Re:Humble Bundle just killed most of their security through ...
by dofm on Thursday November 12, 2026 @04:26AM
(#50464944)
The flow/interaction of changing passwords and email addresses is somehow a bit of a pickle for people to get their head around.
In general I think it is obvious that logged-in users must need their password to change their email address, and forgot-password users must need access to their email address to change their password.
I would be a little surprised if any coding-focussed AI, frontier or otherwise, didn't offer that by default if not prompted, but I will have to test this now with the local models I use — has anyone else?
But for some reason not everyone agrees re: the first of these.
In general I think it is obvious that logged-in users must need their password to change their email address, and forgot-password users must need access to their email address to change their password.
I would be a little surprised if any coding-focussed AI, frontier or otherwise, didn't offer that by default if not prompted, but I will have to test this now with the local models I use — has anyone else?
But for some reason not everyone agrees re: the first of these.