Cloud Out Loud Podcast

Send a text

The dream of open source is freedom, speed, and shared progress—but the reality gets messy when it meets cloud-scale business and security. We explore how Docker kickstarted containers while Google’s Kubernetes turned them into an operational standard, and why that split shaped everything from engineering culture to company strategy. From there, we compare the cloud giants’ philosophies: Google’s foundation-first approach, Microsoft’s transformation from anti-OSS to stewarding GitHub and popularizing VS Code, and Amazon’s more transactional stance that sparked high-profile forks.

The heart of the story is tension between ideals and incentives. Elastic’s licensing shift to block AWS’s managed service and Amazon’s OpenSearch fork set off years of license churn across databases, with Redis and others experimenting with “source-available” models. That turbulence pushed developers and CFOs into new due diligence: reading licenses, evaluating governance, and planning for change. It’s not just legal; it’s operational risk. We unpack what to look for in a healthy project and how to avoid license whiplash when a dependency changes course.

Security adds another layer. The XZ Utils backdoor revealed how small packages can enable state-level infiltration, while malicious NPM uploads showed how easy it is to sneak malware into developer workflows. We revisit the infamous LeftPad collapse to explain dependency fragility and why reproducible builds, version pinning, artifact mirrors, and SCA tools are essential. Our playbook focuses on practical defenses—signed releases, SBOMs, automated alerts, and least-privilege build pipelines—so teams can keep the benefits of open source without gambling their stack.

We close with a preview: AI is retracing open source’s path, from community energy to license debates and platform power. If you build in the cloud, this conversation offers grounded lessons on choosing, securing, and sustaining the code you don’t control. Enjoy the episode, then subscribe, share with a teammate, and leave a review with your biggest open source win—or worst dependency scare.

What is Open Source?
Docker
Kubernetes
Cloud Native Computing Foundation
Open Source Initiative Approved Licenses
Google's Open Source Projects
AWS Open Source Projects
The Hackers Book
Microsoft Visual Studio
XZ Utils Backdoor
Left Pad Incident

Send a text

Ever wonder how free software ended up running the world’s biggest clouds? We pull on a thread that starts with the hacker ethos—access, transparency, community—and follows it through OSCON memories, Docker’s breakout moment, and the quiet power shift that came with Kubernetes. From early research culture to the realities of running production systems, we map how open source moved from ideal to infrastructure and why today’s cloud thrives on community-built code.

We look at why Docker’s elegant packaging changed developer workflows but didn’t solve the hardest problem: operating at scale. That’s where Google’s history with Borg mattered, and why Kubernetes arrived fully formed with controllers, declarative state, and battle-tested ideas. Crucially, governance moved to the CNCF, the Cloud Native Computing Foundation, letting every major cloud offer a managed Kubernetes service without locking users in. The result is a durable model for the cloud era: keep the core open and portable; offer the complicated parts—control planes, upgrades, reliability—as a managed service; and let teams build higher with confidence.

If you care about how software is built, funded, and run at scale, press play.

Links to topics from the show:
Hackers - By Steven Levy
Docker
Kubernetes
CNCF
Open Container
Podman

LinkedIn - Logan Gallagher
LinkedIn - Jon Gallagher

Send a text

In this episode, Jon and Logan  explore whether generative AI fundamentally changes the build versus buy decision for businesses considering software solutions. They analyze recent claims about AI-powered cost savings and examine the underlying principles that should guide technology decisions.

• How Logan is using  AI in his common tasks 
• Looking at recent claims from companies like Klarna about replacing SaaS with AI-built software
• Revisiting the fundamental truth that Organizations must understand their core expertise when making build vs buy decisions
• "Vibe coding" with AI creates maintenance problems as context for coding decisions is lost
• Compliance, regulation, and data residency considerations become more complex with AI
• Cloud infrastructure reliability remains a critical concern for AI-dependent systems
• AI is most effective as an assistant for routine tasks rather than replacing human judgment
• Traditional business frameworks still apply when evaluating technology investments

Links:

Jon Gallagher on LinkedIn

Logan Gallagher on LinkedIn

The auto parts software mentioned:
Triad Systems became Activant

Aaron Levie - CEO of Box:
Box becoming an AI-First Company
Recommendations

If you enjoyed this episode, please tweet us at @cloudoutloudpod or email us at [email protected]. We hope to see you again next week for another episode of Cloud Out Loud.

Send a text

When identical prompts yield different outputs and a request for "a cat running across the screen" generates four cylinders and a bobbing balloon, the non-deterministic nature of generative AI becomes impossible to ignore. Despite the power of these sophisticated models, we discovered that creating consistent, high-quality results demanded substantial human intervention – not less. Our journey moved from refining prompts to building extensive code example libraries, requiring the very software engineering expertise these systems supposedly reduce.

This experience directly contradicts the popular "vibe programming" approach where developers mindlessly shuttle between AI suggestions and error messages. While this might suffice for weekend projects (as its originator noted), it produces unmaintainable spaghetti code lacking the architectural vision essential for professional software. Real engineering demands creating systems that scale, maintain, and transfer to other developers – not just code that temporarily functions.

The lessons extend beyond development to any organization implementing AI in decision-making processes. These systems lack the contextual understanding to independently determine business priorities or handle nuanced human factors. The future belongs not to AI replacing humans, but to thoughtful partnerships harnessing each party's unique strengths.

