Some might argue that a list of 8 like this is too long for a summary. Surely if it were a list of 100 extensions you would agree that the list does not belong in the summary. One can always RTFA

This would be an unfair practice. There are markets such as HKG that have a small transaction fee that does what I think you are after with this idea.

Because the cost of the OS is a small fraction of the total costs involved.

Moving off the algorithm seems pretty easy, just do what they are doing now. They could have done this type of migration at any time.

Salary information was freely available?

The usual scam/con tactics to keep the victim out of slow thinking mode. A sense of urgency, and a sense that they already know what it is. users bypassing or ignoring warnings isn't surprising since many see similar warnings all the time and safely ignore them. Also, often a non-tech person often doesn't understand the implications of a particular warning.

They very likely did that. The challenge is they can't test every possible permutation. This problem doesn't affect everyone, only some. SO, you get an issue that affects *some* of the next tier of testers, also known as fools/madmen/angels that volunteered to do QA testing for Microsoft.

You get paid based more on how hard it is to replace you than any notion of the value of your work.

The video systems are typically like this, they aren't run by your average good looking, hyper smart information security professionals, they are run by physical security which is a whole different kettle of fish. I once worked at an org where there was NO password on the video surveillance, and they refused to set up one. So I went and showed the Windows server admins, who were well known scamps, how to access it and pan/tilt the cameras and left it at that. I don't know what those Windows admins were doing with the cameras, but soon there was at least a decent password on the thing.

I doubt there is any catching up possible. We will need some way to leapfrog their dominance in this space with some whole new approach. Personal jetpacks or whatever. They never caught up to the US in terms of ICE car production, they just leapfrogged to the new product type.

I would look very carefully at WPS for backdoors, infostealers, etc. This would be a classic watering hole trick since they know a lot of government types will all be rushing to download WPS. Or the auto-update mechanism.

I put it this way: if work was fun they wouldn't have to pay you to do it.

The slackers are just participating in ./ discussions instead of working.

You forgot

Jan 25, Profit!

Here is the actual source since BleepingComputer can't bleeping be bothered to link to it.