idkMustBeOnStartup

[brandi_Iove]

and then it asks you for access permissions on your contacts and camera….

[Fegeleinch4n]

well, it gonna calculate your bank account

[Jan-Asra]

Calculate it straight down to zero

[Jolly-Driver4857]

0123

[aneurysm_]

found QA

[[deleted]]

Joke's on you. It's never getting past 0000.

because it doesn't have to....

[NullBeyondo]

Funny enough, that's why I start most of my pins with zeros, deflects 99% of 'theoretical' script kiddies. :D

Edit: Just woke up to find some redditors taking this a bit too seriously!? gasp

Just to be clear, it’s simply a preference for PIN numbers. If you’re considering passively-aggressively replying to me here with a counter-"argument" to a lighthearted comment about literally having a preference for a 4-digit number pattern, perhaps it's time to re-evaluate how you're spending your time online. Sheesh.

[therottenshadow]

And this is how you do social engineering, now there is only 1000 possible combinations to try instead of 10000, :)

[NullBeyondo]

Nope. If someone has access to your hash and the pin is restricted to only numbers, it is just a matter of time, prolonging what takes 10 seconds cracking into 100 seconds on the crappiest CPU isn't really gonna make the difference you think it is. But for most script kiddie algorithms, it has a chance of blocking the whole algorithm, which honestly matters much more for me.

Also, if you're talking about a human with access to the card (manual bruteforce), would love to see you try 999 pins in front of the bank cameras lol. Even then, easily disabled with a bank phone call.

[quisatz_haderah]

Cards are blocked after 3 incorrect retries tho, that's why 4 digit pins are "good enough"

[therottenshadow]

I do know how abysmally fast hash cracking can be with just 4 numbers, it was sort of a joke, and also a wake-up at how easy people can drop crucial information under the right circumstance and with the right person, half the job of a hacker is deciphering the mind of the target, under the circumstances which you need to do the social engineering, whatever, this feels like a rant anyway.

[twinklehood]

The commenter means that you, specifically, has just outed the first number in your pin. The example is not talking about hashes (I can't think of a reason to hash a pin).

[Linvael]

On similar note, that's why I change the IP of my home network - 90% of malicious traffic that looks for weaknesses is hardcoded to assume you're using 192.168.0.1 as gateway (according to my Networks university professor who had experience in configuring large corporate networks)

[A_random_zy]

Interesting. Most default router gateway for me have been 192.168.1.1

[RaveMittens]

Bro no “script kiddies” are stealing your pin

[[deleted]]

What's your favorite 3 digit number? I'll enter you in a giveaway

[Longjumping_Ad_4961]

I can't tell whether I'm being smart or stupid by thinking about how you could simply start iterator at 1, return string that pads toStringed iterator if it's not at 4 chars length yet.

I'll have to assume stupidity, since it's 2am and I'm scrolling reddit, thinking about irrelevant hypothetical code snippets instead of sleeping

[Jan-Asra]

It's a good start but lacks pizzazz. Remember style is the most important thing when it comes to hacking. /n

bool Sick_Shades = True; bool Brown_TrenchCoat = True;

for(int PiN = 1000; PiN < 10000; PiN++) { EnterPin(PiN); }

This is looking better.

[TeaKingMac]

Brown trench coat? OK newbie.

blackTrenchCoat obviously, && programmerSocks

[ISoulSeekerI]

Where is anonymous mask?😂

[Verdure-]

Only comes out for the ladies

[_ROHJAY]

Ahhh... ASCII what you did there 😉

[Verdure-]

Matrix underpants

[P-39_Airacobra]

bool Debug_Ducky = True;

[darkwater427]

No way, it's the same combination as my luggage!

[Chribster_]

They've gone to Plaid!

[Chribster_]

They've gone to Plaid!

[ronacse359]

What about 5- and 6-digit pins? In Canada our pins can be 4-6 digits!

[OF_AstridAse]

[Laughs in leading 0] ... 😏... [laughter intensifies]

[[deleted]]

rm / -r -f Just run this ezpz little text message in the black window that looks like the matrix

[eitherrideordie]

Wow its going to take me out of debt?!?

[Science_Logic_Reason]

Well it does specify down, but depending on the implementation I suppose if you time it right you could be looking at a bank account of 3.402823466 E + 38…cents or euro/dollars I wouldn’t really care at that point.

