This has been all over the news today. Yahoo pulled a *huge* stupid.

https://www.net-security.org/secworld.php?id=13234