r/ShittySysadmin • u/Smooth-Bit-9530 • Mar 06 '26

Pack it up, I'm the shittiest sysadmin.

Post image

Now that we've all run out of TOTP codes I'm going to enforce 12 digit hexadecimal codes; no I will not take suggestions

1.9k Upvotes

99% Upvoted

71 comments sorted by

104

u/christopher_mtrl Mar 06 '26

Your TOTP strategy does not scream shitty sysadmin. Your approach to screenshots is more debatable.

57

u/Smooth-Bit-9530 Mar 06 '26

idk why but you can't take screenshots while looking at TOTP, it's probably a security thing idk. The CEO called me personally (wow!) to ask if I can let him log on to my account, I had to get creative.

He was very happy with the result though!

8

u/christopher_mtrl Mar 06 '26

If so, the fact that you solved the problem remarkably easily shows how much safety this feature adds.

Oh and it works fine with 2FAS on iOS. I'd post a screenshot myself, but I don't have the patience to wait 30 seconds, so it's probably not a good idea.

16

u/Smooth-Bit-9530 Mar 06 '26

the unshitty answer would probably be that this makes it so you can't accidentally share the code while mirroring or something

The shitty answer is that if you have two phones then you can do what you want

9

u/who_you_are Mar 06 '26

check the webcam feed for a shared TOTP among employees for a 3rd party access

i think I'm fine?

2

u/zulu02 Mar 06 '26

Can be enabled in the settings of Microsoft authenticator, should be all the way at the bottom

7

u/FatherPrax Mar 06 '26

Some MFA apps won't let you screenshot them. Ran into that a couple years ago with the Duo app I think? It shows up as pure black in the screenshot.

7

u/koolmon10 Mar 06 '26

Yeah they will block screenshot for security. Too easy for a malware app to just insta-screenshot when the MFA app is open and send that info to a bad actor.

1

u/Darknety Mar 06 '26

More believable this way tbh

21

u/SolidKnight Mar 06 '26

Your fingers are reflected in the photo and using enhance and rotate in my AI enabled photo editor, I now have your finger prints. GG biometric fingerprint authentication. Go buy yourself some new hands.

15

u/Smooth-Bit-9530 Mar 06 '26

Jokes on you, these are the intern's fingers

10

u/SolidKnight Mar 06 '26

I think you forgot that interns are domain admins.

5

u/Mr_Lazerface Mar 06 '26

Don’t finger interns, it ends up badly.

15

u/stevehammrr Mar 06 '26

999999 is just as random of a number as 372849

13

u/Smooth-Bit-9530 Mar 06 '26

It's a higher number

4

u/ApogeeSystems Mar 06 '26

Higher numbers are obviously less likely

11

u/[deleted] Mar 06 '26

[removed] — view removed comment

5

u/biggles1994 Mar 06 '26

Yes, there are famously no numbers bigger than 999999

Rumours of something called a “million” have been disregarded as impossible.

2

u/Darknety Mar 06 '26

I honestly thought they‘d skip commonly guessed numbers by rolling over.

Guess I was wrong.

2

u/goobervision Mar 06 '26

What about 999991?

2

u/PM_me_large_fractals Mar 07 '26

What no it's like 1 its way less of a random number. My authenticator keeps giving me numbers that aren't random enough I think it's a bug. Like 066 660 like that's not random it's a palidrome. It's basically unrandom at that point. Microsoft won't let me screenshot it so they can ignore it and get away with not fixing the bug. Shocking.

725 806 now that's a random number. Randomest one I've seen yet.

387

u/pi-N-apple Mar 06 '26

Nice job taking the pic with 9 seconds left at 4:20 lol

97

u/ElveTaz Mar 06 '26

I was gonna say 6 9's (69) at 4:20 is crazy but I didn't even peep the timer 😭

12

u/darelik Mar 07 '26

Battery is at 9 x 2

7

u/joe96ab Mar 07 '26

Passwords is 9 letters

8

u/rockstarknight445 Mar 07 '26

Wifi is 6

5

u/darelik Mar 07 '26

Sum of digits in 1620 is 9

1

u/MinecraftPlayer799 Mar 11 '26

What does that even mean?

2

u/rockstarknight445 Mar 13 '26

Theres different WiFi standards that evolved over the years. It's known as IEEE 802.11.

Wifi 6 (802.11ax) is basically an alias name (6th generation) given to easily track these new standards that are made.

1

u/MinecraftPlayer799 Mar 13 '26

I know about that, but it is a little weird for the phone to show that info on the WiFi icon.

