This behavior is annoying as hell, but I also think it's for the best. Excel specifically was way too trusting, has a full development environment with the ability to auto-run macros, and has become a convenient vector for delivering malicious code.
this post was submitted on 23 Sep 2025
750 points (98.6% liked)
Microblog Memes
12310 readers
2071 users here now
A place to share screenshots of Microblog posts, whether from Mastodon, tumblr, ~~Twitter~~ X, KBin, Threads or elsewhere.
Created as an evolution of White People Twitter and other tweet-capture subreddits.
RULES:
- Your post must be a screen capture of a microblog-type post that includes the UI of the site it came from, preferably also including the avatar and username of the original poster. Including relevant comments made to the original post is encouraged.
- Your post, included comments, or your title/comment should include some kind of commentary or remark on the subject of the screen capture. Your title must include at least one word relevant to your post.
- You are encouraged to provide a link back to the source of your screen capture in the body of your post.
- Current politics and news are allowed, but discouraged. There MUST be some kind of human commentary/reaction included (either by the original poster or you). Just news articles or headlines will be deleted.
- Doctored posts/images and AI are allowed, but discouraged. You MUST indicate this in your post (even if you didn't originally know). If an image is found to be fabricated or edited in any way and it is not properly labeled, it will be deleted.
- Absolutely no NSFL content.
- Be nice. Don't take anything personally. Take political debates to the appropriate communities. Take personal disagreements & arguments to private messages.
- No advertising, brand promotion, or guerrilla marketing.
RELATED COMMUNITIES:
founded 3 years ago
MODERATORS
I once made an xlsx with a VBA module and put it in my often-late coworkers' startup folder. It would check log-on time and if it was between 9:01am and 9.59am it would send an email to the rest of the team apologizing for being late that day.
Stunning that I could do that on what was supposedly a locked-down internal system.
I once used VBA to script and automate 90% of my old desk job. I just needed a way to automate keyboard input and some basic conditional controls.
I couldn't install python or run batch scripts as the machine was heavily locked down, but luckily MS provided all the tools I needed inside excel. System admins hate this one trick, thanks microsoft!
haha yeah same. We had this terrible internal CMS that I would automate the hell out of.
LOL pls say more
You just enable the VB script to check the system time on launch and auto close silently if outside those times.
Excel integrates with all Microsoft products so it can access Outlook and send an email. You populate the email fields as you want and put it inside an if loop of the times and exit. Even without outlook I think it might be able to send emails with some plug-ins or via a browser window, navigate to mail, and do basic webscraping and clicking like you'd do with Beautiful Soup or AHK.
The whole setup can just be worked out with some googling and stack exchange threads.
It was a running joke he was always late and it wasn't exactly the best run company so there was no negative outcomes really, just harmless fun.
My workplaces malwarebyte's settings end the excel process tree if it tries to run a script that accesses other M$ products.
Was super annoyed when I discovered that while trying to script in an email template for the form I was making, since at the time staff never cc'd the correct people and would then bitch out finance for not paying them.
What in the actual fuck.
what an incredible jackass
I mean, if people weren't desensitized to warnings like this by getting them constantly, I think you'd be right
In IT we have to consider the signal to noise ratio of warning users.
There is malware that can infect you simply by opening an office document. One of the cooler security trainings I've been through was a recorded demo of it. Opened a doc on one computer, enabled editing, then another computer was able to extract credentials from ram or something.
They're borderline works of genius, some of them
Instead of asking why your word processor should have the ability to run arbitrary code, you just inconvenience everyone else on the chance it might. What even.
Yup, it's a shit bandaid to mitigate a shit design. The MS specialty.
Scripting is great in Excel, but I've never encountered or heard of a use for it in Word.
That's partly because the API for manipulating word docs with VBA is incredibly awful.
load more comments
(1 replies)
load more comments
(1 replies)
Yep.
