Yahoo! includes signing key inside Axis (anyone can publish as Yahoo!)

Fake Yahoo! Axis extension, made by the same guy who tweeted the above: https://github.com/nikcub/yahoo-spoof