Humble Bundle just completely killed most of their security through vibecoding
forums.spacebattles.com
Humblebundle just rolled out their brand new website today, and they basically took their entire security setup out behind the shed and filled it full of lead. To start with, 2-factor authentication no longer exists, it does not ask for any tokens to log in, so your password is the only...
  • tmyakal@infosec.pubEnglish
    3·
    12 hours ago

    So a link to a message board with a link to another forum, and the gripe seems to be the loss of two-factor authentication?

    I went to Humble’s site and logged in because, yeah, if there are security concerns, I don’t want my info on there. First thing I hit was a two-factor authentication request.

    Is there an actual source on any of this, or is it just nerd gossip?

  • Shifty Eyes@leminal.spaceEnglish
    12·
    7 hours ago

    You can request account deletion here: support.humblebundle.com/hc/en-us/requests/new

    Edit: Thank you for reaching out to us in regards to your account deletion and data removal request.

    In this particular case, we ask that you please submit a Data Subject Request at our DSAR Privacy Portal: https://dsar.humblebundle.com/

    This will ensure proper processing and tracking of your request. A request using this form will result in the deletion of your account and all data associated with it in our system.

    If we delete all of your personal data, it will remove your email address and personal information from your order history.