<http://schema.org/articleBody>
"Yahoo has confirmed that it has disabled the Google Chrome extension for its new Axis browser, after security concerns were raised by a developer who was able to forge the extension.\r\n\r\nA company spokesperson provided The Next Web with the following statement that confirms the temporary shutdown:\r\nYahoo! takes online security seriously. We recently learned of a vulnerability with Yahoo! Axis on Chrome and immediately disabled the Chrome extension. We are actively working towards a resolution and expect to have a fix shortly.\r\nAdditionally, a member of Yahoo's Axis team provided a further statement in response to our previous post:\r\nSince discovering this issue we have immediately pulled down the chrome extension. We have blacklisted the exposed cert key with Google which has resolved the vulnerability. An updated chrome extension should be available within the next 30 minutes with this issue completely resolved. We take issues like this very seriously and are dedicated to working around the clock to ensure resolution. We apologize for any inconvenience.\r\nThe closure come after developer\u00A0Nick Cubrilovic unearthed\u00A0a major flaw that sees the\u00A0Chrome extension leaks its private\u00A0certificate file. That makes it is vulnerable to being forged and cloned into fake extensions, as he explains:\r\nThe clearest implication is that with the private certificate file and a fake extension you can create a spoofed package that captures all web traffic, including passwords, session cookies, etc.\r\nIt's been a mixed bag for the new browser.\u00A0Though it has been given a positive welcome by some, it has suffered from the extension security, while someone at the firm forgot to publish its terms and conditions page and other tech pundits have cast doubt over the timing of Yahoo's entry into the browser space.\r\n\r\nAs\u00A0we revealed last week,\u00A0Google Chrome had just overtaken Internet Explorer as the Web's most popular option. With Mozilla (Firefox), Opera, Apple (Safari) among the other players fighting for attention, it remains to be seen if there is space for yet another browser."^^<http://www.w3.org/2001/XMLSchema#string>
<http://thenextweb.com/insider/2012/05/24/yahoo-disables-axis-chrome-extension-after-developer-exposes-security-vulnerability/>