Yahoo Mail Flaw Could Allow Attackers To Read Emails, Infect Computers With No User Action

[Lucian Armasu]

Finnish security researcher Jouko Pynnönen finds Yahoo Mail XSS vulnerability one year after discovering a similar flaw for the service. The bug could allow an attacker to eavesdrop on anyone's inbox or infect their PCs with no user action needed.

Yahoo Mail Flaw Could Allow Attackers To Read Emails, Infect Computers With No User Action : Read more

 

[bloodroses]

People still use yahoo email? I have one, but I haven't accessed in so long that I'd never be able to remember the password I used.

 

[tsnor]

Yahoo provides email service for other companies. For example Frontier email is run by Yahoo.

 

[daglesj]

Yahoo is the worst. If a customer calls me with an email problem or they start sending me spam it will be with a Yahoo account.

 

[DMLee74128]

I have to use Y-mail if I want to access Yahoo groups. Without it I can not access the group. Gmail is my primary email.

 

[Kimonajane]

Is this a Windows vulnerability? as was the code written to go for windows or does it reach onto OS X and Linux as well?

 

[dE_logics]

But ymail only works on Windows.

That's what they said the last time I checked.

Inside Yahoo, everything is proprietary BS which no one knows about; this's the primary reason for their demise.

 

[DMLee74128]

Y-mail is short for Yahoo Mail.

It works on any platform as long as you use the mail on the web site.

 

[Effex]

Yes, people still use Yahoo Mail. Not everyone likes the interface of Gmail.

 

[tsnor]

But ymail only works on Windows.

That's what they said the last time I checked.

Inside Yahoo, everything is proprietary BS which no one knows about; this's the primary reason for their demise.

Nope, standard imap or pop3 server. Your email client can be Linux, apple, android, or any other platform that supports the protocol. "...IMAP is the best way to connect your Yahoo Mail account to a desktop mail client or mobile app. .." https://help.yahoo.com/kb/SLN4075.html

As far as the email servers at Yahoo goes, it is unlikely they are windows (because its not free). Agree with you they are likely running a proprietary mix of server hardware and software however that does not bother me ... they are surfacing industry standard email APIs.