[Full-Disclosure] trust? - win2k source code tools

[Alan.l1]

> found this interesting...
>  iexpress.exe
>  signcode.exe
>  makecert.exe ( DigSig.dll )

It's not interesting or at least not to anyone who's played with
code-signing. Two of these utils are from an old SDK and iexpress is
probably the same as found in the IEAK.

> who would you like your package to be certified from today sir?
>   \win2k\private\ispu\pkitrust\initpki\certs\

Any box running IE will have those (certs != private keys).

-A