and when was code signing any real kind of security anyway? its always felt more like a protection racket to me... especially when you can takes someone's code

and when was code signing any real kind of security anyway? its always felt more like a protection racket to me... especially when you can takes someone's codesigned stuff and resign it. getting the ability to code sign requires just money, time and a bare minimum of paperwork... the trusted authority on these things is completely untrustworthy by the nature of their business imo.