Pwned: The Information Security Podcast

The episode is a celebration/retrospective where the majority of the runtime is spent on whiskey discussion, toasts, and guessing who said old quotes. Substantive cyber observations (IoT risk, supply-chain, bad investors) surface occasionally but are thin and underdeveloped, never sustained for more than a few exchanges before dissolving into agreement and filler.

“Cheers. Delicious.”

“It is still excellent.”

A couple of mildly contrarian positions emerge - TAM overinflation and product manufacturers being a root cause of the industry's problems - but they are asserted rather than argued, and the broader framing (band-aids over root causes, IoT attack surface expanding) is well-worn cybersecurity commentary.

“the total addressable market for cyber is overinflated”

“we're spending the money in almost all the wrong ways”

There are no external guests whatsoever - this is a host-only retrospective episode. The two hosts present as practitioners with founding experience, but their credentials are barely substantiated in the transcript itself, and the absence of any outside voice severely limits the ceiling here.

“I founded a couple of companies, but this was the first company and I was going off for my first round”

“I've been doing this for a long time, over 20 years”

A handful of named specifics appear - the Aliquippa water system attack, a Stanford stat on ChatGPT cybersecurity decisions, SolarWinds' post-incident self-assessment, Glenn Bressner/Mid Atlantic Capital, and the $10M EPA water utility figure - but most discussion is anecdotal and abstract, with no dollar figures, timelines, or outcome data attached to most claims.

“We saw, um, an attack against Aliquippa in Pennsylvania”

“54% of the time when it made a decision in that kind of sitch around cybersecurity, it made the wrong one and created something that was vulnerable”

With no guest present, the hosts spend the episode largely agreeing with each other and pulling quotes from a cup; there is no follow-up pressure, no productive disagreement, and no challenging of any claim. The format is a pleasant but uncritical mutual affirmation session.

“Yeah. Yeah.”

“That's definitely you.”