Yahoo leaks private key, allows anyone to build Yahoo-signed Chrome extensions

Yahoo was forced to release a new version of its Axis extension for Google Chrome after the original one contained a private key that allowed anyone to digitally sign extensions in Yahoo's name.

Axis is a new search and browsing tool from Yahoo that was released on Wednesday. It is available for desktop computers, as an extension for Google Chrome, Mozilla Firefox, Internet Explorer and Safari, as well as for iOS devices, as a stand-alone app.

Source: http://podcasts.infoworld.com/d/security/yahoo-leaks-private-key-allows-anyone-build-yahoo-signed-chrome-extensions-194071?source=rss_applications

VISHAY INTERTECHNOLOGY VIRGIN MEDIA VIEWSONIC VERISIGN VERIFONE HOLDINGS