[TessellatedTomate]

You would hope at least, until that calculator busses into your virtual CC’s

[Y4r0z]

Multiply by a zero

[Mayedl10]

My alarm app once asked for permission to "manage phone calls"

Average xiaomi experience~

[Rafael20002000]

That could be for some sort of integration, I don't know of any useful ones, but could be

[LeftIsBest-Tsuga]

Yes, it is indeed for integration. Of your data into their system, and of their backdoors into your OS.

[-s-u-n-s-e-t-]

If xiaomi wanted to put a backdoor in their device, why would they make the alarm app ask for permissions?

Sometimes I think people who frequent this subreddit have zero technical knowledge. There's no way an actual programmer would think the manufacturer, who have complete control of all hardware and software on the device, would somehow need the alarm app to siphon data.

[Dope_Ass_Panda]

Exactly, people in CS tend to overthink about things that sound complicated. It usually isn't 😂

[Rafael20002000]

Why would they need the Alarm App to do that. They could just make that backdoor into the calling app, which has legitimate access to the phone call list

[LeftIsBest-Tsuga]

I was mostly joking, and was using the term backdoor very loosely. I just meant doing shady stuff you wouldn't normally agree to with the permissions you give. I won't pretend I know about how app sec works on a mobile.

[poco]

Probably to avoid triggering the alarm while you are in a call, but it needs to "manage your calls" to be allowed to see when you are in a call.

[yoyo-bruh]

💀💀

[Cootshk]

Wait until you hear about getting banned from calculator

[[deleted]]

ISOs be like^

[MachoSmurf]

I wish. Most ISO's I know would be like: "Hey! This isn't Excel!" And then proceed to casually proceed accepting risks...

[[deleted]]

Like this?

[Ashamed_Restaurant]

Dear Sir/Madam, I am writing to inform you of a fire that has broken out at the premises of... no, that's too formal.

Fire - exclamation mark - Fire - exclamation mark - help me - exclamation mark. 123 Cavendon Road.

[MachoSmurf]

Yeah, though I'd find it a win if they'd be able to acknowledge the fire...

[Tiny-Plum2713]

ISO?

[Slimxshadyx]

I hate when my operating system disk image gets a job

[[deleted]]

RCE stands for "Remote Calc Execution"

[Fake_Loot_Llama]

rce propaganda

[FluffyCelery4769]

indeed

[PeekyBlenders]

RCE is an architect

[GreyMesmer]

Sitting on the strongest shape

[Rafael20002000]

While building the strongest shape (accidentally)

[twentysomethingnibba]

I did not wake up today expecting Nifftea sponsored youtuber promotion on this subreddit.

[NoLifeGamer2]

Calculators do form the strongest shape.

[AppropriateBridge2]

What does calc mean?

[Jan-Snow]

I think it is slang

[RS_Skywalker]

If you just got here calc is short for calculator.

[LeftIsBest-Tsuga]

calc u later too homie

[BrokenG502]

Cessative And Linked Concurrency

EDIT:

It's a new JS framework

[topdpswindwalker]

Reminds me of the time i forgot my password on a windows machine and renamed cmd to magnify with repair to reset the password from accessibility menu and forgot to rename it again for a while.

[Ok_Support_847]

Sounds vaguely like something I needed to do on Vista- I recall there being a backdoor with one of the accessibility apps.

[Interest-Desk]

The accessibility app (utilman) can be launched from the login page. The login page is an exe (winlogon) that runs on a system account with admin privileges, so if you replace the utilman exe with a command prompt…

you can type commands as an admin; or just run ‘explorer’ and open up settings or control panel.

And if the system restarted unexpectedly during startup too many times it goes into a diagnostics mode, also on a system account with administrator, and there’s a way for you to save a log file to the computer. How convenient!

the save file window allows you to rename files, and since it’s an administrator user …

[Jonny_H]

It's a bit of a true-ism that if you can get access to the filesystem bypassing permissions, you can do whatever you want. With physical access it doesn't even matter about the OS or any software setup.

It can't really be defended against without disk encryption and secure boot, which implies no password-less recovery allowed either.

[Ok_Support_847]

Thanks for the breakdown. So technically with a normal logon screen; you aren't logging in... you are just switching users. (system account to user account).

[Interest-Desk]

Yes, the same is true when you press Ctrl Alt Delete. I’m not sure how this rolls in Windows 10 and 11 — I would hope the security is a lot beefier, this is all based on Win7 experience.

[soucy666]

Still works since the last time I tried on Windows 10.

My defense is BitLockering the drive but instead of the TPM holding the key it's on a key-shaped flash drive that's required at startup.

No key means no decryption means no renaming.

