254: The Cloud Pod Offers Therapy Sessions to AIs With Trust Issues

The Cloud Pod

11-04-2024 • 1 hr 22 mins

Welcome to episode 254 of the Cloud Pod podcast – where the forecast is always cloudy! This week we’re talking about trust issues with some security updates over at Azure, forking drama at Redis, and making all of our probably terrible predictions for Google Next. Going to be in Vegas? Find one of us and get a sticker for your favorite cloud podcast! Follow us on Slack and Twitter to get info on finding your favorite host IRL. (Unless Jonathan is your favorite. We won’t be giving directions to his hot tub.)

Titles we almost went with this week:

  • The Cloud Pod Hosts Fail To Do Their Homework
  • The Cloud Pod Now Has a Deadline
  • This Is Why I Love Curl … EC2 Shop Endpoint is Awesome
  • AI & Elasticsearch… AI – But Not Like That
  • Preparing for Next Next Week

A big thanks to this week’s sponsor:

We’ve got a new sponsor! Sonrai Security

Check out Sonrai Securities’ new Cloud Permission Firewall. Just for our listeners, enjoy a 14 day trial at www.sonrai.co/cloudpod

Follow Up

02:15 AWS, Google, Oracle back Redis fork “Valkey” under the Linux Foundation

  • In no surprise, placeholderKV is now backed by AWS, Google and Oracle and has been rebranded to Valkey under the Linux Foundation.
  • Interestingly, Ericsson and Snap Inc. also joined Valkey.

03:19 Redis vs. the trillion-dollar cabals

  • Anytime an open source company changes their license, AWS and other cloud providers are blamed for not contributing enough upstream.
  • Matt Asay, from Infoworld, weighs in this time.
  • The fact that placeholder/Valkey was forked by several employees at AWS who were core contributors of Redis, does seem to imply that they’re doing more than nothing.
  • I should point out that Matt Asay also happens to run Developer relations at MongoDB. Pot, meet kettle.

04:14 Ryan – “It’s funny because I always feel like the cloud contribution to these things is managed services around them, right? It’s not necessarily improvements to the core source code. It’s more management of that source code. Now there are definitely areas where they do make enhancements, but I’m not sure the vast majority makes sense to be included in an open source made for everyone product either.”

General News

07:01 What we know about the xz Utils backdoor that almost infected the world

  • The Open Source community was a bit shocked when a Microsoft Developer revealed a backdoor had been intentionally planted in xz Utils, an open source data compression utility available on almost all installations of Linux and Other Unix-Like OS.
  • The person – or people – behind this project like