http://blog.atomicinc.com/2015/03/16/yahoos-on-demand-insecu...
I wonder if they put a college intern in charge of authentication services...