The 443

The episode covers real security news with occasional useful observations - the 5% false-positive rate on safety classifiers, the 2022 auth-bypass CVE underpinning FortiGate credential theft, and the Brian Krebs deanonymization of Nightmare Eclipse - but these are interspersed with heavy speculation, casual banter, and jokes that dilute the useful content per minute significantly.

“around like 5% of all requests going through, uh, Fable 5 would trigger it and block it and bump it down to opus 4.8”

“they also noted that their publicly available models, think like Opus 4.8, were able to find the exact same vulnerabilities without requiring a jailbreak too”

The hosts offer a mildly interesting regulatory capture hypothesis and a historically grounded point about Microsoft and the origins of full disclosure, but most commentary is reactive news recap with no first-principles arguments or genuinely contrarian takes that a regular security news reader wouldn't arrive at independently.

“it feels like this might be some form of like regulatory capture where they're trying to intentionally lower the ceiling of capabilities for some other ulterior motive”

“Microsoft was one of the first to start doing trustworthy computing and start to maybe react to researchers and treat them seriously. But now it's like people are getting frustrated again”

There are no external guests; both speakers are WatchGuard vendor employees doing a news recap. They demonstrate baseline security industry familiarity but no deep practitioner expertise, original research, or operator-level execution experience is on display.

“welcome back, man. This is the first time you and I have had a news podcast. We been releasing a lot of cool partner ones on events. We're both back home now”

“What Ryan, our analyst, wrote about, which is where people are just, you know, we, we found people pretending to have watchguard SSL infrastructure”

The FortiGate segment surfaces concrete figures - 75,000 devices, 194 countries, 1.6 billion credential attempts, the 2022 localhost proxy-header auth bypass CVE - and the Nightmare Eclipse section cites Krebs's LinkedIn evidence; however, a good portion of the episode is speculative and the hosts frequently acknowledge they cannot verify claims.

“includes nearly 75,000 unique firewall URLs from over 194 countries and 21,000 affected domains. And it represented roughly 50% of all firewall Fortinet firewall devices currently facing the Internet”

“there's a CVE that Nightmare Eclipse claimed that Microsoft took a long time to uh, validate. Microsoft credited that CVE to a security researcher based in Germany who on their LinkedIn account uh, lists that they worked for Microsoft from 2022 to 2025”

The hosts rarely challenge each other; when one floats a conspiracy theory the other quickly agrees or retreats with 'maybe it's just me being cynical.' Questions are mostly rhetorical setup lines rather than probing follow-ups, and no significant claim is pushed back on with evidence or counter-argument.

“That seems fair. And maybe it's just me being cynical”

“I also like, I think that is one highly likely scenario. I also think another scenario is Anthropic's in on this too and this is another kind of marketing ploy”