GoKawiilHumble Bundle redesign removes two-factor authentication and password confirmations
Humble Bundle launched a new website that reportedly eliminated two-factor authentication, allowing accounts to be secured by password alone. Users can also change their password or email address without re-entering their current password, and the site allegedly reinstated one-click payments despite that practice being illegal in some jurisdictions. The findings were surfaced by an IT security professional streaming live and corroborated on a Reddit thread; Humble Bundle has not yet publicly responded.