The certs are sold by certificate authority companies, and Microsoft doesn’t get a share of that, though I’m not sure.
Yeah, software being signed says nothing about it not being malicious or insecure, but it does prove the author is what it says, and if it is malicious then the responsible party is clearly visible.
For non-commercial hobby/open-source software the certificate price is prohibitive, so the only 2 options are Microsoft Store or accepting that users will see the scary warnings, and of course complain to the developer about it.
You can pay a one time fee if $25 to get Microsoft to sign your app on the Microsoft store, or you can pay $400+ per year to buy your own certificate. So Microsoft Store is sadly the cheap way to release apps on Windows. (Without users getting scary warnings from Windows and AV about installing unsigned aoftware)
anyone remember the time when google removed(!) their internal “don’t be evil” rule?
I remember when media falsely reported clickbait articles that they did and people bring that up to this day. They moved it from the introduction to the closing statement. Which you can argue makes it less prominent or whatever, but it was never removed.
Of course it makes no difference, it wasn’t followed either way, and definitely isn’t followed now. But no, it was never removed. You can see it yourself right here at the end: https://abc.xyz/investor/google-code-of-conduct/
I’m not saying what’s “the correct play” or not, I’m refuting the claim all Chromium-based browsers are immediately affected, because I know of at least one that will keep V2 support.
But I will keep using Vivaldi. It will take me the same time to migrate to Firefox regardless if I do it today or a year from now when Vivaldi drops V2 support. I have nothing to gain by migrating sooner, but potentially much to gain by waiting.