Cloud Experts Unleashed – Détails, épisodes et analyse

Ben & Ryan Show Episode 24

In this episode, your hosts Ben Nadel and Ryan Brown go guest-free and take the opportunity to dive into ColdFusion bugs, guinea pig maintenance, and their latest experiments in app building and AI usage.They kick things off with some light banter, guinea pig parenting tips, and custom shoes, before transitioning into deep debugging talk, asynchronous programming quirks in ColdFusion 2025, and the evolving relationship developers have with AI tooling.Key Points• Ryan surprises Ben with custom ColdFusion-themed shoes for the upcoming CF Summit.• Ben shares two deep ColdFusion 2025 bugs related to asynchronous iteration and CFQuery behavior.• Big Sexy Poems—a side project by Ben—is being built using HTMX and AlpineJS with a ColdFusion backend.• Debugging ColdFusion edge cases requires intense reduction and isolation of code to find root causes.• Ryan and Ben discuss AI voice mode frustrations and using AI for sales and dev support—highlighting both promise and pitfalls.Ben introduces his new ColdFusion 2025 app, “Big Sexy Poems,” and why he built it.• The app helps poets count syllables, find rhymes, and synonyms using the Datamuse API.• Ben is rebuilding it to learn HTMX and AlpineJS in a real-world context.• ColdFusion 2025 forces him to rethink and modernize old code written for CF2021.• Features include caching, shareable links, and saving user poems.Ben outlines two complex ColdFusion bugs that derailed development.• Bug #1: CFQuery inside asynchronous iteration dumps SQL statements to the page.• Bug #2: A three-level deep array iteration causes closure variables to vanish.• Both bugs are confirmed to go back as far as ColdFusion 2021.• Fixes required rewriting code to remove async parallelism and use manual loops.They explore how to isolate and debug ColdFusion bugs in large codebases.• Ben shares his method: reduce files down to minimal reproducible cases.• Progressively merge and remove components until only the bug trigger remains.• Use CF’s ability to simulate services to isolate logic layers during debugging.• Debugging complex async issues often takes hours but can result in 20-line reproductions.Conversation pivots to AI tools, frustrations, and how Ryan uses AI for sales support.• Ben tried ChatGPT voice mode again and found it frustratingly sycophantic.• Ryan uses persona-driven GPTs to simulate sales coaches and customer role-play.• Operator and GPT Agents have shown promise in configuring servers from specs.• Even advanced tools sometimes fail mid-task or require lots of oversight.• The team plans a live Ben and Ryan Show at CF Summit to talk AI and dev tools in person.

Ben & Ryan Show Episode 23

In this episode, your hosts Ben Nadel and Ryan Brown are joined by Mark Takata, Senior Technical Evangelist for Adobe ColdFusion, to dive deep into the evolving world of "vibe coding" and how AI is transforming development workflows. The trio explore the tools, mental friction, and cultural shifts developers face when working alongside AI, offering a mix of real-world use cases, developer gripes, and future-gazing insights into how AI might shape team structure and job roles.

Key Points

• Vibe coding is reshaping how developers approach prototyping, testing, and feature iteration using tools like Claude, ChatGPT, and Cursor

• Developers are grappling with trust issues, debugging quirks, and the loss of "good friction" in the coding process

• Cursor, a VS Code-based AI IDE, is emerging as a powerful tool for AI-assisted development and code generation at scale

• AI could reshape team roles, potentially phasing out junior positions and introducing roles like AI coaches or prompt engineers

• The group previews their upcoming live session at the Adobe ColdFusion Summit, where these AI coding dynamics will take center stage

Vibe coding is introduced as a developer trend where AI tools generate code based on high-level input

• Ben shares that his team's lead has spent months learning how to "steer" Claude and manage scope, memory, and output reliability

• Ryan recounts building a Bingo app with ChatGPT, running into scope creep and frustrating regressions with each iteration

• The team discusses the challenge of context loss and how to handle patching or manually adjusting code when working with AI

Mark breaks down his real-world usage of Cursor and how it differs from using ChatGPT

• Developers can open existing projects, give directions, and have Cursor fill in the gaps based on previous patterns

• He highlights how he uses it to rapidly prototype ColdFusion demos, noting an increase in productivity and output

• Cursor allows mixing Claude, GPT, and Check55 models for different task types

• Pro-level versions of Cursor offer metrics, visibility into prompt volume, and sophisticated model orchestration

Ben reflects on his preference for copy-paste workflows over AI generation

• He points out the "non-deterministic" nature of AI and the potential for it to introduce unseen changes across entire files

