Yahoo! Axis! Of! Incompetence!

| by Alex Blewltt Follow 0 Followers on May 24, 2012. Estimated reading time: 1 minute |

A note to our readers: As per your request we have developed a set of features that allow you to reduce the noise, while not losing sight of anything that is important. Get email and web notifications by choosing the topics you are interested in.

Yahoo has released a new web search platform named Axis, which provides a searching experience that is consistent between multiple browsers. The browsing experience actually comes from a set of JavaScript extensions that can be installed into multiple browsers (such as an iPhone and iPad app, or in a desktop browser).

Axis works by providing a search box and performs as-you-type search feedback, familiar to anyone who has used Google in the last decade. The search results can be stepped through and images or thumbnails are rendered for search items in a way reminiscent of Apple's coverflow or Microsoft's Windows Mobile grid.

Almost no information is available from the site, providing instead a video to demonstrate the capabilities.

This has been described by some as a 'browser', but that isn't strictly true; it doesn't replace any of the rendering contents that the browser otherwise handles. What it does do is allow you to 'browse' (i.e.: search) the internet by search keywords, much like walking through Yahoo! Directory! but with graphical previews.

As well as the application for mobile sites, there is an extension which can be plugged into desktop browsers such as Safari and Chrome. Unfortunately for the developers, the private key used to sign the Chrome extension was made available in the extension download itself, meaning that anyone can now sign Chrome extensions claiming to be from Yahoo! and make them available from the app store.

As a result, the recommendation is not to install any extensions that have been signed by Yahoo! into your browsers until Google releases an update which revokes the leaked key. More information on the disclosure is available from, and a proof-of-concept exploit has been made available on this GitHub repository. The private key is available for viewing here.

Rate this Article

Adoption Stage

Hello stranger!

You need to Register an InfoQ account or or login to post comments. But there's so much more behind being registered.

Get the most out of the InfoQ experience.

Tell us what you think

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread
Community comments

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread


Login to InfoQ to interact with what matters most to you.

Recover your password...


Follow your favorite topics and editors

Quick overview of most important highlights in the industry and on the site.


More signal, less noise

Build your own feed by choosing topics you want to read about and editors you want to hear from.


Stay up-to-date

Set up your notifications and don't miss out on content that matters to you