"This Is Fine" with Hunter Strategy

TIL: npm has a package called "none." It does exactly what it sounds like: nothing. It still gets 300 downloads a week. There's also "is-even," which calls out to an AI model to check whether a number is even, with about 80% accuracy, because apparently modulo operators were too much work. Matt Triner sits down with Matt D'vertola, Greg Vanore, and Jeff Segal to laugh at npm's most absurd packages and then get serious about what they expose: arbitrary code execution on install, a transitive dependency system that snowballs trust across thousands of hands, and why typosquatting a familiar package name still works embarrassingly well. The jokes are the hook. The supply chain risk is the point.

Episode Chapters:

00:00 Introduction to NPM and Its Impact

06:45 The Dark Side of NPM: Security Risks

11:49 Micro Packages: A Double-Edged Sword

14:45 Cultural Reflections on Node.js and NPM

19:41 The Evolution of UI and UX Development

24:24 Cultural Divide in Application Development

28:47 The Rise of JavaScript and Node.js

33:47 The Importance of Software Engineering Fundamentals

35:30 Best Practices for NPM Security

Your product is getting worse, not better, and everyone's too busy bailing water to notice the boat isn't even the problem. Hunter Strategy's Greg Vanore, Scott Hiland, and Jeff Segal break down the Team Death Spiral: the slow, often invisible slide from a healthy team into one buried in tech debt, low morale, and busted trust. They get into why "tech debt" is the wrong word to bring into a leadership conversation, what it actually means when a team isn't allowed to lead, and why more money or headcount rarely saves a struggling team. Spoiler: the fix usually has nothing to do with the budget.Episode Chapters:

00:00 Understanding the Team Death Spiral

03:30 Identifying Warning Signs

07:18 The Role of Leadership in Preventing the Spiral

13:36 Communication and Team Dynamics

18:03 Tech Debt: A Deeper Dive

21:50 The Necessity of Automation in Agile Development

22:49 Challenges in Team Automation and Ownership

25:14 Leadership's Role in Preventing Team Death Spirals

27:11 Effective Communication and Empathy in Leadership

29:31 Balancing Fun and Seriousness in Team Dynamics

30:11 Empathy Towards Non-Human Factors

34:54 Navigating Difficult Conversations with Stakeholders

37:18 Understanding Profitability and Team Efficiency

39:09 The Importance of Maintenance Over Replacement

48:02 Agency and Resource Allocation in High-Performing Teams

54:48 The Impact of Resources on Team Performance

Security clearances are confusing enough on their own - facility clearances, personnel clearances, safeguarding, network access - and the rules rarely work the way people assume. In this episode, Matt Triner talks with Sean Blackman, co-founder and CEO of Nooks, about the real bottlenecks holding companies back from classified work, including the "chicken and egg" problem of needing a clearance to win a contract and a contract to justify a clearance. They dig into why building your own SCIF can take two years before a network is even touched, and why "go get a prime to sponsor you" is too often the only advice small businesses get.

Sean explains what Nooks is actually solving: shared, subscription-based access to secure facilities around the country, and why he sees this as a national scaling problem, not just a paperwork one. If you're a founder, contractor, or engineer weighing whether classified work is worth pursuing, this conversation lays out what to expect and where to start.

Episode Chapters:

00:00 Introduction and Overview

05:01 Introducing Nooks: Classified Infrastructure as a Service

08:01 The Challenges of Scaling in the Classified Marketplace

11:57 The Role of Nooks in Solving the Access Problem

19:56 Solving the Dual Use Problem: Defense and Intelligence

22:52 The Timeframe for Security Clearances and Network Access

28:42 The Role of Commercial Solutions for Classified

33:57 Challenges and Opportunities in the Classified Marketplace

39:52 Advice for Companies Entering the Classified Space

What actually makes a cybersecurity incident "material" - and who gets to decide? In this episode of This Is Fine, host Matt Triner sits down with Lee Kim (IANS Faculty and Practicing Law Institute member) and Jake Williams (VP of R&D, Hunter Strategy) to break down materiality in digital forensics and incident response. They cover the legal definition of materiality, the SEC's share-price test from TSC Industries v. Northway, and why the call should sit with counsel rather than the forensics firm. The conversation also digs into practical guardrails: documenting decisions in real time to avoid hindsight bias, building scenario-based frameworks before an incident hits, and where large language models do (and very much don't) belong in forensic work. A grounded, occasionally profane look at a topic every incident responder eventually has to wrestle with.

