Yahoo! Axis Chrome Extension Leaks Own Private Key

Here's a link to my latest article published at Sophos' award-winning blog, Naked Security:

• Yahoo! leaks its own private key via new Axis Chrome extension (24 May 2012)
  
  Yahoo! just released a new iOS browser called Axis, along with corresponding extensions for desktop browsers Chrome, Firefox, Safari, and Internet Explorer 9.
  
  The Chrome extension came with a little something extra: Yahoo!'s private key.
  
  Oops.

See the full article for details about the ramifications of Yahoo!'s big mistake.


For more from the JoshMeister on Security, please subscribe via e-mail or RSS, or follow me on Twitter or Google+.

Recent Articles at Sophos Naked Security Blog

Here are some articles that I've written recently for Sophos' award-winning blog, Naked Security, that I haven't mentioned yet on the JoshMeister on Security:

• Is it a Norton or an AOL phishing scam? (22 May 2012)
  A recent phishing scam targets Norton users... or is that AOL users? It seems the cybercriminals can't quite decide.
  
  
  Here's the Web of Trust report for the domain that's hosting the phishing URLs:
  https://www.mywot.com/en/scorecard/stathrania.com
    
• Mac FileVault 2's full disk encryption can be bypassed in minutes (2 Feb 2012)
  A company claims it can bypass Apple's FileVault 2 disk encryption "in minutes," as well as volumes encrypted with TrueCrypt.

In other news, the review of Sophos Anti-Virus for Mac Home Edition that I wrote for the January 2011 issue of MacTech Magazine—nota bene: prior to when I started blogging for Sophos—is now available to read online.

Also, I just updated my classic and still quite popular article on How to Preview Shortened URLs. If you haven't read it before (or if it's been a while), be sure to check it out and see what's new.


For more from the JoshMeister on Security, please subscribe via e-mail or RSS, or follow me on Twitter or Google+.