• The team debates whether AI is removing helpful friction that leads to better abstractions and more thoughtful code

• The trio agrees that AI needs better guardrails and consistency for it to be fully trusted in production codebases

The group explores how AI tools could evolve to meet professional coding standards

• Cursor could serve as a CFQuery-like abstraction for AI tooling, handling the translation between models

• AI-generated code may need standardization through community-driven templates or frameworks like PromptOS

• The role of code review could shift, with AI models doing first-pass reviews and flagging issues for humans

• Review at scale is a concern as AI-generated code grows in complexity and volume

Ryan and Ben explore the idea of AI as a team member

• Mark tells a story of a developer with a briefcase of AIs acting as a full software team

• They discuss how AI may appeal more to managers than ICs due to the loss of individual agency

• Ben shares concerns about how PR (pull request) reviews become unmanageable when AI floods teams with code

• Mark mentions teams are already using multiple AIs to cross-review code before surfacing issues to humans

The conversation shifts to how companies should approach AI adoption

• There's concern about erasing junior roles and losing the traditional developer learning pipeline

• Ryan suggests managers be transparent about whether the goal is augmentation or headcount reduction

• Mark emphasizes the need for AI coaches—specialists who manage prompt libraries, usage patterns, and workflows

In this episode, your hosts, Ben Nadel and Ryan Brown, sit down with Steve Leve from ShareASale to dive into the challenges and lessons learned from navigating an acquisition, managing technical debt, and executing large-scale migrations. They explore the impact of legacy systems, the balance between maintaining old infrastructure and innovating new solutions, and the role of AI in modern software development.

Key Points:

• Steve shares his journey from a small-town coder to a principal architect at ShareASale.

• The team discusses the challenges of merging companies post-acquisition, including business model differences and technical debt.

• Lessons from large-scale infrastructure migrations, including moving from ColdFusion monoliths to modern architectures.

• The importance of balancing innovation with maintaining existing systems and the trade-offs of cloud computing.

• How AI is reshaping development practices, from documentation to automated testing.

Migrating an entire business platform brings its share of surprises and roadblocks.

• Steve shares his experience of being acquired by AWIN and the growing pains that followed.

• The team discusses the complexities of merging different operational and technological approaches.

• They reflect on the unexpected technical challenges, including a looming data center shutdown and hardcoded infrastructure dependencies.

• The importance of knowledge sharing within a team to prevent reliance on a single expert.

Navigating technical debt is all about prioritization and timing.

• The group explores the idea that not all technical debt needs to be fixed—only what blocks innovation or scaling.

• Steve emphasizes "tidy first" as an approach to incrementally improving code rather than massive rewrites.

• Real-world examples of how debt manifests in migrations and why some old code surprisingly holds up.

• The discussion touches on key strategies for managing technical debt within an evolving business landscape.

Migrating to AWS and cloud adoption brings new efficiencies but also new constraints.

• Steve and Ben share stories of migrating to AWS, the surprises along the way, and the need for expert help.

• Lessons on the hidden costs of cloud adoption and why simply lifting and shifting to the cloud isn't always the best strategy.

• The team debates the trade-offs between autoscaling, managed services, and maintaining on-premise solutions.

• Real-world examples of cost-efficient cloud migration strategies.

Strangler patterns, AI-driven documentation, and the future of software development.

• The team discusses the strangler pattern as a way to incrementally transition from legacy systems to modern platforms.

• Steve shares insights on how AI is being used for documentation, testing, and even code analysis.

• The group speculates on how AI-driven tools can improve developer efficiency and streamline migrations.

• They reflect on the importance of keeping up with evolving tech while maintaining a pragmatic approach to change.

This episode is packed with practical insights, real-world experiences, and candid discussions about the messy, challenging, and ultimately rewarding process of managing technical debt, cloud migration, and acquisitions. Whether you're a developer, architect, or IT leader, there's something valuable here for you!

In this episode, your hosts, Ben Nadel and Ryan Brown, sit down with Andrew Pendleton, Senior Director of Design Systems at Verizon, to discuss the role of design systems in driving consistency, accessibility, and innovation. They explore how Verizon’s approach to accessibility goes beyond compliance, how design systems empower both designers and engineers, and the challenges of maintaining a unified system in a vast enterprise.

Key Points:

• Verizon’s Design System centralizes design and engineering decisions to create scalable frameworks for digital experiences.

• Accessibility at Verizon is treated as a driver of innovation, not just compliance, influencing best practices and component design.