A constant stream of creating problems and then creating solutions for those problems, which cause more problems....ad infinitum.
Go back and fix the root cause?
Impossible!
Then our 2nd and 3rd tier 'solutions' would have all the 'solutions' based on them not work!
Just TODAY I generated a text file via a bash script, and when attempting to open it in Notepad++ Windows insisted on warning me about potential hazards because it couldn't verify who created the file. A text file! Heavens. I wonder how long I'll last in that blasted Windows centric environment.
Not so far-fetched when you realize that Windows crams AI into everything and the text file might contain malicious instructions.
Yeah, but honestly it wouldn't even need AI to have this issue with the kind of bloated spaghetti code that MS seems to produce.
It was a text file with 80 rows of `username="username username@example.com" mappings (for an svn to git conversion). Nothing nefarious.
I call BS. More likely notepad++ attempted to update and their new installer is no longer signed as the developer has been having issues getting a new signing certificate based on the app name (they want a legal identity).
No, Windows Explorer itself does this when attempting to access network files under some byzantine set of conditions I've never been able to get to the bottom of. For instance, my machine at work bitches at me whenever I attempt to open or copy any log file (which is obviously just a text file) from either of my Linux based servers.
I use Notepad++ also, and trying to open one of these files either from Explorer or the file open dialog in NP++ triggers the warning.
I literally did it just now to generate this screenshot.
load more comments
(1 replies)
It was most certainly not Notepad trying to update, it very definitely was Windows intercepting the file open process.
load more comments
(1 replies)
Nothing compares to the foolish audacity of excel to switch numbers to scientific notation by default. This can't possibly be the most commonly desired outcome. Its the most annoying "feature" they have that has existed forever.
Hey. Look at that column of dates you got. Would be a shame if they got converted to random numbers.
Hey that's a cool sequence of genes. Would be a shame if we converted a few into date format when you try to save as .csv
load more comments
(4 replies)
Im sorry, the auto date formating is by far the worst. Just leave my numbers the fuck alone man, numbers are supposed to be precise, judt dont fucking touch em. Rant over lol
Like trying to have sex in a full body plaster cast.
The chafing...
at least you’re havin’ sex …
Not in a full body plaster cast I'm not.
They didn't leave a hole for peepee and poopoo?
While we could have a serious academic discussion about the logistics of full body plaster cast sex dynamics, we could also... not.
As someone who doesn't use microsoft stuff.. anyone here have an explanation? lol
Microsoft documents can contain macros (scripts). While there are legitimate uses for macros, bad actors can use them for malicious purposes.
Protected mode prevents the macros from running.
I hope the EU sues the shit out of MS some time for this "feature". Write protection is one of the few things Libreoffice can't handle well, and from my perspective, that is the entire reason they have it. Also, funny enough, Office 362, their own fucking product, also can't handle it. So you need a computer where you can install the desktop version, just to untick the fucking "write-protected" box and do your job.
In academic research, you often have to apply for money from funding agencies, using write-protected templates. If you don't use the exact template or if it looks distorted in some way, you're out (of consideration for the funding, and long-term out of your job).
Well before it people were getting hacked by VBS macros so yeah it makes sense..
load more comments
(2 replies)
I'm so glad I don't work in industries like that.
Send me a doc file? In an email? Nah.
Just send me a webpage or PDF I can open in the browser. I'm not opening anything that requires downloading software.
Malicious PDFs are a thing.
Also malicious web pages. You might need to do slightly more than opening the page, but with all the captcha and similar prompts people are click happy today.
Personally surprised there aren't more attacks that mimic the click to prove you aren't a robot and other captcha prompts.
"Here's the draft, please mark up and return." And it's a fucking PDF print of the word or excel doc.
Every damn week.
load more comments
(1 replies)
But it will just close and reopen and act like nothing happened, except your work is gone. Just switching meeting room? Well, who does that!?
Is it ribbed for her pleasure?
view more: next ›