Game Dev - Streamer 💛 Go Make Games - https://xitter.twitterapi.xyz/t.co/IfsqGOqzu8 💜 Ferret Rescue - https://xitter.twitterapi.xyz/t.co/r761eUgpXG 💛 Business: money@piratesoftware.live
All Timelines
Joined January 2016
- Tweets15.6K
- Following410
- Followers236K
- Likes53.8K
Pinned Tweet
Lots of fake copies of me out there.
These are the only official accounts.
linktr.ee/piratesoftware
Humble Bundle is suddenly not prompting for 2FA at login. The option to add or remove 2FA is also missing from account settings.
Say sike right now. @humble
It's so much worse.
xitter.twitterapi.xyz/PirateSoftware/status/…
Humble Bundle just shit the bed on the security side.
You no longer have 2FA in your login flow and 2FA doesn't appear anywhere in your settings. It's been completely removed from the website. That means your password is the only thing protecting your account now. You should always operate under the assumption that your password is compromised. That's why 2FA is so important.
Once you're logged in you can just change your password without having the original password for verification. It just immediately changes the account password to whatever you want. This means if your session is hijacked the attacker can fully own your account.
Changing your email works the same way. It asks for a verification code on the NEW email not the old one. This lets the attacker swap your email out without a single barrier. It doesn't even send an alert to the original email until after the account is tied to the new email.
This is some vibe-coded garbage.
Change your passwords immediately at the very least.
1
25
4,568
For those that don't get the magnitude of this.
You currently don't have 2FA on your Humble Bundle account. You should always operate under the assumption that your password is compromised on any website. 2FA stops attackers from getting in even if they do have that password.
It's been like this for around 5 hours.
Humble Bundle is suddenly not prompting for 2FA at login. The option to add or remove 2FA is also missing from account settings.
Say sike right now. @humble
It's so much worse.
xitter.twitterapi.xyz/PirateSoftware/status/…
Humble Bundle just shit the bed on the security side.
You no longer have 2FA in your login flow and 2FA doesn't appear anywhere in your settings. It's been completely removed from the website. That means your password is the only thing protecting your account now. You should always operate under the assumption that your password is compromised. That's why 2FA is so important.
Once you're logged in you can just change your password without having the original password for verification. It just immediately changes the account password to whatever you want. This means if your session is hijacked the attacker can fully own your account.
Changing your email works the same way. It asks for a verification code on the NEW email not the old one. This lets the attacker swap your email out without a single barrier. It doesn't even send an alert to the original email until after the account is tied to the new email.
This is some vibe-coded garbage.
Change your passwords immediately at the very least.
24
4,033
Humble Bundle just shit the bed on the security side.
You no longer have 2FA in your login flow and 2FA doesn't appear anywhere in your settings. It's been completely removed from the website. That means your password is the only thing protecting your account now. You should always operate under the assumption that your password is compromised. That's why 2FA is so important.
Once you're logged in you can just change your password without having the original password for verification. It just immediately changes the account password to whatever you want. This means if your session is hijacked the attacker can fully own your account.
Changing your email works the same way. It asks for a verification code on the NEW email not the old one. This lets the attacker swap your email out without a single barrier. It doesn't even send an alert to the original email until after the account is tied to the new email.
This is some vibe-coded garbage.
Change your passwords immediately at the very least.
Just finished the two new @OldSchoolRS quests that launched this morning. They're both great in different ways.
Getting early game Hunting off the ground was pretty rough for new players before. The new "The Birds and the Wasps" quest absolutely fixes this. It adds a hunting area right next to Varrock and gives a ton repeatable Hunting/Fletching EXP as well. The reward bag likely has oddities in the loot table that the community will need to find together. So far it's a ton of Fletching/Ranged items for early game but I've only opened ~10 of them.
The other quest "A Shell of a Friend" is grim and will make you sad. Why is Jagex so evil?
This is an awesome game and the dev is rad as well.
Had them on for the last Pirate Indie Game Show.
Definitely check this out.
🚨 CONTENT CREATOR 🚨
If you're a content creator, I'd LOVE to share a key with you!
I made Drawquarium so my kids could watch their drawings come to life. No AI art, just years of love and hard work. My very first game launches November 13!
Sign up👇
rokaplay.com/newsletter/pres…
You can watch the wigglers here!
Ad revenue from these streams directly funds it all.
ferrets.live
18
3,140
Played through the new @OldSchoolRS quest "The Writings On The Wall" and loved it. The entire quest has little tie-ins to the Zodiac Killer and his original cipher. Each of the clues was even signed with a similar symbol.
It's a new quest as of this week so go check it out.
We are closing applications for the Pirate Indie Games Show today at 6pm PST. Thank you to everyone who applied. Emails will begin this next week.
December is gonna be rad.
show.games