• The impact of constraints in design systems, allowing teams to move faster and focus on complex problems.

• The importance of cross-team communication and standardized language in improving adoption and efficiency.

• Strategies for starting a design system and integrating accessibility in an organization.

Andrew shares how his background in digital art, development, and management uniquely positioned him to lead Verizon’s Design System team.

• He discusses the importance of bridging the gap between designers, engineers, and product teams through shared terminology and best practices.

• The conversation covers how accessibility has led to innovations like responsive web design, captioning, and high-contrast modes.

• Verizon’s approach to user testing includes an accessibility lab where customers with disabilities provide direct feedback on digital and physical product experiences.

The team dives into how Verizon builds and maintains accessible components for its design system, including an advanced video player with baked-in accessibility features.

• Andrew explains how they studied platforms like YouTube, Adobe, and native HTML elements to build an optimized solution.

• The importance of leveraging the platform but extending it where necessary to maintain accessibility.

• The balance between stability and flexibility in design systems to allow innovation while maintaining consistency.

The discussion shifts to the challenges of adoption within a large enterprise and strategies to encourage engineers and designers to embrace the design system.

• Architectural misalignment and legacy technologies present obstacles to adoption, requiring phased transitions.

• Design tokens help standardize visual elements even in non-React environments.

• The role of accountability in ensuring accessibility and quality standards are maintained, even when teams customize components.

Andrew and the hosts close the episode by discussing how individuals and organizations can begin implementing accessibility in their work.

• Recommended resources for learning about accessibility, including books and online tools.

• The importance of having an accessibility champion within a company to drive awareness and adoption.

• Practical steps developers and designers can take to improve their accessibility practices, even in organizations without formal accessibility initiatives.

This episode is packed with insights on design systems, accessibility, and the intersection of technology and user experience. Whether you’re a developer, designer, or product leader, there’s something here for you!

Ben and Ryan Show Episode 12

In this episode, your hosts Ben Nadel and Ryan Brown sit down with security expert Brian Riley, author of the HoyaHaxa blog, to discuss ColdFusion security vulnerabilities and best practices for mitigating risks. The conversation dives into recent ColdFusion exploits, how security patches impact developers, and the broader implications of securing applications beyond just ColdFusion itself.

Key Points:

• ColdFusion has been targeted by multiple 0-day vulnerabilities, highlighting its continued presence in critical systems.

• Adobe's recent security updates introduce breaking changes, forcing developers to make necessary adjustments.

• Security is a multi-layered approach—application security is just one part of a larger ecosystem that includes OS, networking, and cloud infrastructure.

• The trade-off between convenience and security often leads to vulnerabilities, especially with features like remote CFC access.

• Managed hosting providers and security tools like HackMyCF can help developers stay ahead of emerging threats.

Discussion Highlights:

ColdFusion Security Landscape

• ColdFusion is still actively targeted by attackers, despite debates over its relevance.

• Government and financial institutions heavily rely on ColdFusion, making it a high-value target.

Adobe's Recent Security Updates

• Adobe is pushing security patches that enforce stricter security measures, sometimes breaking legacy applications.

• The variable scoping issue is a major focus—forcing developers to fix long-standing bad practices.

• Deprecated encryption methods are being phased out for stronger security.

Common Security Best Practices

• Regularly update ColdFusion and all associated components like Java and Tomcat.

• Restrict access to CFIDE and ColdFusion Administrator to prevent common exploits.

• Use a multi-layered defense strategy, including web application firewalls (WAFs), OS-level security, and network protections.

Challenges of Security in Hosting and DevOps

• Managed hosting providers must balance security with not breaking customer applications.

• Attackers often leverage vulnerabilities beyond just the ColdFusion layer, including database, OS, and network weaknesses.

• Cloudflare and similar services help block DDoS attacks but aren't always sufficient in real-time scenarios.

The Convenience vs. Security Tradeoff

• Many vulnerabilities exist because developers prioritize ease of use over security.

• Features like remote CFC access, while convenient, often introduce security risks.

• Security teams and developers must collaborate to strike the right balance between usability and protection.

Final Thoughts and Resources

• Brian Riley's blog HoyaHaxa provides deep dives into ColdFusion security issues.

• OWASP’s Top Ten is a great resource for understanding common security vulnerabilities.

• Developers should engage in proactive security practices rather than waiting for the next 0-day exploit.

