Screaming in the Cloud

Microsoft has its fingers in a lot of pots, but just how secure are said pots? On this episode, Corey is joined by Ann Johnson, Corporate Vice President and Deputy CISO of Microsoft's Customer Security Management Office. Ann talks about her 40-year professional journey and how it's culminated in her current role. Corey is known to “punch up” at the big guys in the tech industry, but he and Ann talk about the challenges of corporate leadership and being a public face in such a prominent company. Since it’s 2025, of course, they’re going to talk about AI’s pros and cons (and why it shouldn’t be used to make art).Show Highlights(0:00) Intro(0:51) The Duckbill Group sponsor read(1:25) What Ann's been up to since she and Corey last spoke (2:29) The makeup of Microsoft Security(4:28) The unique company culture at Microsoft(8:42) What's going on with Microsoft Azure(10:31) How Ann handles the immense pressure of working in Microsoft Security(14:13) The toxic nature of online criticism(19:57) The Duckbill Group sponsor read(20:24) The value of telling your leaders the truth(23:31) Ann's thoughts on the current state of AI(28:44) Properly defining what AI can and can't do(30:54) Why Ann helps fund multiple STEM scholarships(32:16) The need for the humanities alongside tech(33:38)  Where you can find more from Ann JohnsonAbout Ann JohnsonAnn Johnson is Corporate Vice President and Deputy CISO at Microsoft. In this role, Ann drives all external engagement for the Microsoft Office of the CISO. She is a long-tenured, recognized thought leader on cybersecurity, published author, and a sought-after global speaker and digital author specializing in cyber resilience, online fraud, cyberattacks, compliance, and security. Ann challenges traditional schools of thought and cyber-norms–from the way the tech industry tackles cyber threats to the language it uses to communicate–and encourages the industry to get outside its comfort zones and expand how it addresses the evolving threat landscape with the power of technology and people. As a global cybersecurity leader and strategist, she is looking ahead at how today’s cybersecurity investments will impact tomorrow’s cybersecurity reality.  Ann currently serves on the Board of Directors of N-Able, Human Security, Datavant, and is Member of the Board of Advisors for Cybersecurity Center of Excellence, WA and the Signal Cyber Museum Society. Ann is also an Executive Sponsor of the Microsoft Women in Cybersecurity Group.LinksAnn Johnson’s LinkedIn: https://www.linkedin.com/in/ann-johnsons/Microsoft Security: https://www.microsoft.com/en-us/securityAfternoon Cyber Tea: afternooncybertea.comSponsorThe Duckbill Group: duckbillgroup.com

If you believed, they put a data center on the moon. No, for real, they did, and it’s partially thanks to Lili Rogowsky, partner at Atypical Ventures. Lili joins Corey to discuss her unconventional leap from law to venture capital. Although she made a sharp turn career-wise, Lili remains grounded in the often heartless world of venture capital—highlighting the importance of empathy and technical prowess in founding successful enterprises. Out of all resources, time carries the heftiest price tag, and this half-hour episode is a low-risk, high-yield investment.Show Highlights(0:00) Intro(1:12) The Duckbill Group sponsor read(1:46) How Corey (kinda) met Lili(3:38) What attracted Corey to Atypical Ventures(5:58) How Atypical helped put a data center on the moon(8:34) VC “done right”(9:59) What led Lili to run a VC firm(13:43) Quitting jobs until you find something you like(16:28) The Duckbill Group sponsor read(16:54) The value of sharing your time(21:44) Risk assessment, well-dressed horses, and punching up in comedy(24:44) The importance of humility in life and business(29:15) Where you can find more from Lili and Atypical VenturesAbout Lili RogowskyLili is a dynamic investor, attorney, advisor, and entrepreneur. She is a partner at Atypical Ventures, an early-stage fund that identifies and invests in “engineers with empathy” working on plausible science fiction. A voracious reader driven by her curiosity and love of type 2 fun, Lili’s experience includes (in no particular order) mountaineering, visual arts, marine science, founding a law firm, cave/ shark diving (not necessarily at the same time), data privacy/ security, gardening, recruiting, battling NYC rats that eat her car, and interplanetary internet.LinksAtypical Ventures: atypical.com Email Lili: [email protected] SponsorThe Duckbill Group: duckbillgroup.com

