Leaked stolen Nvidia cert can sign Windows malware

If a corp like Nvidia cannot manage to store Code signing certs on hardware only, the whole process is broken beyond repair. What’s the value of signed code going forward?

Finally I can develop and publish open source drivers for Windows again.<p>Guess someone out there still believes that windows code signing is a security feature rather than just a way to keep the smaller developers out of the ecosystem.

For keys issued 6+ years ago...<p><a href="https:&#x2F;&#x2F;twitter.com&#x2F;BillDemirkapi&#x2F;status&#x2F;1499735326406938625" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;BillDemirkapi&#x2F;status&#x2F;1499735326406938625</a>

This would be revoked soon enough right?

Hmmm maybe i should keep windows offline for a few days…..

Well, that is... an interesting leak, but not exactly the types of certificate that this hacker group was treating to release on Friday.

As opposed to the regular nvidia cert which normally signs windows drivers (ie drivers for malware)? This is a total non-story

But... can we haz better Linux drivers after this? :)