18 points
*
10 points
Is that hacker news over telegram?
14 points
:sicko-jammin:
What can they do with a signing key?
15 points
*
10 points
Pretend to be someone they aren’t
An actor that can acquire a private signing key can then create falsified tokens with valid signatures that will be accepted by relying parties. This is called token forgery.
4 points
The article just says they signed authentication tokens which gave them access to outlook emails. I don’t think it was code signing that would let them distribute software, and that’s not what they were after.
