HumbleBundle vibecoded a new website that removed MFA as a security option, Other users are reporting issues with passwords over 72 characters in length.
I was able to sign in only with my pretty weak password (because I had a second factor it would have been OK), and then change it without any kind of confirmation or verification.
If you have an account, I’d recommend setting a more complex and unique password, aliasing/masking your email, and removing any payment info and PII if you had anything stored there.
Also consider not doing business with them any further. They treated their employees like shit and then pulled this. They’re clowns.
They’ve been shit for years so this vibecoded mess isn’t surprising in the least but holy shit lmao
hey at least I was able to log in to my old ass account that I lost the 2FA for LOL
From the looks of things they seem to have hard launched the new site before finishing the necessary data migrations? Like I have seen firsthand how hard and tangled these things can be, but goddamn what a management decision to just yolo the transition partway through lmao.
Looks like is either password or one time code, not both.
The page looks awful now, thanks for the heads up.
Weird how many pages moved from passwords to enter a 6 digit number sent to you over multiple 3rd party providers for security.
improve spyware by reducing throwaway email accounts.
The login page title says ”Login - Humble Bundle - Prod”, which is just a great sign
What’s this about them treating employees like shit? Humble’s gone downhill big time, seems like there’s a good excuse to stop using them.
They still have employees? Didn’t they fire everyone?
Humble laid their employees off and replaced them with consultants a couple years ago.
Wait till they learn they don’t “need” consultants — they can just ask Claude.
Consultant often just means temp worker.
I hadn’t heard of that, it’s evil and it explains a bunch of stuff, including why they barely publish any games now.
Humble was good before the acquisition. Now it’s just trash.
Humble bundle was actually good only for the first year or so. The downwards spiral started with VC, not by acquisition (which is necessitated by the VC).
There were still good bundles after that but no longer consistently great bundles.
I remember way back in the day, I was such a fan of Wolfire. (If you don’t know the deep lore, humble bundle was made by Wolfire, an indie company best known for Lugaru and its sequel Overgrowth)
Now they’ve spent the past several years on their weird anti-steam alliance with Epic Games and not actually developing games and I just wish they had kept making games man
I’m still not sure if even the basic claim in the lawsuit holds up.
Yeah I haven’t looked that deep in it, but the vibe I got from the lawsuit hell they’ve been stuck in this whole time is that it’s not going anywhere. And idk if their involvement is a purely cynical move because Tim Sweeney promised them something or if they really are dedicating their lives to owning Steam on principle, either way it just seems like a really sad thing for a team of skilled artists to spend years of their lives on
I guess the Humble business model is largely fucked if they don’t get to sell steam keys cheaper than steam. I just don’t think that’s an antitrust case.
issues with passwords over 72 characters in length.
Rawdogging bcrypt?
Ok I thought it was Medicare For All, then I looked at the comm.
Then I thought it was Mass Effect Andromeda, then I read the body.
