Yahoo Includes Certificate Private Key Inside Chrome Extension for Axis

Earlier today, Yahoo released their new browser extension for and and browser for and after news leaked about it. However, it looks like that they did it in a hurry and made a huge blunder while releasing their .

Yahoo Axis Certificate Private Key

As spotted by @nikcub,  Yahoo has included their private key with the Chrome extension. This private certificate will allow other users to sign their applications as Yahoo. I was able to confirm that the file was available inside the extension.

Nik further demonstrates the vulnerability of the leaked mistakenly included private certificate key in a detailed blog post which you can read here. While the extension would not be a problem currently , it would allow other scammers or phishers to pass off rogue extensions as those created by Yahoo or just re-upload the original extension with something rogue.

As a user, you should remove the current extension till Yahoo fixes this problem. To get rid of this problem, Yahoo would need to create a new certificate and sign their extension again and Google would probably have to negate the old certificate while installing extensions.

This is not the first time that such a blunder has happened when news has leaked hours before a release, but this is definitely a very big problem on Yahoo’s part.

Yahoo Launching It’s Own Web Browser for Desktop and iOS Devices

Updates below

The browser market is exploding with several big players like , and Internet Explorer  leading the market and several others like and Safari catching up. However, it looks like the market is not so saturated after all because Yahoo will be launching their own web browser called Axis later today.

Yahoo Axis Logo

The news was leaked by Launch through an email they got their hands on. The email subject read, “Yahoo! Axis launches on May 23- Redefining what it means to search and browse” and described the browser and its launch.

Yahoo! Axis is a new browser that redefines what it means to search and browse- enabling a seamless search experience on your iPhone, iPad, and even your desktop.  Here are some highlights of how Yahoo! Axis brings search to life in a whole new way:

Smarter, Faster Search with Rich Design: Get instant answers and visual previews so you can continuously discover and explore content without interruption. Never leave the page you are on to view your search results again.

Connected Experience: Move seamlessly across devices, picking up wherever you left off as you move across your desktop, iPhone, and iPad. Recently visited sites, searches, saved articles, and bookmarks are automatically accessible across all your devices.

Personal Home Page: Get direct access to your favorite sites and content across all your devices with the customizable Home Page.

Yahoo has reportedly been working on Axis for a long time now, but the release will finally be coming today. With competition from some of the established browsers, Axis might find it a little hard to gain traction. But hey, you never know. A couple of years ago, Chrome launched out of nowhere and is almost the most used browser today. So Yahoo could go miles too.

However, lets hope that this is not another Yahoo product which they run for a while and shut down. If you are looking forward to download Yahoo Axis, you can visit the website or catch up on some video demo of Yahoo Axis above. Yahoo Axis is available as a desktop download, you can also download it for and iPad

We’ll be doing a review of the product as well in a short while, so stay tuned for it.

Update: I tried downloading the browser but it the link is downloading a browser extension for Google Chrome or add-on for Firefox which does not work as of now.