File manager alert File Explorer (5/25/2012)
Yahoo Includes Private Key in Source File For Axis Chrome Extension
Threatpost (blog)
by Dennis Fisher Yahoo on Wednesday launched a new browser called Axis and
researchers immediately discovered that the company had mistakenly included
its private signing key in the source file, a serious error that would
allow an attacker to create a ...
Link to...
See all stories on this topic:
Link to...
Yahoo! Launches Axis Browser Extension with Major Security Error
eSecurity Planet
The source package contains the company's private certificate file used to
sign the extension, according to security researcher Nik Cubrilovic. By
Jeff Goldman | May 24, 2012 Australian security researcher Nik Cubrilovic
recently uncovered a ...
Link to...
See all stories on this topic:
Link to...
Amid Turmoil, Yahoo Jumps Into Browser Wars
Wall Street Journal
A researcher found that within Axis, Yahoo had leaked its "private
certification file," meaning that anyone could use it to create a malicious
piece of software that would be disguised as legitimate browser plug-in
from Yahoo.
Link to...
See all stories on this topic:
Link to...
Yahoo leaks private key, allows anyone to build Yahoo-signed Chrome
extensions
Computerworld
Every CRX file contains a public key that's part of a private-public key
pair unique to its creator. The private key is used to sign the extension,
while the public key is used by the browser to verify the signature's
authenticity.
Link to...
See all stories on this topic:
Link to...
Yahoo rushes to fix Axis browser certificate leak in Chrome
SC Magazine
The company, which announced the browser on Wednesday, also revoked the
exposed cert file soon after researcher Nik Cubrilovic publicly disclosed
his findings. Axis is available as a standalone download for Apple mobile
devices, such as the iPhone and ...
Link to...
See all stories on this topic:
Link to...
Yahoo's Axis Browser Security Slip-Up
LAPTOP Magazine (blog)
"With access to the private certificate file, a malicious attacker is
able to create a forged extension that Chrome will authenticate as being
from Yahoo." It wasn't clear from Cubrilovic's posting whether Firefox or
Internet Explorer would be affected ...
Link to...
See all stories on this topic:
Link to...
Yahoo released a web plug-in with security flaws
Inquirer
The company released Axis on Tuesday, which is a plug-in for HTML5 enabled
web browsers such as Internet Explorer, Firefox, Chrome and Safari as well
as the Iphone and Ipad that is intended to speed up internet searches. The
private certificate file ...
Link to...
See all stories on this topic:
Link to...
Yahoo! Launches New Browser 'Axis', and Shoots Itself in the Foot
ValueWalk
It seems that the new browser extension leaks its private certificate file.
This means that it is possible for counterfeit extensions to be made from
the original. A hacker and blogger Nik Cubrilovic says that with the
counterfeit extensions, ...
Link to...
See all stories on this topic:
Link to...
WiFi File Explorer PRO v1.7.4 - Mobiles24.com Phone Forum
WiFi File Explorer PRO v1.7.4. Requirements: Android OS 1.6+. Overview:
Browse, download, upload, delete, copy, ZIP, stream and manage files via
WiFi!
Link to...
Porting and extending Miui file explorer (May 16 - v2.3.7.32 ...
bug report:when you get into directory of more than 6,you will go into an
infinite loop, it always will display the fifth folder name and never get
into the sixth folder!
Link to...
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
OwlCom
Software
