Yahoo included their private certificate in Axis

by amandle • 14 years ago

79 16 14 years ago

wookiefeet• 14 years ago

WOOPSIE POOPSIES!

DigitalSea• 14 years ago

I've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.

Cushman• 14 years ago

Ouch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.

mike-cardwell• 14 years ago

They will never live it down.

sneak4• 14 years ago

The amusing part is that they escaped n rounds of major layoffs, only to be (presumably) canned for something avoidable.

tlrobinson• 14 years ago

https://news.ycombinator.com/item?id=4016707

sparknlaunch12• 14 years ago

How hard is it for Yahoo to change their certificate?

tylermenezes• 14 years ago

Honestly, it could probably be worse. Who uses Axis, anyway?

It still looks extremely bad for Yahoo, though.

altrego99• 14 years ago

Looks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.

readme2• 14 years ago

Is this responsible disclosure?

sneak4• 14 years ago

There is no such thing as responsible disclosure.

readme2• 14 years ago

http://en.wikipedia.org/wiki/Responsible_disclosure

Not sure I really agree. I think it would be courteous to politely inform yahoo! of their mistake. Potentially more rewarding, as well.

JoachimSchipper• 14 years ago

See http://news.ycombinator.com/item?id=4016867.

In general, note that the people demanding responsible disclosure (i.e. major vendors) also greatly benefit from it. (In general, creating and enforcing an ethical norm is not itself an ethically neutral act.)

sneak4• 14 years ago

It's a key, not a certificate.

Yahoo included their private certificate in Axis

Related Stories