Sign in

Steve Turner

@beingageek.com
245 followers 189 following 25 posts

Cybersecurity geek. Into Legos and adding games to my steam library I’ll never play. Posts are my own.

PostsRepliesMedia
Reposted by Steve Turner
Zack Whittaker @zackwhittaker.com · 07/12/2025
I was featured in a UK documentary about stalkerware, an insidious kind of phone surveillance I've investigated for years. In this deep-dive for this.weekinsecurity.com, I look back at what I've learned during my investigations, why stalkerware is a global threat, and what actually gives me hope.
this.weekinsecurity.com
I've investigated 'stalkerware' for five years. Here's what I've learned
Stalkerware is a pervasive surveillance used by millions around the world, but these operations keep getting hacked and leaking victims' private phone data.
04416
Reposted by Steve Turner
Zack Whittaker @zackwhittaker.com · 31/10/2025
It's Friday and you've probably had enough cyber... but I'm re-upping my story on this.weekinsecurity.com about how AI browsers are shipping with security bugs that put your private data (saved passwords, credit cards, browsing history) at risk. Here's why AI browsers aren't safe for general use.
this.weekinsecurity.com
AI browsers are a hot mess of security risks
AI-enabled web browsers are putting their users' data, security, and privacy at risk from rudimentary prompt injection attacks.
22515
Reposted by Steve Turner
Zack Whittaker @zackwhittaker.com · 04/10/2025
Discord said late on Friday that hackers stole users' government-issued IDs (passports and driver's licenses) from one of its customer support databases. I wrote a few words about the risks of age verification laws, and why collecting people's government IDs is bad for security and privacy.
this.weekinsecurity.com
Discord says users' government IDs used for age checks stolen by hackers
Thanks to age verification laws, expect more data breaches of users' government-issued passports and driver's licenses.
219291
Reposted by Steve Turner
Gergely Orosz @gergely.pragmaticengineer.com · 04/09/2025
Wild to me that a CEO sets goals about outcomes that have nothing to do with the business (are customers more satisfied? Is the product more reliable? Etc.) Setting the goal of what % of code should be AI-generated is as useful as setting the goal of how many lines of code devs should write per day
1427530
Reposted by Steve Turner
Barry Dorrans @blowdart.me · 01/09/2025
A big round of applause to Ars. I really want to see what the submission was to Defcon that got accepted, because this was bad.
58218
Reposted by Steve Turner
Dare Obasanjo @carnage4life.bsky.social · 16/08/2025
Companies forcing five days in-office for Zoom calls while still doing remote interviews is peak unseriousness. In an era of ChatGPT and North Korean hackers slipping through hiring processes, it shows a clueless grasp of where the real threats are.
wsj.com
AI Is Forcing the Return of the In-Person Job Interview
More companies are returning to the old-school, face-to-face meeting to combat cheating by candidates and more ominous digital threats
3809
Reposted by Steve Turner
Nathan McNulty @nathanmcnulty.com · 15/08/2025
Le sigh... (at the article) This isn't bypassing FIDO auth (it's called passkeys now btw). It's just asking the user to use a weaker method that they were allowed to use. The solution is to randomize the password so nobody knows it, and if you can't, use auth strengths to prevent weaker methods
5121
Reposted by Steve Turner
Dare Obasanjo @carnage4life.bsky.social · 25/07/2025
I suspect the major negative fallout of vibe coding isn’t going to be taking jobs from software developers but instead an epidemic of insecure apps that get hacked with ease
2859780
Steve Turner @beingageek.com · 04/06/2025
Did I go a little crazy? Yes. Am I proud of it? Absolutely!
010
Steve Turner @beingageek.com · 03/06/2025
I'll be at Identiverse on June 3-6th, come say hello at the Microsoft Security booth (Booth # 613)!!!
000
Reposted by Steve Turner
Dare Obasanjo @carnage4life.bsky.social · 26/05/2025
A piece of career advice I give people I mentor is to go where you are valued. It means it’s important to be in a role where you are respected, recognized and rewarded. Sometimes despite tenure, it’s better to leave and accelerate your career trajectory versus staying where you’ve been written off.
727048
Steve Turner @beingageek.com · 20/04/2025
So happy to be rid of my swasticar. #rivian
A light blue rivian r1t truck in front of a hour with an American flag to the left of it
2172
Reposted by Steve Turner
TashasEv @tashasev.bsky.social · 01/03/2025
Dear young gen-x/elder millennials We should just buy back the brand rights to all the things that were good and remake them Like Pizza Hut and Blockbuster and Think Geek and Toys R Us
261308
Reposted by Steve Turner
ChiefGyk3D @chiefgyk3d.com · 21/10/2024
It still irks me that #Bluesky still doesn't have proper MFA and their version is just Email. I would really love to use my #Yubikey! Threads is using OATH TOTP at least as is my crossposting tools, but my #Mastodon is using FIDO/WebAuthn. #Infosec #Cybersecurity #Security
3174
Steve Turner @beingageek.com · 10/09/2023
Random weekend adventures make you find the most awesome things in the most unlikely of places #gottacatchemall
Pokémon mural with two human Pokémon masters in front of it
020
Steve Turner @beingageek.com · 25/07/2023
Want to start my time here on a paw-sitive note #doggos #pawsitive
Two dogs, on the left Black and white border collie lab mix and on the right is a tan and black pitbull Shepard mix
050