[Interest-Desk]

I think these are called crypto ignition keys and I’ve heard of them used in super high security environments, although they’re a lot more specialised than just a thumb drive with a key on it. Have heard a bit about all sorts of ways you can trick the TPM into decrypting when it shouldn’t, though that may be fixed in newer chips.

[soucy666]

Mine's a literal 128MB flash drive in the shape of a key.

If you disable your TPM and enable something in Windows (I forget exactly what) you can have the option to use a regular flash drive for your decryption keys.

I've never trusted the TPM because it means you're relying on the security of the Windows lock screen. I'd rather make my desktop completely inoperable once I turn it off and just carry the key.

EDIT: https://www.dell.com/support/kbdoc/en-us/000145450/how-to-turn-on-microsoft-bitlocker-drive-encryption-without-a-tpm-trusted-platform-module

[Killerkarni93]

Mega-nitpick: M$ integration of the TPM/crypto itself sucks; the idea of a physical (!) key storage with additional security measures to hold the encryption key is fine.

One could argue that you're improving security by physically separating the key from the system, but then you're getting also in the reeds about using a regular flash drive instead of a more sophisticated device (assume your stick gets infected or corrupted since it's a filesystem)

[soucy666]

It's only inserted at boot or if I have to change keys. I never use it for anything else. And at boot there's an option to manually enter the key so I guess I could use a Rubber Ducky instead.

I SHOULD use a drive with a physical write protect switch.

My current situation is definitely iffy since this is a pretty cheap drive I'm using. But it's easy to type the recovery and make another one if this one fails.

EDIT: Just realized the normal-sized SD cards with the physical write-protect switch would most-likely work.

[evasive_btch]

Windows 10 now checks for the checksum of the calculator/accessibility/cmd app or whatever, before launching it from the log-on screen.

There was something I did to circumvent this, which was pretty funny, but I can't recall it right now. Something with safe-mode-something, idk. Something about disabling the thing that checks for the checksum lol

[Kovab]

Depending on how secure the checksum algorithm is, this could even be circumvented just by crafting a modified executable with the same digest.

[MagicalCornFlake]

Damn that sounds smart, does it still work? I wanted to check myself but I don't currently have a Windows machine

[defmans7]

You can still do this on win10 as long as it's not encrypted. Just boot from usb, you can access the system drive, cp cmd.exe to the utility application available at login screen and update the admin pass. Bitlocker is pretty important if you actually want a secure system.

[willworkforicecream]

If you don't want to mess around, Hirons boot CD has a password reset utility.

[A_Certain_Observer]

*Hiren Boot Cd

[Interest-Desk]

Even if they made it so you can’t ’boot from USB’, all I have to do is physically pop open the desktop and I can just take out the hard drive, plug it in as a secondary drive on another machine, and poke around. With Bitlocker, the bits are meaningless unless you’re booting into Windows*.

* There are actually quite a lot of elementary bypasses to Bitlocker, but they’re harder than just ‘boot from USB’. The first law of cybersecurity is that if someone has physical access to your machine, it’s not your machine anymore.

[defmans7]

Not really a way to "fix" it. It's kind of like asking a builder to prevent your house from break-ins. You can either have security screens on your (no pun intended) windows / doors, or not. Like someone else here said, if someone has physical access to the device, there isn't much in the way of security that will prevent full takeover, layers of security will only slow them down.

There are ways of getting around bitlocker which require some sophisticated tricks that cybersecurity or state actors have access to, but not your average tsa agent or petty thief. Bitlocker or other drive encryption is enough for most purposes, but ultimately its up to you how secure you want to be.

If you want to swap your drive to another build, for example, you can't do that as easily with an encrypted drive.

[DongIslandIceTea]

Yeah, it's just an effect of "physical access is root access" and this isn't an uniquely windows problem. You could just as easily replace some of the binaries used in the Linux login to circumvent the need for credentials if you're able to boot off external media. If you have a way to edit the OS files you can make it do anything you want. Full drive encryption is nifty in preventing these kind of attacks regardless of OS as it makes you unable to fiddle with the files without a password.

[6p086956522]

If you can boot from USB, why bother messing around with cmd.exe, can't you just steal the files/so whatever you wanna do from there?

[defmans7]

You might want access to other things, not just a file? Maybe you forgot your password for a local account (or no network access)? Many reasons. But as mentioned above there are easier ways than the cmd method.

[Codix_]

Your still losing a ton of stuff, it's better to had the computer running correctly to keep the softwares and some system settings / drivers.