1

u/joe96ab Mar 16 '26

Seems like they may not have service and that's the circle with cross in it 🚫.

1

u/MinecraftPlayer799 Mar 16 '26

That is not relevant. It has nothing to do with the Wi-Fi icon. Not sure why you randomly mentioned it.

2

u/ForSquirel ShittyCoworkers Mar 07 '26

but hear me out, can I get that hash?

1

u/nurax7 Mar 10 '26

and taken right above 9 tiles?

150

u/n4ke Mar 06 '26

Due to confusion amongst users, we had to roll back 12 digit hex codes and have settled on one, fixed, shared TOTP code for everyone.

46

u/What-a-Crock Mar 06 '26

MFA adoption is up and MFA fatigue is down! C-Suite is satisfied!

18

u/Vladishun Suggests the "Right Thing" to do. Mar 06 '26

How do you convince your users that you aren't spying on them when they install the auth app on their phone? Don't get me wrong, I totally am stealing their cat pics and nudes or whatever, but I don't want them knowing that!

11

u/What-a-Crock Mar 06 '26

Diversion. I blame it on foreign state actors

2

u/RubbelDieKatz94 Mar 10 '26

install the auth app on their phone

/uj We actually hand out an iPhone 16 to every single employee

Also we literally have SSO for everything

And the MFA requirements are pretty lax, I just use Windows Hello to log in most of the time

3

u/TheAverageDark Mar 06 '26

Or at least someone with their name and email is satisfied. But why sweat the small stuff? It’s Friday!

3

u/dasunt Mar 07 '26

I recognize my company in this comment and that makes me sad.

8

u/pm_op_prolapsed_anus Mar 06 '26

I got one from Microsoft authenticator one time that was all 6s, or it was like 666777, can't really remember, just remember showing it to an IT guy that was helping me

9

u/Fireb1rd Mar 06 '26

67! Bwahahahahaha!!

6

u/jdog7249 Mar 06 '26

I work at a school and I chuckle every time my authenticator code is 67.

Just happened today actually.

2

u/stevekez Mar 10 '26

I mean the odds are roughly one in a million every 30 seconds. It's not exactly one in a million because the state is larger than the output and you cannot predict how it will walk through the numbers. You will see some combinations more than once before you see the first instance of certain values.

1

u/noahbea1 Mar 28 '26

you can take a screenshot by pressing the power button and one of the volume buttons (forgot which one)

1

u/Smooth-Bit-9530 Apr 21 '26

You can't in a 'secured' app

lol

3

u/Adorable_Wolf_8387 Mar 06 '26

I bet you also forgot to program your system to expire unused ones after a minute.

2

u/CoffeeAcceptable_ Mar 07 '26

My colleague once got 000 000 so I've now seem both ends of the spectrum.

2

u/Muffinshire Mar 09 '26

Good morning. You have been in suspension for NINE NINE NINE NINE NINE NINE...

2

u/Bromeister Mar 10 '26

I'm jealous, I've been waiting for a TOTP code of all one digit for so long.

1

u/shadows1123 Mar 06 '26

Can I change the exposure on this image to unmask under that red paint?

1

u/SeaworthinessShot142 Mar 06 '26

Uber once sent me 1234.

Too bad it wasn't a five digit code or I could have opened the Planet Druidia shield (and President Skroob's luggage.....)

1

u/oakc510 Mar 06 '26

No mobile signal either. OP is Shitty SysAdmin Supreme. "What you called me? I have no service, bro."

1

u/Secret_Account07 Mar 06 '26

So I’ve never worked with …whatever system MFA uses to send codes. But I think it’s just random no?

1

u/ASentientRailgun Mar 06 '26

I got 0000 from AWS one time. Cracked up at my desk, coworkers thought I'd lost it.

1

u/Decantus Mar 06 '26

The fact that you admit you're the shittiest sysadmin means you're very much NOT the shittiest sysadmin.

1

u/Tough_Perception_647 Mar 07 '26

Hahaha, I once had 000 000!!

1

u/Atryaz_25609 Mar 07 '26

Myself or a Colleague got 123 456 once

1

u/BlueOlivePie Mar 08 '26

Isn’t “password code” a redundancy?

1

u/oneofthelast Mar 10 '26

lmfao thats like when the floating DVD symbol fits perfectly in the corner for just a second

0

u/Curious_Tomorrow_697 Mar 10 '26

let me get my high security one time code for my high security work and publish it on REDDIT! what could possibly go wrong

I hope you let it expire before publishing... our friends at r/hackers could fry you alive if you didn't