Dropping and sharing files should be easy. What a novel idea. On this episode, Corey speaks with Timo Josten, the sole developer behind Dropshare. We bring up the fact that he’s the only guy working on it because the tool is quite impressive! Corey loves it and so does an entire community of folks on Github! Together, they discuss the evolution and functionality of Dropshare. Timo also shares how he balance of enhancing Dropshare, emphasizing user feedback, and customization options, all while offering feature updates and maintaining sustainability. Show Highlights(0:00) Intro(1:06) The Duckbill Group sponsor read(1:39) What does Dropshare do? (6:10) Dropshare's impressive flexibility and dedicated community(10:27) How Timo landed on Dropshare's business model(12:38) What's new in Dropshare 6?(16:09) The Duckbill Group sponsor read(16:36) Determining what should be an update or part of the next version of Dropshare(18:30) Dropshare’s iOS app(21:04) The perks of being able to configure deletion in Dropshare(25:45) Dropshare's thriving GitHub community(29:26) Where you can find more from Timo and DropshareAbout Timo JostenTimo Josten is the developer of Dropshare, the macOS and iOS app to upload anything anywhere.LinksTimo’s LinkedIn profile: https://www.linkedin.com/in/timo-josten-493962185/Timo’s personal website: https://josten.ioDropshare: https://dropshare.app/shitposting.pictures SponsorThe Duckbill Group: duckbillgroup.com 

How you learn is important. Corey Quinn is joined by Aditya Bhargava, a Staff Software Engineer at Etsy and the author of Grokking Algorithms. They talk about the nuances of technical learning and the contrasting philosophies of "just in time" versus "just in case" learning. In this episode, Aditya emphasizes the importance of effective teaching methods and the value of incorporating fun things like drawings into technical explanations. This approach also bleeds into his illustrated Substack, DuckTypes. As Corey and Aditya discuss, a good, informative book doesn’t need to drag on, and this quick, insightful, 30-minute conversation is no different.Show Highlights(0:00) Intro(1:24) The Duckbill Group sponsor read(1:58) Corey's admiration for Aditya's writing(5:40) How Aditya clearly explains AWS networking(8:06) “Just in case” vs. “just in time”(10:15) Why business books don't need to be hundreds of pages long(14:19) Reading for pleasure vs. reading for work(16:57) The Duckbill Group sponsor read(17:24) Explaining Aditya's book on algorithms(20:07) The great editor behind Aditya's book(22:20) DuckTyped and how Aditya got into AWS networking(25:16) Where networking folks fall in the era of the cloud(28:12) The importance of staying up-to-date in your field(31:46) Where you can find more from AdityaAbout Aditya BhargavaAditya Bhargava is a Software Engineer with a dual background in Computer Science and Fine Arts. He blogs on programming at adit.io.LinksAditya’s blog: https://www.adit.io/Grokking Algorithms, Second Edition: https://www.manning.com/books/grokking-algorithms-second-editionDuckTyped: https://www.ducktyped.org/Last Skeet in AWS: https://lastskeetinaws.com/SponsorThe Duckbill Group: duckbillgroup.com 

