I was a CS major at the University of Washington in the mid 90s. In one of my intro courses we were touching on public key cryptography and this movie came up. The professor mentioned that Adelman was a consultant on the movie and that he was a notoriously slow replier to email. Like you would get a reply weeks or months after you sent an email to him. But, if you asked a question about this movie you'd get a reply to your email almost immediately.
This seems very insightful to me. I think I'm another data point that mostly fits your observations.
Individual psychology definitely plays a huge role with me personally being on the far side of guess culture. I have pretty extreme social anxiety and the idea of asking someone for something fills me with dread every single time. Not because it shows weakness (I think), but because I don't want to impose on others. Asking someone I don't know for something is almost impossible. I can barely do it in a context where it's expected, like customer service.
I'm not wealthy, but I have moved around a bunch, especially as a child. I'd absolutely help out anyone who asked for it, but also try anticipate the needs of others.
I studied computer science at the University of Washington in the mid 90s. One of my professors there would tell a story about how Adleman was notorious for answering email days or weeks later, but one time he sent him an email asking a question about the movie and got a response five minutes later.
OK, so I admittedly don't have the time to fully analyze this, but it looks like the bug is in the code that processes client certificates. The default setting in IIS is to ignore client certificates so does that mean that by default you can't trigger this exploit against an out of the box IIS setup?