Humble Bundle redesign loses two-factor authentication option, Kotaku reports

A new look, fewer safeguards: Kotaku reports Humble Bundle’s redesign removed the two-factor authentication option. Its testing also found logged-in users could change passwords without the current password and change email addresses without verification sent to the old address. Kotaku recommends removing saved payment information for now and says it has asked Humble for comment.