Recent ColdFusion Related HoyaHaxa Blogs

• https://www.hoyahaxa.com/2024/12/an-initial-analysis-of-cve-2024-53961.html

• https://www.hoyahaxa.com/2024/08/bsideslv-2024-slides-modern-coldfusion.html

• https://www.hoyahaxa.com/2024/07/on-coldfusion-administrator-access.html

Ben and Ryan Show Episode 11

In this episode, hosts Ben Nadel and Ryan Brown interview Grant Powell, founder of Curios. Grant shares his journey in the Web3 and NFT space, detailing how Curios started as a licensable NFT platform and successfully pivoted after the NFT bubble burst. The discussion dives deep into digital ownership, blockchain challenges, and how Curios is revolutionizing digital content distribution for creators.

Key Points:

• Curios' Evolution – Originally an NFT licensing platform, Curios pivoted to focus on digital content ownership after the market downturn.

• Blockchain & ColdFusion – The role of ColdFusion in building Curios' rapid development and API-driven platform.

• NFTs Beyond Art – Real-world applications for NFTs in digital ownership, including music, books, and event ticketing.

• Decentralization – The benefits and challenges of decentralized platforms compared to centralized ones like Ticketmaster.

• AI in Collectibles – Grant’s work with collectibles.com and AI-driven identification and valuation of collectibles.

Episode Breakdown:

Curios' Origin and Pivot

• Curios started as a platform to help businesses create and manage NFTs.

• The NFT craze led to unrealistic expectations, and as the hype collapsed, Curios pivoted to a broader digital ownership platform.

• ColdFusion played a key role in the flexibility and speed of their platform’s development.

Real Use Cases for NFTs

• NFTs are more than just overpriced JPEGs—they serve as proof of ownership for digital content like eBooks, music, and videos.

• Grant highlights how digital ownership differs from physical ownership and why secondary markets for digital goods are still developing.

• Ticketing is a strong use case, especially for VIP passes and exclusive access to events.

Challenges of Web3 and Blockchain Scalability

• Many blockchains create “walled gardens” that limit interoperability.

• Curios was among the first platforms to support multiple blockchains.

• Scalability issues in blockchain transactions require additional abstraction layers to ensure speed and efficiency.

Digital Rights and Ownership Protection

• Blockchain technology ensures proof of ownership, but enforcement remains an issue.

• The right to access content is separate from hosting the content itself, allowing removal when necessary.

AI and the Future of Collectibles

• Grant discusses collectibles.com and how AI is transforming the world of collecting.

• AI can help identify, grade, and value physical collectibles like coins, comics, and trading cards.

• The future of AI-driven marketplaces and its impact on the secondary market for rare items.

The Balance Between Work, Entrepreneurship, and Life

• Grant and Ben share insights on time management and balancing multiple projects.

• The importance of structuring schedules to maintain productivity without burnout.

• Investors’ perspectives on serial entrepreneurship and the fine line between focus and diversification.

Ben and Ryan Show Episode 10

In this episode of the Ben and Ryan Show, hosts Ben Nadel and Ryan Brown are joined by Dan Short, the Director of Engineering at Virtuous Software, to explore the dynamics of career paths in software engineering, particularly the transition from individual contributor to management. The conversation dives deep into personal experiences, practical advice, and insightful reflections on leadership, motivation, and the evolving role of technology in the workplace.

Key Points:

• The transition from individual contributor to management and the challenges of developing management skills

• Understanding personal "why" and aligning career choices with motivation and joy.

• Can you do both - balancing technical expertise with managerial responsibilities (or not).

• Addressing the role of AI as a supportive tool rather than a replacement for engineering roles.

• Strategies for fostering team motivation and achieving organizational goals effectively.

Dan’s Introduction and Career Path

Dan shares his journey from the Army to becoming the Director of Engineering at Virtuous Software, highlighting his transition from administrative tasks to technical and managerial roles.

• Early career in automating processes using Microsoft tools.

• Progression from IT management to web development during the early 2000s.

• Moving into management out of necessity and adapting through trial and error.

• Building and leading teams at companies like CoStar and Virtuous Software.

The Reluctant Manager Transition

Dan discusses the challenges of moving from an individual contributor to management, focusing on the struggle to find new ways to measure success and the initial reluctance to take on leadership responsibilities.

• Discovering satisfaction in mentoring and enabling team success.

• Differences between technical wins and people-oriented victories.

• Importance of defining clear roles and responsibilities.

• Lessons learned from managing through uncertainty and resistance.

Navigating Career Path Options

The team debates whether to grow into management within an existing company or seek leadership roles elsewhere, emphasizing the importance of mentorship and personal alignment.

