yahoo/yos-social-php5 — pull request #11 by SecurityGlitch (2014-02-23 02:07:10+00:00)
Title: Update YahooCurl.class.php

curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, true);

This should be numeric. True=1, which I believe, is disabled. I see your comment that this is to be nice to "dev certs", but this is wrong either way. Additionally, this practice is very dangerous, just ask Apple about their iOS bug.