GitHub says unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories.

Why anyone would trust a web service to update their live code on the server is beyond me. But, never having used this service, I'm a bit confused. As a part of this activation process, developers are ...