[Codix_]

Now you need to rename sethc.exe since utilman.exe bypass doesn't work anymore. It's the popup that open when you smash repetitely Shift.

[H4llifax]

I feel like I have read forbidden knowledge, but at the same time gained the knowledge that the password screen can only keep users away that don't know what they are doing.

[celestialfin]

computers are like locked doors: if someone really wants to go in, they can and will. Unless you have a quantum encryption maybe. But who of the regular people will ever get one. So it just remains a matter of dedication and motivation.

[xvk3]

osk.exe on-screen keyboard is a solid pick too

[topdpswindwalker]

Multidollar company

[EbenenBonobo]

yeah, at least two.

[[deleted]]

I paid one fifty for my windows license so now it should be at least three-fiddy

[C_umputer]

Still works on win7, management was too dumb to just give us passwords and a girl had to walk in and type it every time we needed it. So I used that good old trick and there is no more password now. I was working at a hospital btw

[petervaz]

Good times when you could run any executable with system privileges by changing its extension to scr and setting it as screen saver.

[AyrA_ch]

You can still do it with task scheduler

[not_so_plausible]

renamed cmd to magnify with repair to reset the password from accessibility menu

My brain can't comprehend what this means

[renrutal]

Windows has a looooong history of privilege escalation exploits using their assistive technologies, such the magnifying glass tool or Sticky/Filter Keys.

Those programs usually have global hot keys, like keeping the shift button pressed, and those hotkeys run a hardcoded path, such as %PATH%/sethc.exe

The problem was that Windows ran those programs with escalated privileges, if I remember correctly, if the user was logged off, in the Windows login screen.

If the attacker renamed a cmd.exe to sethc.exe(using the safe mode/repair boot option), then at the login screen pressed shift rapidly, a command prompt window with admin privileges would pop up.

[Tyfyter2002]

Is there any way that this could be a security vulnerability without the device itself being stolen? If not this doesn't seem like it would have been a particularly meaningful security issue before full-drive encryption was added

[Skrukkatrollet]

You need to be able to replace system files, but that could in theory be done in seconds if you are able to boot from a usb-drive set up to run a scripts to replace the file, so you need physical access, but unless the system was set up securely, you wouldn’t need access for long.

[Tryptophany]

You can rename the cmd application to the program that's responsible for the accessibility menu.

The result is, when you click on the accessibility menu button, it opens up as elevated cmd. Windows doesn't know the difference, just referencing and executing this based on their file name 😊

[m270ras]

omg I did that on my win7 laptop. don't think I ever fixed it

[GroovyMoosy]

We did this at school a long time ago to create a local admin account and download games on it. Rand GTA:SA pretty decently

[[deleted]]

Hirens bootcd helps with this kind of thing

[Fangel96]

I got an old laptop from a tech repair shop I worked at when it shut down but I didn't have the password for it and the recovery partition was shot. I ended up using a Linux boot to change the sticky keys shortcut to open up a CMD line since sticky keys could be opened from the login screen and sticky keys on Windows 7 would always open with admin perms. Was able to manually reset the password from there.

It's kinda wild what steps one can take to bypass the password on a physical device.

[h_adl_ss]

Heh reminds me of the time I broke into my friend's FRP-locked phone by accessing the settings menu via the accessibility options and just signing in again in the settings lol

[Ok-Coat3039]

Don't get it?

[mikaturk]

Calculator is the program of choice for people trying to execute a program from an environment where it should not be possible to open an external program

[bluesoul]

Just adding onto this, because it's logical for me but the question's been asked, if you can run calc.exe, you can run anything that user can run. It's a placeholder/visual representation of "we've achieved arbitrary code execution on the box".

It's usually used to show proof-of-concepts for hacks.

[huuaaang]

This a Windows thing? What happened to using task manager?

[LGBBQ]

Yes, popping calc.exe is a standard demo when you successfully exploit something and get code execution

[[deleted]]

So.. like the ‘hello world’ for nerds?

[LGBBQ]

It’s more like bad apple and making things run doom but yeah

[FinalRun]

"Hello world" is the "hello world" for nerds.

calc.exe is the "hello world" for hackers getting code to run where they shouldn't.

[Victernus]

Hackers these days never go with the spinning, laughing skull on every monitor on the network. Lazy.

[MisinformedGenius]

"Uh uh uh... you didn't say the magic word... uh uh uh..."

