Brian Krebs has located and published a sales pitch from a hacker who has found a zero-day exploit allowing him to steal cookies from Yahoo webmail users, granting access to their accounts.
“I’m selling Yahoo stored xss that steal Yahoo emails cookies and works on ALL browsers,” wrote the vendor of this exploit, using the hacker handle ‘TheHell.’ “And you don’t need to bypass IE or Chrome xss filter as it do that itself because it’s stored xss. Prices around for such exploit is $1,100 – $1,500, while I offer it here for $700. Will sell only to trusted people cuz I don’t want it to be patched soon!”
An excellent long-read about Flickr and Yahoo by Mat Honan at Gizmodo today. Anyone who has loved and been let down by the once-great photo-sharing site now caught in the purple zombie's death spiral will nod in agreement throughout. The opening graf:
Web startups are made out of two things: people and code. The people make the code, and the code makes the people rich. Code is like a poem; it has to follow certain structural requirements, and yet out of that structure can come art. But code is art that does something. It is the assembly of something brand new from nothing but an idea.
Yahoo announces that Jerry Yang has resigned from the internet company's Board of Directors "and all other positions with the company, effective today." Yang has also resigned from the Boards of Yahoo Japan Corporation and Alibaba Group Holding Limited, effective today. Yahoo's official statement is here.
Photo: Co-founder and former CEO of Yahoo! Inc. Jerry Yang applauds during the announcement of a commitment pledge at the Clinton Global Initiative in New York September 22, 2010. (REUTERS)
Outgoing Yahoo CEO Carol Bartz, fired over the phone by board chairman Roy Bostock, is famous for using foul language. Following her departure, she did not disappoint.
"These people fucked me over," she says, in her first interview since her dismissal from the CEO role late Tuesday. ... "I said, 'Roy, I think that's a script,'" adding, "'Why don't you have the balls to tell me yourself?'"
