Yahoo included their private certificate in Axis

Re:Yahoo included their private certificate in Axis by readme on Thursday May 24, 2012 @04:39AM (#4017426)

Is this responsible disclosure?

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by JoachimSchipper on Thursday May 24, 2012 @05:33AM (#4017567)

See http://news.ycombinator.com/item?id=4016867.

In general, note that the people demanding responsible disclosure (i.e. major vendors) also greatly benefit from it. (In general, creating and enforcing an ethical norm is not itself an ethically neutral act.)

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @04:54AM (#4017474)

There is no such thing as responsible disclosure.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by readme on Thursday May 24, 2012 @05:31AM (#4017560)

http://en.wikipedia.org/wiki/Responsible_disclosure

Not sure I really agree. I think it would be courteous to politely inform yahoo! of their mistake. Potentially more rewarding, as well.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by sneak on Thursday May 24, 2012 @07:58AM (#4017916)

http://en.wikipedia.org/wiki/Allah

Lots of things that don't exist have Wikipedia pages.

[ Parent | on HN ]

Re:Yahoo included their private certificate in Axis by Karunamon on Thursday May 24, 2012 @08:32AM (#4018027)

Sounds like an affirmative claim, can you prove that? ;)

[ Parent | on HN ]