Humble Bundle just killed most of their security through vibecoding

FaeGlade Plurality said: So after seeing this, I naturally changed a bunch of things on my HumbleBundle account (password, unlinked payment info, unlinked steam account). You do not get an email verification if you make any changes to your account, including security critical ones. I confirmed this with friends who did the same, they also didn't get an email. Absolute disaster, they should get their asses sued. Click to expand... Click to shrink...

An address changed on your accountAn address (email or phone number) on your account was recently changed. If you made this change, no further action is required. If you did not make this change, please contact support immediately. Click to expand... Click to shrink...

An address changed on your account

Alhazred23 said: You do get a verification code sent to your current email address when you try to change the email address, but that is the only thing I noticed in terms of verification of anything when i was changing stuff. Click to expand... Click to shrink...