Humble Bundle just killed most of their security through vibecoding

Re:Humble Bundle just killed most of their security through ... by oliwarner on Thursday November 12, 2026 @05:12AM (#50465247)

That's fair, I do, but it's alien to me that they wouldn't at least start with the old system as a starting point or another system, or that the LLM wouldn't make that link.

To get what tfa is describing, you'd need to explicitly request a dumbed down system, use a really shitty LLM, or both.

Honestly I'd sooner believe this is the result of a highschooler than a LLM.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by mcv on Thursday November 12, 2026 @05:24AM (#50465325)

Oh, absolutely. Why even try to fix what wasn't broken, and 'fix' it in a way that's likely to break it? It betrays a deep misunderstanding of what the site does and is supposed to do.

I've got no problem with people vibe coding a personal project or a prototype or something, but when you've got code in production, that a business depends on, you've got to be a massive idiot to blindly start rewriting it in this way.

[ Parent | on HN ]

Re:Humble Bundle just killed most of their security through ... by syshyk on Thursday November 12, 2026 @06:58AM (#50465911)

I think they wanted a site refresh, and instead of doing it visually and/or adding features at the same time (people do this still, I think its okay), they likely thought that due to AI assistance it would be easy to actually start from scratch.

Not sure why you couldn't take the "its easy with AI" path and actually refresh the current codebase.

This is hearsay mind you, I don't know how much of their old site is there...

[ Parent | on HN ]