Sysdig’s 2025 Cloud-Native and Security Usage Report is hot off the presses, and Corey has questions. On this episode, he’s joined by Crystal Morin, a Cybersecurity Strategist at Sysdig, to break down the trends of the past year. They discuss Sysdig’s approach to detecting and responding to security and the success the company has seen with the rollout of Sysdig Sage (an AI product that Corey thinks is actually useful). They also chat about what’s driving a spike in machine identities, practical hygiene in cloud environments, and the crucial importance of automated responses to maintain robust security in the face of increasingly sophisticated cyber threats.Show Highlights(0:00) Intro(0:39) Sysdig sponsor read(2:22) Explaining Sysdig's 5/5/5 Benchmark(4:06) What does Sysdig's work entail?(10:03) Cloud security trends that have changed over the last year(14:30) Sysdig sponsor read(15:16) How Sysdig is using AI in its security products(19:09) How many users are adopting AI tools like Sysdig Sage(25:51) The reality behind the recent spike of machine identities in security(29:24) Handling the scaling of machine identities(35:37) Where you can find Sysdig's 2025 Cloud-Native and Security Usage ReportAbout Crystal MorinCrystal Morin is a Cybersecurity Strategist with more than 10 years of experience in threat analysis and research. Crystal started her career as both a Cryptologic Language Analyst and Intelligence Analyst in the United States Air Force and as a contractor for Booz Allen Hamilton, where she helped develop and evolve their cyber threat intelligence community and threat-hunting capabilities. In 2022, Crystal joined Sysdig as a Threat Research Engineer on the Sysdig Threat Research Team, where she worked to discover and analyze cyber threat actors taking advantage of the cloud. Today, Crystal bridges the gap between business and security through cloud-focused content for leaders and practitioners alike. Crystal’s thought leadership has been foundational for pieces such as the “2024 Cloud-Native Security and Usage Report” and “Cloud vs. On-Premises: Unraveling the Mystery of the Dwell Time Disparity,” among others.LinksSysdig’s 2025 Cloud-Native and Security Usage Report: https://sysdig.com/2025-cloud-native-security-and-usage-report/Sysdig on LinkedIn: https://www.linkedin.com/company/sysdig/Crystal’s LinkedIn: https://www.linkedin.com/in/crystal-morin/SponsorSysdig: https://sysdig.com/

What’s the difference between marketing and BS? On this episode, Corey Quinn is joined by Jonathan Cowperthwait, Duckbill’s brand-new Head of Marketing. Jonathan's career path is a bit unconventional. After all, not everyone can say their professional journey was influenced by The West Wing. Even though he’s a marketer by trade, Jonathan still has the technical know-how needed to work in the often expensive world of cloud economics. Have you ever wanted to know what The Duckbill Group’s relationship with AWS is really like? How fun is it to sit on domains like “oldmanstartup?” Is there a similarity between clouds and butts? This interview is the inside scoop on The Duckbill Group that you never knew you needed. Show Highlights(0:00) Intro(1:11) Duckbill Group sponsor read(1:45) Acquiring the Duckbill Group office post-pandemic(2:52) Keeping your pants on during a pandemic so you can officiate your nanny's wedding(6:07) Jonathan's background prior to joining The Duckbill Group(11:29) What Duckbill was looking for when they hired Jonathan(14:54) When marketing begins to feel like spam(15:40) The fun of having disposable domains and email addresses(18:20) The importance of a good name for a product(19:38) Duckbill Group sponsor read(20:07) The Duckbill Group isn't just Corey Quinn(21:03) The "Cloud to Butt" extension(24:01) Corey's beef with Google's AI search engine(24:57) What can people expect from the Duckbill Group's new marketing effort(30:58) Where you can find more from JonathanAbout Jonathan CowperthwaitJonathan Cowperthwait does positioning, messaging, and go-to-market strategy to maximize awareness and revenue for technology brands of all sizes.He prides himself on being a slow runner, fast talker, and good writer.LinksJonathan on LinkedIn: https://www.linkedin.com/in/cowperthwait/Jonathan on Bluesky: https://web-cdn.bsky.app/profile/cowp.coEmail Jonathan: [email protected] Corey: [email protected] Duckbill Group: duckbillgroup.com 

