3 ms·

Doesn't Yahoo have an entire team called "The Paranoids" to deal with security? Were they not involved in setting up this service?

• skarip 14y ago
  Almost definitely laid off / working elsewhere at this point in time.
• kentbrew 14y ago
  Nope. Most of the originals have fled; the few who remain have been renamed something lame. (I forget the exact name but I'm sure it contains some or all of the Standard Yahoo Corporate Buzzwords, which are: Global, Platform, Initiative, Strategy, and Partnership.)
  • simonw 14y ago
    They renamed the paranoids? That's the most depressing yahoo news I've heard in a while. Makes it seem like they're trying to squeeze out any last hints of engineering culture :/
  • mathrawka 14y ago
    Ouch :( I guess it all started when Arturo left for FB.
• rll 14y ago
  They did, and their influence will still be there. If this really did come from a Yahoo service it was likely some sort of co-branded partner. All core Yahoo apps authenticate against a central service with no hint of any sort of plain text credentials stored anywhere.
  • jmathai 14y ago
    If it's on the yahoo.com domain then it has to go through the login servers. No one else can issue the Y/T cookies they use for authentication.
• zer01 14y ago
  Can't forget that this 'dream team' also failed to catch the fact that they released their private signing key with the Axis chrome extension. http://nakedsecurity.sophos.com/2012/05/24/yahoo-leaks-its-own-private-key-via-new-axis-chrome-extension/ http://nakedsecurity.sophos.com/2012/05/24/yahoo-leaks-its-o...
  • rll 14y ago
    which happened well after the dismantling of the Paranoids
• gingerjoos 14y ago
  From what I heard a couple of years back, no Yahoo product is allowed into the wild without paranoid approval.