Humble Bundle, the PC storefront behind varied charity recreation bundles, has been up to date with what seems to be an all-new vibe-coded redesign, and it appears to be extraordinarily flawed. As just a few folks have famous, the replace seems to have stripped the location of assorted security measures that would put person accounts and saved bank card info in danger.
Initially found by users on Reddit, the replace has completely eliminated the choice for two-factor authentication—which seems to be true for all customers: when logging into my very own account, the selection so as to add or take away the characteristic is completely lacking below safety settings. Individuals are reporting myriad different points, together with errors preventing their purchasing new bundles. Numerous commonplace security measures are lacking following the brand new replace: there are no authentication checks when changing passwords or email addresses, doubtlessly making it simpler for anybody to realize management of an account with no person’s permission. If logged in you’ll be able to merely enter a brand new password with out having to know the present one. Moreover, when trying to vary your electronic mail addresses, no verification is distributed to the previous electronic mail tackle, with info solely being directed in direction of the newly-inputted electronic mail account. We’ve examined this too, and extremely it’s the case.
Past safety points, many have complained a couple of host of options beforehand on the location being eliminated or obfuscated within the shift to “vibe-coded brainrot.” Some have observed that there’s no longer differentiation between redeemed and unredeemed games and codes, making it more durable for customers with giant libraries to kind by means of their buy historical past and discover unclaimed video games. There’s additionally no method to stay logged-in, forcing customers to log in each time they entry their library. Others merely dislike the brand new design as showing reminiscent of other Claude interfaces.
Although some are hoping for a return to the previous design, many are extra notably involved by the safety points launched with this replace. For now, it’s really helpful to take away any cost info saved to your Humble account in case of unauthorized entry, a minimum of till these points are resolved. Hopefully that received’t take too lengthy. It’s not like that is the primary time a vibecoded redesign hasn’t turned out quite how the developers had hoped.
We’ve reached out to Humble, owned by IGN, to ask for remark.