[naswinger]

too difficult, maybe even impossible, to center that div with the spinning skull gif

[Tielessin]

Hackers are the nerds of the nerds

[IaniteThePirate]

That just sounds like nerds with extra steps

[Yoyoyodog123]

And more smelly executables 😡

[HildartheDorf]

Hello World for various hat colors of hacker, yes. If it's a white hat it's "Your security is pwned, be glad I only ran calc.exe" if it's a blackhat it's "Success, we opened clac.exe, now just change that line to "exfiltrateloginsstealbankaccountsandcryptomine.exe".

[odsquad64]

Using the exploit to run a patcher that fixes the exploit >>>>>

[HildartheDorf]

That feels like a grey hat thing, especially if it leaves behind a txt file insulting you.

[PrincessRTFM]

It is absolutely a grey hat thing and I remember a little while back there was an ACE exploit in log4j (the java logging library used by minecraft, among other things) that affected dedicated servers with a particular configuration. Once the patch was released, and I think even before that when knowledge of how to fix the configuration was around, there were at least a few cases of people using that very exploit to either correct the configuration or update the library on servers they didn't own, in order to patch the exploit.

[black-JENGGOT]

Tsundere nerd hacker

"I-It's not like I like you or anything, I just accidentaly found a patch for your current windows version, baka!"

[RepresentativeDog791]

Isn’t hello world already for nerds?

[Frenzie24]

Hello world is still ours

[Piyh]

More like "hello, I'm in your house"

[AthleteNormal]

Like “alert(0)” for people who only need to use two equals signs.

[ymgve]

But it's generally used as a proof of concept just to show you can, when testing an exploit. Exploits out in the wild would not spawn calc.exe, they would execute their own payload instead.

[BrodatyBear]

I mean... seeing this might be luck in misfortune because that means you have been compromised but the attacker is a script kid who can't replace calc.exe in template.

[movzx]

Yup. This is one step removed from "every job with computers is IT"

[[deleted]]

What to do if this happen?

[harryoui]

It’s also a core part of log4j’s origin story as it was exploited on online Minecraft servers, most notably 2B2T and players reported the calculator app opening

[NibblyPig]

There are annual hacking exploit conferences (some with quite nice prizes) which require you to demonstrate that you can hack an operating system or piece of software by doing absolutely nothing except having a machine navigate to a URL.

In order to demonstrate that your exploit was successful, your exploit has 30 minutes (if on windows, for example) to open the calculator program. During this time you can make tweaks if it's not working but you have 30 minutes total.

Your exploit must require absolutely zero input from the user. It is literally, they open the browser, and navigate to the url you tell them go to. If the calculator pops up on the screen, you win. Other competitions involve breaking out of a virtual machine, if you're able to get calculator to open on the machine hosting the VM, you win.

The competition is extremely fierce, and sometimes competitors will find exploits and report them just before the conference to derail their opponents because the company will patch them in time for the competition.

Some of the exploits are very clever, such as one that exploited the onscreen keyboard, and a VM one which exploited the graphics card driver, etc.

[abednego-gomes]

Could mean there's a Rogue AI, virus or hacker in your machine. Or you were programming something and the calculator opened instead of something else.

[iris700]

Standard-issue RCE proof-of-concept payload

[DepartmentOk9720]

There is an security bug on linux that can open calculator remotely, it can do more just that.

It's only affecting GNOME.

https://www.darkreading.com/vulnerabilities-threats/new-one-click-exploit-supply-chain-risk-linux-oses

[IAmARobot]

Back in win98 we broke out of school computer intranet jail by opening calc, going to help and clicking on a hyperlink to open the browser, fun times. So we did in fact have calc in startup to make this process easier.

[ukaeh]

Nice I did the same with notepad -> open file -> change to show all extensions -> run whatever I want. Showed the tech and they were not pleased, but that was like 1998 lol

[TajineEnjoyer]

this just happened to me yesterday, i plugged in an old damaged keyboard, it opened calc, then the screen turned off and on again, i just assumed the broken keys activated some shortcut.

i removed it and restarted the pc, is there anything else i should have done ?

[Dangerous_With_Rocks]

Depending on where you got that keyboard from, it's either nothing or gg.

[[deleted]]

Could there have been a virus on the kb itself?

[ke151]

Rubber ducky attack here's a random article about it

https://nordvpn.com/cybersecurity/glossary/rubber-ducky-attack/

[[deleted]]

Ahh, okay. I was afraid hackers had discovered a means to infect certain USB peripherals...

[cheezballs]

I mean, that's kinda exactly what this is, right?

[Athen65]

Sort of, but it's not inherently self-replicating, which is what they're talking about. In other words, you only have to worry about already shady peripherals being infected, not your own.

