# Leave your screen unlocked, meet developers paypal.com > Source: > Published: 2026-08-16 11:26:42+00:00 # Leave your screen unlocked, meet developers@paypal.com *2026-08-16, by Anthony “chovy” Ettinger.* **How this was written:** drafted with an AI assistant from my own notes, then edited by me. ## The thread Somebody dropped a post in one of those IT humor groups — [this one](https://www.facebook.com/groups/it.humor.and.memes/posts/29312609395004799/) — and the comments turned into a wall of 90s office war stories. Some of them were genuinely funny. Not meme-funny. Funny like you were there and your stomach dropped a little because you remembered doing it. So here's mine, and then the argument underneath it, because I think we threw out something useful when we cleaned all this up. ## Leave your screen unlocked, meet the mailing list The rule at PayPal was simple and unwritten. Walk away from your desk at lunch without locking your workstation, and by the time you got back, an email had gone out from your account to `developers@paypal.com` . Every engineer in the building. From you. About whatever your colleagues decided you felt strongly about that day. The classics were donuts — you have generously volunteered to buy them for the entire floor tomorrow — and heartfelt announcements of a new personal passion you'd like everyone to know about. The medium was the joke. It went out under your name, with your signature, into an archive, in front of everyone whose respect you were actively trying to earn. Nobody wrote a policy. Nobody ran a training. You got burned exactly once, and for the rest of your career you hit the lock shortcut on the way out of your chair like it was a tic. I still do it. I've done it in my own house, alone, walking to the kitchen. ## Why that worked better than your compliance module Think about the security training you actually get now. It's an annual slide deck with a quiz at the end, and the quiz has a retry button, and everyone clicks through it in seven minutes on the last day of the quarter while on a call. The threat is abstract. The consequence is a checkbox. The feedback loop is twelve months long and lands on a compliance dashboard nobody reads. Now compare the burn. Feedback in under an hour. Delivered by the exact peer group whose opinion you care about most. Zero real damage — nobody moved money, nobody exfiltrated anything — but a perfectly accurate simulation of what an unlocked machine *is*: a stranger sending mail as you, to people who will believe it, and you have no way to prove you didn't. That's the whole lesson of identity and impersonation, taught in one lunch, for free, and it stuck for twenty years. The modern replacement is an MDM policy that locks your screen after sixty seconds. Which is better engineering and worse teaching. The machine now protects you from a thing you never learned to be afraid of, and the moment you're on a device the policy doesn't cover, you're the same idiot you were in 1999. ## The rest of the taxonomy The screen-lock burn was just the enforcement arm. The broader genre, from memory and from that thread: **The mouse ball.** Pop the ring, pocket the ball, replace the ring. The mouse looks perfect and does nothing. Later this became a strip of tape over the optical sensor, which is the same joke with worse ergonomics.**Screenshot the desktop, set it as the wallpaper, hide the real icons.** Watch someone double-click a picture of their own hard drive for four minutes. Still, I think, the most elegant one ever invented.**Rearranging keycaps** on the machine of anyone who claimed they could touch type. It was always fine. They could.**Tin foil.** The entire cube. Chair, monitor, stapler, phone, plant. This took four people and a weekend and cost about eleven dollars.**Call forwarding.** Desk phone forwarded to the desk phone next to it, or on a bad day, to reception.**Quake at 2am** over the office network, because the T1 line and the machines were sitting there doing nothing and you were on hour fifteen anyway.**After Dark flying toasters** as the ambient background of an entire industry. A screensaver you paid money for. Genuinely. And around all of it: the server in the closet you could touch, the sysadmin with a pager, the CD binder in the desk drawer, deploys that were an FTP client dragging files onto prod, and “webmaster” as a real job title on a real business card. Somebody's whole job was the hit counter. ## What I'm not going to romanticize Plenty of it was bad and I'm not interested in pretending otherwise. A lot of “pranks” were hazing with better PR, and they landed hardest on whoever was already the only one of something in the room. The all-night culture was sold as passion and was mostly just unpaid overtime with a foosball table depreciating in the corner. The stock options were confetti — I've written about [who actually didn't get any](001-post.html) — and in 2001 the Aeron chairs got auctioned off while everyone found out what “at will” means. The office was designed so you'd never leave, and a lot of people didn't, and their marriages noticed. The burn works as a story because the blast radius was small, the target was your ego, and the lesson was real. Half the other bits fail all three of those tests. That's the line, and it isn't subtle. ## The part worth keeping Norms enforced by the people next to you beat policy handed down from an org you can't name. That's the actual finding here, and it survives the death of the cube farm. The reason it's hard now isn't that we got nicer. It's that the shared room is gone. There's no lunch to walk away from, no desk to foil, no floor to buy donuts for. Everything routes through a system of record where a joke becomes an incident, a screenshot, and eventually a meeting. Send that mail today and you're not a legend, you're a ticket — sender spoofing, unattended session, mandatory retraining for the team. Fine. I'm not asking anyone to bring back mail as a coworker. But the underlying thing — that your team teaches you what matters, immediately, in a way you feel — is not a 90s artifact. It's just the cheapest security program ever built, and we replaced it with a slide deck because the slide deck is auditable. Anyway. `Win+L` . `Ctrl+Cmd+Q` on a Mac. Do it on the way out of the chair, every time, and never think about it again. Somebody taught me that for the price of a box of donuts.