Flame was a US Govt job. How much reputation/direct costs to Microsoft for the bogus cert issue? Have we declared war on ourselves?