people are talking about 2FA not being available on humble bundle anymore but Spy Cards Online has never had 2FA and like half of the accounts on there still have their original "changeme" with four random digits passwords
(it tracks how many times the password has been changed; passwords are bcrypted)
this is the entire admin panel for account management btw