Yahoo included their private certificate in Axis

DigitalSea 13 years ago |

I've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.

tlrobinson 13 years ago |

https://news.ycombinator.com/item?id=4016707

Cushman 13 years ago |

Ouch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.

mike-cardwell 13 years ago | |

They will never live it down.

sneak 13 years ago | | |

The amusing part is that they escaped n rounds of major layoffs, only to be (presumably) canned for something avoidable.

altrego99 13 years ago |

Looks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.

readme 13 years ago |

Is this responsible disclosure?

JoachimSchipper 13 years ago | |

See http://news.ycombinator.com/item?id=4016867.

In general, note that the people demanding responsible disclosure (i.e. major vendors) also greatly benefit from it. (In general, creating and enforcing an ethical norm is not itself an ethically neutral act.)

sneak 13 years ago | |

There is no such thing as responsible disclosure.

readme 13 years ago | | |

http://en.wikipedia.org/wiki/Responsible_disclosure

Not sure I really agree. I think it would be courteous to politely inform yahoo! of their mistake. Potentially more rewarding, as well.

sneak 13 years ago | | |

http://en.wikipedia.org/wiki/Allah

Lots of things that don't exist have Wikipedia pages.

Karunamon 13 years ago | | |

Sounds like an affirmative claim, can you prove that? ;)

sparknlaunch12 13 years ago |

How hard is it for Yahoo to change their certificate?

tylermenezes 13 years ago |

Honestly, it could probably be worse. Who uses Axis, anyway?

It still looks extremely bad for Yahoo, though.

sneak 13 years ago |

It's a key, not a certificate.

wookiefeet 13 years ago |

WOOPSIE POOPSIES!