On Sun, 28 May 2017 15:18:30 +1000
Cameron Simpson wrote:
Suggestion: when the popup is up, do a ps. Close the popup. ps again.
If you're
lucky you'll be able to see the responsible program (or some "alert" tool,
invoked by the evildoer).
I was about to try that, but apparently they are timed
so they go away before you get a chance to track them down :-(.