Episode Chapters: 

00:00 Introduction to Digital Forensics and Materiality

04:12 Understanding Materiality

10:45 Regulatory Frameworks and Materiality

15:32 Establishing Materiality in Incident Response

23:20 Understanding Materiality in Forensics

28:13 The Role of Stakeholders in Defining Materiality

35:37 The Future of Materiality and Regulatory Changes

41:09 AI's Role in Forensics and Materiality

Most companies exploit the NAICS system to unfairly skew government competition and few realize how deep the abuse runs. In this eye-opening episode, cybersecurity and government contracting experts Kevin Belanga, Chief Growth Officer at Hunter Strategy, and John Czaika, VP, Strategic Initiatives at Hunter Strategy, unpack how misclassifying NAICS codes can block small businesses, inflate costs, and even land shell companies lucrative contracts meant for true small firms.

Discover how industry insiders manipulate NAICS classification for competitive advantage, sometimes unintentionally and often intentionally, and learn practical strategies to spot, challenge, and prevent these abuses. We also break down how government agencies, industry players, and watchdogs can work together to ensure fair play, safeguard small business opportunities, and uphold the integrity of federal procurement.

Whether you’re a small business aiming to protect its opportunities or a government professional committed to transparency, this episode reveals the behind-the-scenes tactics that shape the federal marketplace and how to fight back.Episode Chapters:

00:00 Understanding NAICS Codes

02:38 Implications of NAICS on Government Contracts

09:24 NAICS Abuse and Its Consequences

15:59 Challenges in NAICS Classification

22:05 Understanding NAICS Codes in Contracting

27:47 The Role of Contracting Officers

33:26 Challenges in Contracting Oversight

39:12 Balancing Competition and Accountability

43:46 Navigating Acquisition Strategies

Most of us don’t realize just how deeply embedded systems and firmware influence our daily lives — from medical devices to cars, factories, and even space tech. But as these critical systems become more interconnected and complex, so do the security risks. In this episode, cybersecurity veterans Jake Williams and Mick Douglas unpack the real-world challenges of secure firmware development and why it can’t be an afterthought anymore.

Episode Chapters:

00:00 Introduction to Secure Firmware Development

02:26 Defining Firmware and Embedded Systems

03:52 Challenges in Firmware Security

08:03 Industry-Specific Trade-offs in Firmware Development

13:56 Building Security into Firmware from the Ground Up

22:24 Secure Firmware Updates and Supply Chain Risks

23:11 Understanding Firmware Updates in IoT Devices

31:14 Security Standards for Embedded Devices

40:52 The Future of Liability and Standards in Embedded Systems

On this episode of This is Fine, host Matt Triner sits down with guests John Czaika, VP, Strategic Initiatives of Hunter Strategy, and Kevin Belanga, Chief Growth Officer of Hunter Strategy, to break down the fundamentals of government contract types. John walks through how risk shifts across fixed-price, time-and-materials, and cost-reimbursement contracts, while Kevin brings the industry-side perspective on bidding, compliance, and common misconceptions. Together they trace the policy pendulum from Better Buying Power 1.0 through 3.0 and why the government increasingly favors firm fixed price. They close with practical advice for smaller companies entering the space, most notably to build strategic partnerships early and get comfortable understanding your own costs.