Ready to dive deeper into AI's practical realities? Listen now and join the conversation about how we can responsibly integrate these powerful tools while maintaining human oversight and expertise. Share your experiences with us at [email protected] or @CloudOutLoudPod.

Jon Gallagher on LinkedIn

Logan Gallagher on LinkedIn

The Animation App on Github

Andrej Karpathy on vibe programming

*Extra!* Andrej Karpathy on "Privacy Hygiene" - protecting yourself online now

Send a text

In this episode we try out what we've speculated AI, particularly GenAI is good for: expanding the capabilities of engineers as they create new applications.

This application uses Google's Cloud Run  and Google Cloud Storage to get user's specification of an animation, create the animation, then store and play the animation.

This the link to the Github repo for the application.

The AI framework for the application is Google's Gemini and the program generates the animation is Blender. The demo is programmed in Python and uses the LangChain framework to leverage Large Language Models (LLMs) in the application

Send a text

Courtesy of Corey Quinn's "Last Week in AWS" Newsletter # 389 Logan and Jon discovered a presentation from Sec-T  by Chris Farris that does a great job describing the tension between the Cloud Providers and Customers when it comes to security.

The presentation does a great job of highlighting the fact that, though the cloud can be made secure, for many people the defaults they use do not make them as secure as possible. In addition, the cloud providers have to make sure that existing software and systems are not broken by the changes necessary to increase security.

Corey Quinn - Last Week in AWS

Chris Farris

Transcript

Google - Shared Fate

AWS - Security Pillar

Slack - Transitioning to IMDSv2

Send a text

This episode reviews a manifesto written by Leopold Aschenbrenner, formerly of OpenAI, now a founder of an investment firm that is focused on AGI, Advanced General Intelligence. The manifesto is titled SITUATIONAL AWARENESS, The Decade Ahead.

This episode's discussion sets up who Leopold is, where he's been, and what his focus is. From there the focus is on one aspect of the document, Security. ANd here the discussion looks at what the paper cosiders vulnerabilities, versus the real-world vulnerabilities IT handles if faced with.

SITUATIONAL AWARENESS

GNU Manifesto

Hacker's Manifesto

(... oh what the heck)

Communist Manifesto

Send a text

As with all the discussions of AI, and particularly LLM's and Generative AI, this is a discussion of the challenges of getting it right, making it useful, and using these tools successfully in a business.

Major Points:

1. There are a large number of commercial and open-source models available.
2. Tens and even hundreds of millions of dollars were spent, and equal amounts of person years were expended to create these models. Your business cannot and should not duplicate this effort and expense.
3. You therefore must know the best way to use the models, and that is to collect enough data about your operations to extend the models to know about your enterprise.
4. You also must have enough subject matter expertise to know when the models are producing incorrect answers, such as "hallucinations".
5. You must be aware of the security challenges the models represent, particularly in sensitive industries such as finance and health care.
6. You must be able to create testing to ensure you know and limit the risks of incorrect answers, and security problems

There is no such thing as a free lunch. You must expend the effort necessary to teach the models you use, test those models, and ensure that you have limited the scope of security problems from the models.

Send a text

Send a text

Unveiling the Future of Cloud and AI at Google Cloud Next 

Episode 28: Show Notes

In this episode, we delve into the most recent big cloud conference, Google Cloud Next. We discuss what we saw, felt, and heard at this year's iconic Google Cloud Next and provide listeners with our biggest takeaways from the event. We discuss the cutting-edge tools in generative AI and machine learning that Google has rolled out and the potential these new Google offerings hold for developing robust enterprise solutions. Gain insights into the products and services that have the most potential, the obvious shift in Google’s approach to providing enterprise solutions, the integration of its new tools into current business operations, and much more! We also offer listeners our expectations of Amazon's upcoming conference and why the future of cloud computing is brighter than ever. To stay on the cutting edge of the cloud and AI revolution, tune in now!

Key Points From This Episode:

• Logan shares his thoughts on the conference, particularly on the generative AI content.
• Hear highlights of the new features and services Google had on showcase.
• Discover exciting new generative AI and machine learning tools from Google.
• Other interesting new features that enhance productivity in the cloud.
• The potential that Google’s new features have for developing enterprise solutions.
• Integrating Google’s new tools into a business's process and operations.
• We unpack Google’s noticeable shift in focus and approach to business.
• What we think are the most exciting new features and services.
• An incredible data migration story that was shared at the conference.
• Our expectations for Amazon’s upcoming conference: AWS re: Invent.

Quotes:

“It was really clear that [Google’s] butts were kicked into gear by OpenAI and ChatGPT and they are playing a bit of catchup.” — Logan Gallagher [0:02:50]

“Google is finally embracing the real world [with] a lot of these new tools.” — Jon Gallagher [0:07:49]

“The hard work of an enterprise, the hard work of running a business is still being with the new tools from Google.” — Jon Gallagher [0:11:34]

Links Mentioned in Today’s Episode:

Google Cloud Next 2023

Duet AI

Vertex AI

GKE Enterprise

AWS re: Invent 2023

Jon Gallagher on LinkedIn

Logan Gallagher on LinkedIn