Cloud Out Loud Podcast

Jon and Logan Gallagher
  • 5.0 (1)
  • TECHNOLOGY

We talk about cloud computing, what's new, what to do, what not to do, and how to do it. We focus on the why and how of the cloud, why it's revolutionary, and how to adapt yourself or your organization to be part of this revolution.We cover Google Cloud and AWS pretty exclusively in the beginning, and hope to add Azure in our copious free time.

  1. 12/17/2025

    Open Source Reality Check

    Send us a text The dream of open source is freedom, speed, and shared progress—but the reality gets messy when it meets cloud-scale business and security. We explore how Docker kickstarted containers while Google’s Kubernetes turned them into an operational standard, and why that split shaped everything from engineering culture to company strategy. From there, we compare the cloud giants’ philosophies: Google’s foundation-first approach, Microsoft’s transformation from anti-OSS to stewarding GitHub and popularizing VS Code, and Amazon’s more transactional stance that sparked high-profile forks. The heart of the story is tension between ideals and incentives. Elastic’s licensing shift to block AWS’s managed service and Amazon’s OpenSearch fork set off years of license churn across databases, with Redis and others experimenting with “source-available” models. That turbulence pushed developers and CFOs into new due diligence: reading licenses, evaluating governance, and planning for change. It’s not just legal; it’s operational risk. We unpack what to look for in a healthy project and how to avoid license whiplash when a dependency changes course. Security adds another layer. The XZ Utils backdoor revealed how small packages can enable state-level infiltration, while malicious NPM uploads showed how easy it is to sneak malware into developer workflows. We revisit the infamous LeftPad collapse to explain dependency fragility and why reproducible builds, version pinning, artifact mirrors, and SCA tools are essential. Our playbook focuses on practical defenses—signed releases, SBOMs, automated alerts, and least-privilege build pipelines—so teams can keep the benefits of open source without gambling their stack. We close with a preview: AI is retracing open source’s path, from community energy to license debates and platform power. If you build in the cloud, this conversation offers grounded lessons on choosing, securing, and sustaining the code you don’t control. Enjoy the episode, then subscribe, share with a teammate, and leave a review with your biggest open source win—or worst dependency scare. What is Open Source? Docker Kubernetes Cloud Native Computing Foundation Open Source Initiative Approved Licenses Google's Open Source Projects AWS Open Source Projects The Hackers Book Microsoft Visual Studio XZ Utils Backdoor Left Pad Incident

    38 min

  2. 10/01/2025

    Episode 36 - Open Source From Hackers to Kubernetes: How Open Source Evolved

    Send us a text Ever wonder how free software ended up running the world’s biggest clouds? We pull on a thread that starts with the hacker ethos—access, transparency, community—and follows it through OSCON memories, Docker’s breakout moment, and the quiet power shift that came with Kubernetes. From early research culture to the realities of running production systems, we map how open source moved from ideal to infrastructure and why today’s cloud thrives on community-built code. We look at why Docker’s elegant packaging changed developer workflows but didn’t solve the hardest problem: operating at scale. That’s where Google’s history with Borg mattered, and why Kubernetes arrived fully formed with controllers, declarative state, and battle-tested ideas. Crucially, governance moved to the CNCF, the Cloud Native Computing Foundation, letting every major cloud offer a managed Kubernetes service without locking users in. The result is a durable model for the cloud era: keep the core open and portable; offer the complicated parts—control planes, upgrades, reliability—as a managed service; and let teams build higher with confidence. If you care about how software is built, funded, and run at scale, press play. Links to topics from the show: Hackers - By Steven Levy Docker Kubernetes CNCF Open Container Podman LinkedIn - Logan Gallagher LinkedIn - Jon Gallagher

    43 min

  3. 08/14/2025

    Episode 35: AI Hype vs. Reality: Rethinking Build vs. Buy

    Send us a text In this episode, Jon and Logan  explore whether generative AI fundamentally changes the build versus buy decision for businesses considering software solutions. They analyze recent claims about AI-powered cost savings and examine the underlying principles that should guide technology decisions. How Logan is using  AI in his common tasks Looking at recent claims from companies like Klarna about replacing SaaS with AI-built softwareRevisiting the fundamental truth that Organizations must understand their core expertise when making build vs buy decisions"Vibe coding" with AI creates maintenance problems as context for coding decisions is lostCompliance, regulation, and data residency considerations become more complex with AICloud infrastructure reliability remains a critical concern for AI-dependent systemsAI is most effective as an assistant for routine tasks rather than replacing human judgmentTraditional business frameworks still apply when evaluating technology investmentsLinks: Jon Gallagher on LinkedIn Logan Gallagher on LinkedIn The auto parts software mentioned: Triad Systems became Activant Aaron Levie - CEO of Box: Box becoming an AI-First Company Recommendations If you enjoyed this episode, please tweet us at @cloudoutloudpod or email us at cloudoutloud@ndhsw.com. We hope to see you again next week for another episode of Cloud Out Loud.

