Welcome to episode 364 of The Cloud Pod, where the forecast is always cloudy! Ryan is out trying to find Hotel California, but Justin, Matt, and Jonathan are in the studio today, and they’ve got a lot of news and some great convo – from privacy in the digital age to Nova models (and a lot of employees) getting the ax, there’s a ton of stuff to cover this week, so let’s get started!

• Windows Tattletale ID Has No Off Switch
• Amazon’s Nova Models Enter Witness Protection Program
• Your PC Has a Secret Name, and Windows Won’t Erase It
• CloudWatch Watches Your ALB Like a Hawk
• One Log Group to Trace Them All
• Duress Code Wipes Phone, Activist Wipes Out Legally
• Project Perception Sees Vulnerabilities Before You Even Blink
• Azure DDoS Protection Trades Autopilot for Manual Control
• Kernel Panic Optional, CVE Overload Mandatory
• OpenAI’s Keypad: Key Confusion for 230 Dollars
• China DIYs Its Way Around DUV Export Bans
• OpenAI Hugged some serious Face
• Google must pay the EU $1 Billion… that’s a lot of Crepes
• Amazon apparently doesn’t believe in their AGI

A big thanks to this week’s sponsors:

We’re sponsorless! Want to get your brand, company, or service in front of a very enthusiastic group of cloud news seekers? You’ve come to the right place! Send us an email or hit us up on our Slack channel for more info.

01:10 Linux kernel team publishes 432 CVEs in two days

• Update: Linux Kernel CVE Volume
• The Linux kernel team published 432 CVEs in a two-day span, continuing the high-volume vulnerability disclosure approach the kernel security team adopted after taking over CVE assignment duties directly.
• This follows the kernel team’s earlier decision to assign CVEs to a broad range of bug fixes, including minor or low-severity code changes, rather than reserving CVEs strictly for exploitable security flaws.
• The practice remains controversial among sysadmins and security teams, since large batches of CVEs can overwhelm vulnerability scanners, patch management systems, and compliance reporting workflows.
• For cloud operators running custom or long-term-support kernels, this reinforces the need for tooling that can filter and triage kernel CVEs by actual risk rather than treating every entry as an urgent patch target.
• The recurring pattern suggests this is now standard operating procedure for the kernel team rather than a one-time anomaly, so listeners managing fleets of Linux-based cloud infrastructure should expect similar large CVE batches going forward.

01:46 Justin – “Everyone is doing a lot of patching these days.”

04:42 I tried out OpenAI’s new AI keypad — which will be fun for some coders and slightly mystifying to everyone else

• OpenAI’s Micro keypad, developed with Work Louder, is now available for hands-on testing, following through on hardware ambitions that were previously overshadowed by legal disputes, including Apple’s trade secret laws...

Welcome to episode 364 of The Cloud Pod, where the forecast is always cloudy! Justin and Matt are in the studio this week to bring you all the latest in cloud and AI news, including (surprise) astronomical AWS bills, Kimi K3 and what it means for Enterprise AI, and lots of security news! All that and so much more, so let’s get started!

• Cache Rules Everything Around NFS Now
• Lambda Says BYOB, Bring Your Own Bucket
• Henrico’s Power Struggle: Data Centers 37, Schools 0
• Cloud Run Fails Over Faster Than Your Excuses
• 570 Patches, One Registry Hive Nightmare
• GuardDuty Gets a Detective Agent, No Trench Coat Required
• Kimi K3 Aims to Moonwalk Past Opus 4.8
• Terraform Gets Policy Muscle, Ditches the Rego Diet
• CloudWatch Watches Your AI Coders Code
• Watt A Way To Treat A School District
• Your Cloud Bill… 1 BILLION DOLLARS
• Not a way I want to wake up rogue cloud bills
• Skype is EOL … wait I thought I died 3 times already
• Our newest superhero CODEMENDER!!

A big thanks to this week’s sponsors:

We’re sponsorless! Want to get your brand, company, or service in front of a very enthusiastic group of cloud news seekers? You’ve come to the right place! Send us an email or hit us up on our Slack channel for more info.

00:49 Amazon fixing bug that billed some AWS customers billions of dollars

• A bug in the AWS billing computation subsystem generated inflated billing estimates for some customers, with one Reddit user reporting a quoted estimate near 2.5 billion dollars for a single month. In contrast, others saw figures ranging from millions to hundreds of millions.
• The issue began late Thursday, and an initial rollback attempt on Friday morning failed to resolve it, suggesting the root cause was more complex than a recent configuration change.
• Amazon confirmed the billing estimates do not reflect actual usage or charges, meaning affected customers will not be responsible for the inflated amounts shown in the console.
• Amazon has not disclosed whether any accounts were suspended or paused due to the billing errors, leaving open questions about operational impact during the incident.
• The event highlights the importance of billing system reliability for cloud providers, since inaccurate estimates at this scale can cause confusion and concern even when the underlying charges are not real.

01:29 Justin – “Amazon doesn’t bill you in the middle of the month, so it’s a pretty low risk that you were gonna get billed or invoice directly on that date, unless you happen to already be overdue on a payment and you were happening to update your credit card at the same time. I don’t think that’s really a big risk for this particular scenario.”

05:04 County With 37 Data Centers Asks Schools to ‘Conserve Electricity’

• Listener note: Paywall article
• Henrico County, Virginia, home to 37 data centers, with 17 more planned, is asking county employees and schools to conserve electricity after a 25 percent rate increase set to begin July 1, adding an estimated 5 million dollars in costs for the next fiscal year.
• The sit...