Yahoo included their private certificate in Axis

Posted by amandle on Thursday May 24, 2012 @12:17AM
from the github.com dept.

( 16 comments | 79 points | on HN )

Re:Yahoo included their private certificate in Axis by DigitalSea on Thursday May 24, 2012 @01:15AM (#4016941)

I've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by tlrobinson on Thursday May 24, 2012 @02:00AM (#4017059)

https://news.ycombinator.com/item?id=4016707

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by Cushman on Thursday May 24, 2012 @01:19AM (#4016951)

Ouch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by mike-cardwell on Thursday May 24, 2012 @05:36AM (#4017575)

They will never live it down.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @07:58AM (#4017920)

The amusing part is that they escaped n rounds of major layoffs, only to be (presumably) canned for something avoidable.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by altrego99 on Thursday May 24, 2012 @02:51AM (#4017195)

Looks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by readme on Thursday May 24, 2012 @04:39AM (#4017426)

Is this responsible disclosure?

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by JoachimSchipper on Thursday May 24, 2012 @05:33AM (#4017567)

See http://news.ycombinator.com/item?id=4016867.

In general, note that the people demanding responsible disclosure (i.e. major vendors) also greatly benefit from it. (In general, creating and enforcing an ethical norm is not itself an ethically neutral act.)

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @04:54AM (#4017474)

There is no such thing as responsible disclosure.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by readme on Thursday May 24, 2012 @05:31AM (#4017560)

http://en.wikipedia.org/wiki/Responsible_disclosure

Not sure I really agree. I think it would be courteous to politely inform yahoo! of their mistake. Potentially more rewarding, as well.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @07:58AM (#4017916)

http://en.wikipedia.org/wiki/Allah

Lots of things that don't exist have Wikipedia pages.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by Karunamon on Thursday May 24, 2012 @08:32AM (#4018027)

Sounds like an affirmative claim, can you prove that? ;)

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sparknlaunch12 on Thursday May 24, 2012 @02:27AM (#4017126)

How hard is it for Yahoo to change their certificate?

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by tylermenezes on Thursday May 24, 2012 @02:30AM (#4017141)

Honestly, it could probably be worse. Who uses Axis, anyway?

It still looks extremely bad for Yahoo, though.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @04:54AM (#4017476)

It's a key, not a certificate.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by wookiefeet on Thursday May 24, 2012 @01:09AM (#4016920)

WOOPSIE POOPSIES!

[ Parent | on HN ]