Considering all of the Linux people here are blasting this move as much as they blasted UAC (which was a terrible implementation) I don't see what hypocracy exists.

Besides, this has already been done before with the research group that broke SSL certificates that used MD5 http://www.win.tue.nl/hashclash/rogue-ca/

It was interesting work but the management were clueless about software development. That's another company on my resume that no longer exists. Damn.

Super Breakout: Revenge of the Bricks