Yahoo included their private certificate in Axis

I've heard rumours from within Yahoo! that next major product release they're planning on including a copy of Scott Thompson's computer science degree.

<a href="https://news.ycombinator.com/item?id=4016707" rel="nofollow">https://news.ycombinator.com/item?id=4016707</a>

Ouch. But we've all had moments of forehead-slapping stupidity; I really feel for whoever let this slip through.

Looks like they want to give others an opportunity to fix codes for Yahoo. This will take the open-source to a new level.

Is this responsible disclosure?

How hard is it for Yahoo to change their certificate?

Honestly, it could probably be worse. Who uses Axis, anyway?<p>It still looks extremely bad for Yahoo, though.

It's a key, not a certificate.

WOOPSIE POOPSIES!