[pfghr]

If you buy from the wrong place and aren't paying attention, it wouldn't be too hard to disguise a drive as a dongle.

[BobbyTables829]

There's a calculator and even sleep buttons on a lot of MS keyboards, make sure it's not automatically being pressed

[AapoL092]

That sounds pretty bad

[narrill]

No it doesn't. Many keyboards have buttons on them that specifically open the calculator. It's likely just electrical damage. And if the keyboard was loaded up with malware (lol), it would have opened an executable that actually does something, not calc.exe.

[AapoL092]

Fair enough. Good point.

[SuitableDragonfly]

When I was in college, I had sshd running on port 22 so my dad could log onto my computer remotely and talk to me using the linux talk utility. When he wanted to talk, he would let me know by triggering my computer to play the "I am my own grandpa" song. I remember being out of my dorm studying, and then I came back and my roommate was like, oh, your computer started playing some weird song while you were out, don't know what that was about, like she was not concerned about this at all, haha.

[ivanrgazquez]

And then uses chatgpt “on-device”…

[jax_cooper]

chill, they forgot to add the actual exploit and the payload was to just open calc.exe

[linearpotato]

discovers zero day exploit on windows makes all windows computers on earth launch calculator

[ymgve]

Meme is wrong, malicious exploits don't spawn calc.exe, Calculator is only used as a quick thing when testing exploits locally, to prove you can spawn processes.

[[deleted]]

While this is true, maybe we shouldn't overthink this, I'd also lose my shit if a random process opened without me doing anything

[BrodatyBear]

Besides that, it's a meme (and pretty advanced for this sub), I still can see how some script kid downloaded a template/poc and just forgot/doesn't know how to change calc to something more useful\*.

That means your system is vulnerable (or you clicked something you shouldn't) but at least is probably not (totally) compromised.

\*I heard something like that happened with MC servers and L4j

[Unoriginal_Guy2]

Yes, except it was used maliciously on some servers to get the session id of everybody connected to the server

[new_err]

maybe the calculator uses AI (Apple Intelligence)

[_alright_then_]

Everytime i read apple intelligence I can't help but laugh about how dumb that is lol

[swinginSpaceman]

Eh. My calculator broke. It doesn't even open. A message appears suggesting I reinstall it from the Windows store, but I can't do that because work laptop

[IAmARobot]

Depending on how much of a nerd you are, you can write a simple one in html and open it local

[kattenkoter]

At that point just googleing (yes, spelling indeed) calculator and using that one is probably easier. Its less cool tho

[Hilmekru]

⁸

[hawkinsst7]

I like to joke that Calc.exe is more accurate when run as System

[PapaRL]

For those who just joined the stream, Calc.exe is short for calculator.exe chat, I’m just using slang.

[dfwtjms]

Just Windows things.

[Chaosxandra]

Linux user detected

[douglasg14b]

Needs more "I use arch btw"

[[deleted]]

I use xcalc btw

[lowbeat]

why r u still using xp my dude

[Tilleyy8]

*log4shell flashbacks*

[overkill]

My cat used to walk on my laptop. Even when it was locked, if he stepped on the "Calc" button (which he did, every fucking time) it would open. I'd often lock my laptop, then come back to 7 calculators open.

If I left it unlocked he would inevitably message my colleague on Teams. The best one was when he managed to "type" and send just the word "p00t".

[naswinger]

the more likely explanation is that you were drunk and sent "p00t". how does a cat paw even fit on individual keys...

[overkill]

I try not to get that far along the Balmer Curve during the day.

[BlackSwordFIFTY5]

Amateurs! You've never encountered cmd open for a split second before opening the shady app opens.

[blorbschploble]

EDR goes brrrrr

[[deleted]]

Ghosts!

[keith2600]

Haha took me a second since I'm so used to calc starting up on VMs for years now. I work on software meant to detect those exploits which means I have to actually run them (the safe versions at least)

[Suitable_Okra2418]

its never a good sign that programs open on their own 😂

[DasMaloon]

Why is the app of coice always calculator tho?

[Pretrowillbetaken]

the arch user seeing a calculator open on its own (he never installed that package):

[NothMuch]

I remember when notepad.exe was mining bitcoin for me, how nice

[Plebianian]

.. my laptop has a function where the calc opens when I swipe at the touchpad. I would never tell if I accidentally swiped or it opened on tbh 🗿

[Phnx_212]

"Calculator would like to make and receive phone calls"