Concerns Arise After Humble Bundle Redesign Compromises Security
Humble Bundle, a well-known platform for charity game bundles, has recently undergone a significant redesign, drawing both excitement and concern from its user base. Many users have reported serious flaws in security features critical to protecting their personal information following the update.
Security Vulnerabilities Detected
A major point of concern is the complete removal of two-factor authentication (2FA) options for users. According to reports on platforms such as Reddit, this crucial security measure is now inaccessible, leaving accounts vulnerable. Users have indicated that upon attempting to access their security settings, the option to add or manage 2FA is entirely missing.
- Users have noted errors that prevent them from purchasing new bundles.
- Missing authentication checks for changing passwords and email addresses raise alarms about account security.
- Attempts to change account passwords do not require knowledge of the current password.
- When changing email addresses, no verification message is sent to the original email, allowing unauthorized changes to go unchecked.
User Experience Issues
Beyond security drawbacks, the redesign has led to frustration due to the removal and alteration of familiar features. Users have pointed out that the updated interface has obscured previously available functionalities:
- Lack of differentiation between redeemed and unredeemed games, complicating library management.
- The removal of the option to stay logged in, necessitating repeated logins for accessing accounts.
- General dissatisfaction with the design aesthetic, which some users feel resembles other less favorable interfaces.
Community Reactions and Recommendations
While some users have voiced hope for a reversion to the previous design, many are significantly more concerned about the introduced security vulnerabilities. Currently, users are advised to remove any saved payment information from their Humble accounts to mitigate the risks of unauthorized access until the platform addresses these substantial issues.
As this situation develops, it remains to be seen how Humble Bundle will respond to user feedback. The company, owned by IGN, has pledged to address the situation, but users continue to express their apprehension over the recent changes.
For more details regarding the upgrade and its implications, we have reached out to Humble for further comments.