    33 min

  4. 03/19/2025

    Episode 34 - AI Still Needs Humans in the Loop

    Send us a text When identical prompts yield different outputs and a request for "a cat running across the screen" generates four cylinders and a bobbing balloon, the non-deterministic nature of generative AI becomes impossible to ignore. Despite the power of these sophisticated models, we discovered that creating consistent, high-quality results demanded substantial human intervention – not less. Our journey moved from refining prompts to building extensive code example libraries, requiring the very software engineering expertise these systems supposedly reduce. This experience directly contradicts the popular "vibe programming" approach where developers mindlessly shuttle between AI suggestions and error messages. While this might suffice for weekend projects (as its originator noted), it produces unmaintainable spaghetti code lacking the architectural vision essential for professional software. Real engineering demands creating systems that scale, maintain, and transfer to other developers – not just code that temporarily functions. The lessons extend beyond development to any organization implementing AI in decision-making processes. These systems lack the contextual understanding to independently determine business priorities or handle nuanced human factors. The future belongs not to AI replacing humans, but to thoughtful partnerships harnessing each party's unique strengths. Ready to dive deeper into AI's practical realities? Listen now and join the conversation about how we can responsibly integrate these powerful tools while maintaining human oversight and expertise. Share your experiences with us at cloudoutloud@ndhsw.com or @CloudOutLoudPod. Jon Gallagher on LinkedIn Logan Gallagher on LinkedIn The Animation App on Github Andrej Karpathy on vibe programming *Extra!* Andrej Karpathy on "Privacy Hygiene" - protecting yourself online now

    26 min

  5. 03/05/2025

    Episode 33 - Creating an Animation Application using AI

    Send us a text In this episode we try out what we've speculated AI, particularly GenAI is good for: expanding the capabilities of engineers as they create new applications. This application uses Google's Cloud Run  and Google Cloud Storage to get user's specification of an animation, create the animation, then store and play the animation. This the link to the Github repo for the application. The AI framework for the application is Google's Gemini and the program generates the animation is Blender. The demo is programmed in Python and uses the LangChain framework to leverage Large Language Models (LLMs) in the application

    40 min

  6. 10/06/2024

    Episode 32 - Responsibility for Security in the Cloud

    Send us a text Courtesy of Corey Quinn's "Last Week in AWS" Newsletter # 389 Logan and Jon discovered a presentation from Sec-T  by Chris Farris that does a great job describing the tension between the Cloud Providers and Customers when it comes to security. The presentation does a great job of highlighting the fact that, though the cloud can be made secure, for many people the defaults they use do not make them as secure as possible. In addition, the cloud providers have to make sure that existing software and systems are not broken by the changes necessary to increase security. Corey Quinn - Last Week in AWS Chris Farris Transcript Google - Shared Fate AWS - Security Pillar Slack - Transitioning to IMDSv2

    25 min

  7. 07/23/2024

    Episode 31 - An AI Manifesto

    Send us a text This episode reviews a manifesto written by Leopold Aschenbrenner, formerly of OpenAI, now a founder of an investment firm that is focused on AGI, Advanced General Intelligence. The manifesto is titled SITUATIONAL AWARENESS, The Decade Ahead. This episode's discussion sets up who Leopold is, where he's been, and what his focus is. From there the focus is on one aspect of the document, Security. ANd here the discussion looks at what the paper cosiders vulnerabilities, versus the real-world vulnerabilities IT handles if faced with. SITUATIONAL AWARENESS GNU Manifesto Hacker's Manifesto (... oh what the heck) Communist Manifesto

    30 min

  8. 06/29/2024

    Episode 30 - The Challenges of Using LLM and Generative AI

    Send us a text As with all the discussions of AI, and particularly LLM's and Generative AI, this is a discussion of the challenges of getting it right, making it useful, and using these tools successfully in a business. Major Points: There are a large number of commercial and open-source models available.Tens and even hundreds of millions of dollars were spent, and equal amounts of person years were expended to create these models. Your business cannot and should not duplicate this effort and expense.You therefore must know the best way to use the models, and that is to collect enough data about your operations to extend the models to know about your enterprise.You also must have enough subject matter expertise to know when the models are producing incorrect answers, such as "hallucinations".You must be aware of the security challenges the models represent, particularly in sensitive industries such as finance and health care.You must be able to create testing to ensure you know and limit the risks of incorrect answers, and security problemsThere is no such thing as a free lunch. You must expend the effort necessary to teach the models you use, test those models, and ensure that you have limited the scope of security problems from the models. Cory Doctorow - Human in the Middle AI ChatGPT  Gemini  Anthropic Claude Episode Transcript

    35 min
See All (38)

About

We talk about cloud computing, what's new, what to do, what not to do, and how to do it. We focus on the why and how of the cloud, why it's revolutionary, and how to adapt yourself or your organization to be part of this revolution.We cover Google Cloud and AWS pretty exclusively in the beginning, and hope to add Azure in our copious free time.

Information

  • Creator
    Jon and Logan Gallagher
  • Years Active
    2022 - 2025
  • Episodes
    38
  • Rating
    Clean
  • Copyright
    © 2025 Cloud Out Loud Podcast
  • Show Website
    Cloud Out Loud Podcast