7 ms·
Yahoo included their private certificate in Axis
- wookiefeet 14y agoWOOPSIE POOPSIES!
- DigitalSea 14y agoI've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.
- Cushman 14y agoOuch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.
- mike-cardwell 14y agoThey will never live it down.
- sneak 14y agoThe amusing part is that they escaped n rounds of major layoffs, only to be (presumably) canned for something avoidable.
- tlrobinson 14y agohttps://news.ycombinator.com/item?id=4016707 https://news.ycombinator.com/item?id=4016707
- sparknlaunch12 14y agoHow hard is it for Yahoo to change their certificate?
- deleted 14y ago[deleted]
- tylermenezes 14y agoHonestly, it could probably be worse. Who uses Axis, anyway? It still looks extremely bad for Yahoo, though.
- altrego99 14y agoLooks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.
- readme 14y agoIs this responsible disclosure?
- sneak 14y agoThere is no such thing as responsible disclosure.
- readme 14y agohttp://en.wikipedia.org/wiki/Responsible_disclosure http://en.wikipedia.org/wiki/Responsible_disclosure Not sure I really agree. I think it would be courteous to politely inform yahoo! of their mistake. Potentially more rewarding, as well.
- JoachimSchipper 14y agoSee http://news.ycombinator.com/item?id=4016867 http://news.ycombinator.com/item?id=4016867. In general, note that the people demanding responsible disclosure (i.e. major vendors) also greatly benefit from it. (In general, creating and enforcing an ethical norm is not itself an ethically neutral act.)
- sneak 14y agoIt's a key, not a certificate.