Yahoo included their private certificate in Axis

#1

Post by amandle » Thu, May 24, 2012, 4:17 AM UTC

Yahoo included their private certificate in Axis
github.com

Re: Yahoo included their private certificate in Axis

#2

Post by wookiefeet » Thu, May 24, 2012, 5:09 AM UTC

WOOPSIE POOPSIES!

Re: Yahoo included their private certificate in Axis

#3

Post by DigitalSea » Thu, May 24, 2012, 5:15 AM UTC

I've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.

Re: Yahoo included their private certificate in Axis

#4

Post by Cushman » Thu, May 24, 2012, 5:19 AM UTC

Ouch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.

Re: Yahoo included their private certificate in Axis

#5

Post by tlrobinson » Thu, May 24, 2012, 6:00 AM UTC

https://news.ycombinator.com/item?id=4016707

Re: Yahoo included their private certificate in Axis

#6

Post by sparknlaunch12 » Thu, May 24, 2012, 6:27 AM UTC

How hard is it for Yahoo to change their certificate?

Re: Yahoo included their private certificate in Axis

#7

Post by tylermenezes » Thu, May 24, 2012, 6:30 AM UTC

Honestly, it could probably be worse. Who uses Axis, anyway?

It still looks extremely bad for Yahoo, though.

Re: Yahoo included their private certificate in Axis

#8

Post by altrego99 » Thu, May 24, 2012, 6:51 AM UTC

Looks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.

Re: Yahoo included their private certificate in Axis

#9

Post by readme » Thu, May 24, 2012, 8:39 AM UTC

Is this responsible disclosure?

Re: Yahoo included their private certificate in Axis

#10

Post by sneak » Thu, May 24, 2012, 8:54 AM UTC

readme wrote: post #9

Is this responsible disclosure?

There is no such thing as responsible disclosure.