yahoo.news.ticker.txt

`FOR IMMEDIATE RELEASE:  
  
Application: Yahoo! NEWS TICKER  
Platforms : Win95,98,NT  
  
Advisory:  
  
The installation process of the Yahoo! NEWS TICKER   
leaves a file name "install.log" in the program   
directory. The file contains plaintext userid and   
password.  
  
The installation process also sets registry entries   
under hkey_local_machine/software/netcontrols/ticker   
that contain the plaintext userID and password.  
  
  
Each yahoo account uses the same password/userid for   
all parts including auctions, news, my.yahoo,   
classifieds, and most importantly, EMAIL!!!!  
  
this is an independant finding not a release by Yahoo!.  
  
Advisory by CSB 24MARCH99  
  
<end of transmission>  
  
`