Episode Chapters:
00:00 Introduction to Government Contracting Fundamentals
02:26 Types of Government Contracts
05:28 Understanding Risk in Contracting
08:20 Business Development and Contract Types
11:04 Government's Perspective on Risk
13:56 Common Misconceptions in Government Contracting
24:06 Navigating Government Contracting Challenges
25:10 Misconceptions in Government-Industry Communication
27:39 The Role of Market Research in Contract Types
37:10 Advice for Small Businesses in Government Contracting

This episode explores why purple teaming is becoming a smarter security strategy, with host, Matt Triner, speaking alongside guests Jordan Lazo, Gabriel Abdalawad, and Jake Williams from Hunter Strategy. They break down the difference between red, blue, and purple teams, and explain how collaboration helps organizations improve detections and reduce blind spots. The conversation also covers why purple teaming is especially valuable for less mature organizations that need to build stronger security foundations. Overall, the guests argue that sharing tactics, testing detections, and closing gaps creates more practical security than working in silos.

Episode Chapters: 00:00 Introduction to Cybersecurity Teams

01:00 Defining Blue, Red, and Purple Teams

03:19 The Philosophy of Purple Teaming

07:57 Real-World Examples of Detection and Exploitation

12:55 Building a Purple Team in Less Mature Organizations

18:39 The Importance of Detection Engineering

23:49 Understanding Decay and AI Solutions

29:53 Cloud Security: Risks and Responsibilities

31:17 Documentation Challenges in Cloud Implementations

37:54 The Case for Purple Teams

44:24 Strategies for Implementing Purple Teams

Cyber warfare is often misunderstood and this episode explains why it’s usually a supporting act rather than the main event in modern conflict. Jake Williams and Bryson Bort break down how cyber operations differ from kinetic warfare, why attribution and battle damage assessment are so difficult, and why political and strategic limits often matter more than the technology itself. You’ll also hear how adversaries use low-cost, scalable cyber campaigns to create disruption without triggering direct escalation. Overall, it’s a sharp look at how cyber tactics are reshaping future warfare and global security.

Episode Chapters:

00:00 Introduction to Cyber Warfare

05:16 The Role of Cyber in Modern Warfare

07:51 Stuxnet: A Case Study in Cyber Warfare

10:52 Legal Definitions and Warfare

16:17 The Complexity of Cyber Operations

17:50 Investment in Cyber Capabilities

22:10 The Future of Cyber Warfare

27:06 Ethics and Cyber Warfare

33:51 Predictions for Future Conflicts

41:30 Educating on Cyber Warfare

Cybersecurity Challenges in Internet of Things (IoT) Devices

IoT isn't just smart bulbs and garage door openers, it's the badge scanner at your office door, the sensors on a wind turbine, the x-ray machine at your hospital, and the PLC system running a manufacturing floor. The attack surface is enormous, and most of it was never built with security in mind.

In this episode, host Matt Triner sits down with Adeel Chohan, Head of Data & AI at Provectus, to unpack why IoT security is so hard to get right and why it keeps getting harder. They dig into device procurement gaps, firmware vulnerabilities, the challenges of securing brownfield infrastructure, and why security is almost always the last conversation in an IoT deployment, not the first.

From power grids to hospital networks to factory floors, Adeel and Matt explore what it actually takes to secure environments where connected devices outnumber the people managing them - and why legacy perimeter defenses aren't built for this reality.

You can't protect what you can't see.

Episode Chapters:

00:00 Introduction to IoT Device Security

02:47 The Broad Scope of IoT Devices

05:35 Unique Considerations for Securing IoT Devices

09:56 Challenges in Implementing Security Measures for IoT Devices

23:27 The Role of Cloud Providers in Enabling and Securing IoT Devices

26:49 The Challenge of IoT Cybersecurity and the Need for Standardization

27:42 From Point-to-Point Solutions to Standardized Device Management

31:05 The Trade-Offs Between Proprietary and Standardized Protocols

42:01 The Role of Regulation in Ensuring IoT Security

44:27 The Impact of Decreasing Sensor Costs on IoT Security

46:33 The Mindset Shift Towards Prioritizing IoT Security

49:06 The Future of IoT Security: Regulations, Collaboration, and AI