What were you doing at the age of 12? We’d wager to bet you weren’t getting invited to Google I/O. On this episode, Corey chats with Alex Zenla, the founder and CTO of Edera. Only in her mid-20s, Alex already has more than a decade’s worth of professional experience working in the tech industry. They discuss how Alex found her way into programming at a young age, her experiences with open source projects like the Dart Project and Chromium OS, and getting contacted by Google’s lawyers as a preteen. You’ll also get to learn about Alex’s company, Edera, and their creative approaches to Kubernetes container security using Xen hypervisors. Did we forget to mention that there are multiple sidebars about Minecraft in this one? So grab your pick axe, put on your headphones, and a Google legal will be at your door by the time we wrap up this conversation.Show Highlights(0:00) Intro(0:54) The Duckbill Group sponsor read(1:28) What is Edera?(2:18) Who is the target customer for Edera's product(7:50) Breaking down the overhead makeup of Edera(10:28) How Edera sidesteps the problems with container isolation(13:20) Alex's history working with tech(15:40) The Duckbill Group sponsor read(16:23) How a phone call with a lawyer helped get Alex to Google I/O at the age of 12(18:55) Starting Alex's proper tech career thanks to a Dart library(21:24) The important role of Minecraft in Alex's life and career(23:40) The value of good networking (28:15) What it's been like for Alex to raise a Series A(29:56) Where you can find more from AlexAbout Alex ZenlaAlex Zenla is a technologist that has 10+ years experience in the full-time corporate world who is rebuilding the foundations of infrastructure to be secure-by-design.Alex grew an interest in computers at the age of 7, learning about hypervisors and hardware technologies. At the age of 11, she was inspired by the concept of Chrome OS to get involved in low level systems, where she contributed to the Chromium and Chromium OS projects. This led to being invited to Google I/O 2012 by the Chrome OS team at just the age of 12. Eventually, the Dart programming language came along, and Alex got deeply involved in the ecosystem, contributing to the language and standard library, and building core open source technologies. At the age of 14, she was hired by an IoT company called DGLogik to build an IoT platform that could scale across complex networks, launching my career in IoT. At DGLogik, Alex became deeply involved in Google's IoT technologies across multiple divisions, ultimately ending up working at Google on their IoT platform for their internal Real Estate. In 2024, she retired from the IoT data sphere and started Edera, a company that is making computing secure-by-design.LinksAlex on Bluesky: https://bsky.app/profile/alex.zenla.ioSponsorThe Duckbill Group: duckbillgroup.com 

Andy Warfield joins Corey in this episode to discuss the evolution of storage technology at Amazon. This includes the evolution of S3 from archival storage to supporting modern AI and analytics. As Vice President and Distinguished Engineer at AWS, Andy is able to explain performance-enhancing innovations like S3 Tables and Common Runtime (CRT). On the other hand, challenges like compaction and namespace structuring are discussed. Reflecting on his journey from working on the Xen hypervisor to AWS, Andy shares insights into scaling S3, including buckets spanning millions of hard disks. Show Highlights(0:00) Intro(1:09) The Duckbill Group sponsor read(1:43) Andy’s background(3:38) How AWS envisioned services being used vs. what customers actually do with them(6:54) The frustration of legacy applications not keeping up with the times(10:14) Why S3 is so accurate(15:29) S3 as a role model for how a service should be run(18:04) The Duckbill Group sponsor read(18:46) Why AWS made Iceberg into a native offering(23:50) Why S3 Tables is slightly more expensive(28:23) How Andy handled the transition from Zen to Nitro(32:22) What Andy is currently excited about About Andy WarfieldAndrew Warfield is a VP / Distinguished Engineer at Amazon. As a senior technical leader at one of the world's largest technology companies, he plays a crucial role in shaping Amazon's engineering strategies and initiatives. LinksLinkedIn: https://www.linkedin.com/in/andywarfield/ Email: [email protected] SponsorThe Duckbill Group: duckbillgroup.com 

