The hottest Cloud Substack posts right now

And their main takeaways
Category
Top Technology Topics
Resilient Cyber 0 implied HN points 11 Oct 22
  1. The newsletter focuses on important topics like Cybersecurity and Cloud technologies. These are crucial for protecting information online.
  2. It covers DevSecOps, which combines software development, security, and operations. This helps in making sure that software is safe and reliable.
  3. Software Supply Chain Security is another key topic, aiming to keep software from being tampered with or compromised. It's about ensuring that the entire process of software creation is secure.
Dana Blankenhorn: Facing the Future 0 implied HN points 14 Oct 24
  1. Moore's Law makes technology cheaper and faster, but Huang's Law shows that AI hardware costs and requires more energy, making things more expensive overall.
  2. Current AI models, like Large Language Models (LLMs), can't truly think; they just pull information from existing data without understanding it.
  3. As the demand and costs for using AI grow, smaller LLMs that can actually help people may become more valuable and useful.
Owen’s Substack 0 implied HN points 24 Mar 24
  1. R2R is a helpful tool for making RAG systems easier to build and launch. It gives developers a structured way to create their projects without wasting too much time.
  2. The framework lets developers customize their systems and choose different components like databases and models. This means they can find the best setup for their needs.
  3. R2R has strong community support to help users connect and share ideas. Developers are encouraged to join discussions and learn from each other while working on their RAG systems.
Get a weekly roundup of the best Substack posts, by hacker news affinity:
Database Engineering by Sort 0 implied HN points 01 Oct 24
  1. Sort is now available on the AWS Marketplace, allowing users to easily use their AWS credits for services.
  2. They launched an AI demo that helps users propose data changes, making the process simpler and more efficient.
  3. The Sort API documentation has been improved for better navigation, making it easier for developers to use.
The API Changelog 0 implied HN points 26 Nov 24
  1. Kong raised $175 million to grow its API technology and expand globally. This is a big step for them to improve their services and bring more innovation to the market.
  2. Strava has tightened its API access to protect user privacy, affecting a small number of third-party apps. This change shows their commitment to keeping user data safe.
  3. Rakuten SixthSense launched new observability solutions to ensure data integrity and security. These tools are important for businesses to manage their data and APIs safely.
Phoenix Substack 0 implied HN points 23 Jan 25
  1. Brazilian Jiu-Jitsu teaches you to stay calm and adapt to pressure, which is also important in cybersecurity. When faced with challenges, it helps to think creatively and adjust your strategy.
  2. In cybersecurity, constantly changing your environment can confuse attackers, making it harder for them to plan their moves. This is similar to how a strong position in Jiu-Jitsu can give you an advantage in a fight.
  3. Instead of just waiting to defend, it’s better to be proactive and force the attacker to make mistakes. This offensive mindset helps you take control, whether in martial arts or protecting your network.
My Makerspace 0 implied HN points 02 Feb 25
  1. Using PostgreSQL 10 from amazon-linux-extras can save you a lot of hassle. It's simple and works well in AWS Lambda.
  2. Newer versions of PostgreSQL can cause issues, so it's often better to stick with stable, older versions.
  3. Make sure to set up your VPC correctly to connect to Aurora. Also, always use environment variables for your database credentials.
More Than Moore 0 implied HN points 24 Feb 25
  1. AMD expects their AI business to grow to over $10 billion a year. This shows they are really focusing on artificial intelligence as a big part of their future.
  2. They are planning to create an AI Developer Cloud, which will help developers access tools for building AI applications. This could make it easier for more people to work on AI projects.
  3. AMD believes that training AI models will be the main focus in 2025. This means they are shifting gears from just inference tasks to actually training the models needed for AI.
Brick by Brick 0 implied HN points 10 Jun 25
  1. AI agents are becoming smarter and can work kind of like teammates in businesses. They act independently, but this can make them tricky to manage securely.
  2. Just like we protect different software services, we should use strict security rules for AI agents to make sure they can only do what they really need to do.
  3. While we can learn from how to secure traditional software, AI agents are different and need special rules to keep them safe because they can act unpredictably.
Kartick’s Blog 0 implied HN points 14 Nov 25
  1. Staying offline can be refreshing and help break habits, like constantly watching YouTube. It's a chance to reset and experience life differently.
  2. Working with inconsistent internet means adapting your workflow to async methods. This lets you send messages and uploads at your own pace instead of needing instant connections.
  3. Using tools like AirDrop and understanding your phone's settings can help manage data and files more effectively. A good plan and reliable backup options can make a big difference in connectivity.
Digital Native 0 implied HN points 03 Dec 25
  1. AI was the defining theme of 2025: companies leaned into augmentation over full automation, while IP and a growing backlash against fully AI-generated creators became major conversations.
  2. Big market moves reshaped tech — TikTok survived, a record VC-backed acquisition was set, prediction markets and space/defense heated up, and robotics began to help re-shore manufacturing.
  3. Applied AI showed tangible wins in healthcare and mental health, but consumer AI hardware and mainstream digital clones remain early and haven’t broken through yet.
Phoenix Substack 0 implied HN points 11 Dec 25
  1. Static, predictable infrastructure is a liability. When systems don't change, attackers can map and exploit them easily.
  2. Attackers use AI to automate reconnaissance, turning initial mapping into a cheap, reusable asset while defenders bear the cleanup costs.
  3. Moving Target Defense is the missing enforcement layer: constantly change assets and topology so attackers must redo reconnaissance and pay higher ongoing costs.
OSS.fund Newsletter 0 implied HN points 18 Dec 25
  1. Combine Run vs Change with AI vs Non-AI when allocating budget so AI isn’t siloed; set portfolio ranges and rebalance regularly.
  2. Treat much cloud OpEx as effectively committed spend and actively manage committed vs variable budget. Keep enough variable budget to absorb shocks and make FinOps and governance real before the CFO enforces them.
  3. Use guardrails: keep most work incremental and reserve step-change bets for Change+AI, treating Run as efficiency and Change as growth. Require controls, fallbacks and audit trails for customer-facing AI, and advance autonomy gradually from recommend to assist to execute.
Phoenix Substack 0 implied HN points 17 Mar 26
  1. Reactive detection and simple deception aren’t enough; if your infrastructure stays put attackers can exploit it before you notice.
  2. Phoenix implements Automated Moving Target Defense for Kubernetes by proactively moving pods, rotating identities, and reducing attacker dwell time so exploits matter less.
  3. The open-source operator gives a solid baseline for most teams, while a closed-source version adds granular policies, specialized AI/NVIDIA support, and faster predictive logic for large or regulated environments.