News for hackers. Stuff that matters.
Re:Humble Bundle just killed most of their security through ... by mcv on Thursday November 12, 2026 @04:49AM (#50465093)
Yes, but you're not vibe coding when you ask for an authentication system. You know what you mean by an authentication system and can tell when what the AI delivers is insufficient. A vibe coder can't.

The problem with vibe coding isn't the AI, it's how people use it. It's that people with no idea of what they're doing, now think they can do what used to require an expert.

Re:Humble Bundle just killed most of their security through ... by poisonborz on Thursday November 12, 2026 @05:01AM (#50465181)
You do not code your authentication system, in 99% of cases. Take an external provider or a selfhosted OSS project.
Re:Humble Bundle just killed most of their security through ... by soco on Thursday November 12, 2026 @05:14AM (#50465255)
We're talking vibing here, not coding. And who knows what the agent will decide from fuzzy prompts, take an external provider or create a new one from scratch?
Re:Humble Bundle just killed most of their security through ... by oliwarner on Thursday November 12, 2026 @05:12AM (#50465247)
That's fair, I do, but it's alien to me that they wouldn't at least start with the old system as a starting point or another system, or that the LLM wouldn't make that link.

To get what tfa is describing, you'd need to explicitly request a dumbed down system, use a really shitty LLM, or both.

Honestly I'd sooner believe this is the result of a highschooler than a LLM.

Re:Humble Bundle just killed most of their security through ... by mcv on Thursday November 12, 2026 @05:24AM (#50465325)
Oh, absolutely. Why even try to fix what wasn't broken, and 'fix' it in a way that's likely to break it? It betrays a deep misunderstanding of what the site does and is supposed to do.

I've got no problem with people vibe coding a personal project or a prototype or something, but when you've got code in production, that a business depends on, you've got to be a massive idiot to blindly start rewriting it in this way.

Re:Humble Bundle just killed most of their security through ... by syshyk on Thursday November 12, 2026 @06:58AM (#50465911)
I think they wanted a site refresh, and instead of doing it visually and/or adding features at the same time (people do this still, I think its okay), they likely thought that due to AI assistance it would be easy to actually start from scratch.

Not sure why you couldn't take the "its easy with AI" path and actually refresh the current codebase.

This is hearsay mind you, I don't know how much of their old site is there...

Re:Humble Bundle just killed most of their security through ... by 0gs on Thursday November 12, 2026 @06:58AM (#50465915)
the part that is weird to me: nobody really knows how much they know about designing a system in plain english until they try it. i would not have thought i knew enough words to be dangerous (self-complimentary), but i clearly do. i still think of myself as a know-nothing vibe coder, and the only way to prove it one way or the other would basically be to go back to college. lol