. It doesn't matter what model you use, they all will create crappy software unless you are involved sanity checking everything they do.

[ Parent | on HN ]