HACKED

There are genuine non-obvious insights scattered throughout - the 1.5% SIEM detection rate from Verizon, the blacklisting critique, the 5000-employee threshold heuristic, and the MITRE ATT&CK framing - but these are diluted by extended stretches of generic career advice about passion and community that any tech podcast could produce.

“1.5% of the incidents that Verizon worked were detected by people. Sim”

“The whole concept of blacklisting failed us. You know, it failed us for antivirus, it fails us for IDS and IPS”

A few genuinely contrarian positions surface - dismissing degrees and certifications, admitting bias openly, and the 'hire happy people not unhappy escapees' hiring philosophy - but the bulk of the episode recycles standard pen testing career advice and community-contribution talking points that circulate widely in the infosec space.

“I honestly don't care what degrees you have”

“I don't like hiring unhappy people. Um, if somebody is talking to me and they're like, I hate my job and my life sucks”

John Strand is a genuine practitioner - BHIS founder, SANS instructor, prior Accenture and Northrop Grumman offensive work on classified programs - who speaks from real operational experience rather than thought-leadership positioning. Not a top-tier enterprise CISO but a credible, working expert.

“got picked up by Northrop Grumman, worked at Northrop Grumman doing um, offensive testing for classified programs”

“a lot of pen testers at BHIS write the equivalent of a novel a week. Um, you know, our reports...will be 100 to 200 pages per week”

The episode earns its specificity points with named CVEs (MS08-067, Conficker, Dan Kaminsky), the Cobell v. Department of Interior case, the Verizon 1.5% SIEM stat, card game mechanics (10 cards per deck, 20-sided dice, roll-over-10 threshold), and 100 - 200-page report norms; but many other claims (e.g. '10% or less of organizations are very aware') are asserted without sourcing.

“1.5% of the incidents that Verizon worked were detected by people. Sim”

“you had 08067, you had Conficker, you had Dan Kaminsky”

The host's questions are pre-planned and largely open-ended with no real follow-up or challenge; he tends to summarize the guest's answer back to him rather than probe it, and no claim goes meaningfully tested or pushed throughout the episode.

“one thing that I've kind of taken from what you've described here when looking for talent is it really just comes down to passion”

“I definitely appreciate. I know the listeners will as well, knowing, uh, it is a biased opinion, but still there's, there's truth there”