News for hackers. Stuff that matters.

A comment on Humble Bundle just killed most of their security through vibecoding. Parent comment

Re:Humble Bundle just killed most of their security through ... by mattmanser on Thursday November 12, 2026 @04:31AM (#50464984)
AI loves copying existing patterns in legacy code without asking, even if they're super-dumb. It's like it reads bad code and that anchors the pattern in its thinking.

It might have been some internal testing mechanism that's been corrupted. Or if they had an existing hole the AI probably convinced itself that was what was necessary.

That's one of the disadvantages of them hiding the "thinking" output they used to cycle through, sometimes you could spot that happening.

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by oliwarner on Thursday November 12, 2026 @05:16AM (#50465279)
Yeah, not a bad shout.

That's still dumber than I've come to expect from LLMs but as others have pointed out, I'm a developer who uses LLMs as a tool, not a manager using a LLM as a developer.

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by Yoric on Thursday November 12, 2026 @08:19AM (#50466694)
> It might have been some internal testing mechanism that's been corrupted.

Yeah, I've seen so often the agent just getting rid of tests (either by removing them or by corrupting them) that it stopped being funny a long time ago.

[ Parent | on HN ]