Ever wondered how Corey got to where he is today? You have Brian Weber to partially thank for that. On this episode of Screaming in the Cloud, Corey catches up with his old friend and mentor to talk about the ever-evolving world of tech. Brian’s been around the block a time or two having done significant stints at Pinterest, Facebook, and Twitter (during the Elon acquisition no less)! As Corey and Brian catch up, you’ll hear them chat about the importance of empathy, coaching the next generation of tech workers, and their conspiracies surrounding Google and Kubernetes. So grab your tinfoil hats, it’s time to go Screaming!Show Highlights(0:00) Intro(0:53) The Duckbill Group sponsor read(1:27) When Brian took Corey under his win(3:21) Brian's experience coming to the cloud as an engineer(7:24) Why it's important to reinvent yourself in tech(8:54) How Brian reacted to the industry adopting Kubernetes over Mesos Marathon(10:31) Kubernetes conspiracy theories(12:30) The importance of empathy in tech(15:46) Trying to advise younger generations entering tech(19:19) The Duckbill Group sponsor read(20:02) Working at Twitter when jobs started getting cut and the site frequently went down(22:41) The best way to navigate certification expiration(26:08) Talking about "The Golden Path”(28:52) Why you should always plan ahead in tech (and life)(34:21) Where you can find more from BrianAbout Brian WeberBrian is a former FedRAMP DevOps Engineer for Coralogix. He’s also been a Site Reliability Engineer at Twitter, Pinterest, and Facebook, where he has maintained large installations on-premises, building reliability, security, and developer efficiency. In my spare time, Brian skis, knits, cycles, bakes, and tries to spend as much time outdoors as possible.LinksBrian’s LinkedIn: https://www.linkedin.com/in/brian-weber-2423b55/SponsorThe Duckbill Group: duckbillgroup.com

On this Screaming in the Cloud Replay, we look back at our conversation with Amy Negrette. Before she joined DigitalOcean Senior Development Advocate, she was a cloud economist at The Duckbill Group. Prior to that, Amy worked as a cloud architect at Trek10, Inc., a cloud software engineer lead at Cloudreach, a software developer at ASRC Research and Technology Solutions, and a software engineer at Yahoo, among other positions. She’s also an organizer of Write/Speak/Code, an organization committed to helping Under Represented Genders sharpen their technical speaking and writing capabilities. Join Corey and Amy as they discuss the pros and cons of remote work, what Duckbill’s organizational structure is like, remote work during the pandemic vs. remote work during the before times, why it’s nice to be able to work whenever you want to work instead of during fixed hours, why the future of travel in the tech industry should change, how Corey and Amy met, what makes cloud economics come natural to Amy, a tool that helps recreate physical events online more effectively than Zoom, and more.Show Highlights(0:00) Intro(0:57) The Duckbill Group sponsor read(1:30) Amy’s experience working with The Duckbill Group during the pandemic(7:20) When Amy was the only cloud economist with a background in software engineering(12:36) Is it antiquated to go on-site to meet with clients?(16:23) Amy’s time spent working at NASA(17:55) The Duckbill Group sponsor read(18:38) What it’s like working IT for NASA(20:28) Amy’s background prior to cloud consulting(24:15) Amy’s view on public speaking events coming out of the pandemic (29:21) Corey’s qualms with re:Invent (31:51) Where you can find more from AmyAbout Amy Arambulo NegretteWith over ten years industry experience, Amy Arambulo Negrette has built web applications for a variety of industries including Yahoo! Fantasy Sports and NASA Ames Research Center. One of her projects modernized two legacy systems impacting the entire research center and won her a Certificate of Excellence from the Ames Contractor Council. Amy believe that strong and consistent communication can produce the best product and overall customer experience, whether it's in gaming, educational outreach, or internal tools. Her long term goal is to lead people and have creative control over my projects.LinksThe Duckbill Group: http://duckbillgroup.com/Amy’s Twitter: https://twitter.com/nerdypawsOriginal Episodehttps://www.lastweekinaws.com/podcast/screaming-in-the-cloud/a-conversation-between-cloud-economists-with-amy-arambulo-negrette/SponsorThe Duckbill Group: duckbillgroup.com