• Balancing technical and managerial responsibilities effectively.

• Challenges of transitioning into management in familiar versus new environments.

• The value of mentorship and support systems in career growth.

• Recognizing when management might not align with personal goals.

The Role of AI and Technology in Engineering

Exploring the evolving role of AI in software development, Dan highlights its potential as a tool for enhancing productivity rather than replacing engineers.

• Practical applications of AI, like automating repetitive tasks and generating ideas.

• Addressing concerns about AI replacing human creativity and problem-solving.

• The importance of maintaining a people-centric approach in technology roles.

• Using AI for brainstorming and augmenting decision-making processes.

Advice for Aspiring Managers

Dan offers advice for those curious about management, stressing the importance of aligning career choices with personal joy and motivations.

• Trying out mentorship and team lead roles before committing to management.

• Leveraging books, podcasts, and thought leaders for continuous learning.

• Staying curious and focusing on people-centric problem-solving.

• Cultivating a supportive workplace that values both management and IC career paths.

Ben and Ryan Show Episode 9 In this episode your hosts, Ben Nadel and Ryan Brown, talk with Shawn Gorrell and explore diverse topics ranging from AI applications to organizational psychology and ethics, emphasizing practical tools and thoughtful strategies for teams and individuals.

Key points:

• AI as a spectrum: Some embrace it as life-changing, while others fear its implications.

• Early AI exploration focused on ethics and societal impacts.

• Ethical frameworks often lag behind technological advancements.

AI's practical applications, such as automating tedious tasks, were highlighted, with Shawn discussing potential benefits for developers:

• Automating unit testing could save time and increase efficiency.

• AI's role as an assistant or "intern" to augment but not replace human expertise.

• Validation remains critical to ensure output reliability.

Shawn emphasized the importance of prompts and domain knowledge for effective AI use.

They explored organizational and individual growth, discussing how to create meaningful work environments:

• Helping others achieve goals can foster personal growth.

• Transparency in team dynamics, such as working agreements, improves collaboration.

• Intentionality in interactions, especially in remote or hybrid work setups, enhances effectiveness.

The ethics of AI, especially in decision-making, was examined:

• Past AI missteps, like biased hiring algorithms, underscore the need for accountability.

• Predictive policing and crime data illustrate potential for reinforcing systemic biases.

• Informing consent and transparency in algorithms are vital to building trust.

Shawn shared insights on soft skills and people management:

• People skills are a key differentiator for success in technology roles.

• The balance between technical expertise and empathy fosters better teams and outcomes.

• Team exercises, like identifying unnecessary tasks, can drive efficiency and morale.

The episode closes with reflections on creativity, evolving frameworks, and career motivations.

• Technology should alleviate mundane tasks, enabling more focus on innovation and enjoyment.

• Tools like AI can aid creativity but should complement, not replace, human ingenuity.

• Keeping foundational skills while adapting to tools like GPT ensures long-term success.

Ben and Ryan Show Episode 8 In this episode, your hosts Ben Nadel and Ryan Brown talk about learning throughout your life.

Key topics included:

• Plug in your laptop if you are recording a podcast • Dogs can keep you up more than kids • Ben and Ryan are ChatGPT celebrities • What are the limits of what AI can do for you • Code editing in ChatGPT • Ben gets wowed with live iterative ChatGPT-ing • Difference between single page and multi page applications • Compare MySQL, PostgreSQL, and MS SQL • When can you use the 5 second rule • Ben and Ryan Show Live is Born

Ben and Ryan Show Episode 7 In this episode, your hosts Ben Nadel and Ryan Brown are joined by Adobe Product Manager, Charvi Dhoot, and Semify CTO, Brian Sappey. The group discusses the upcoming ColdFusion 2025 release and how Adobe determines which features to include in the release. And as always, the guys go on their many tangents.

Key topics included:

• Feature Development: Charvi explained that ColdFusion development prioritizes user needs, stability, security, and performance, often influenced by customer feedback and industry trends. • Integration Enhancements: Brian highlighted a feature enabling seamless integration with Microsoft's Azure user store, enhancing security and scalability for enterprise applications. This feature originated from his team's work and broader community needs. • Plugins and Community Contributions: The idea of a plugin marketplace was discussed as a way to allow developers to share and monetize their ColdFusion plugins. While technically feasible, its implementation depends on community interest and resources. • Tags vs. Script Debate: A recurring challenge in ColdFusion development involves balancing support for legacy tag-based code with newer script-based implementations, ensuring compatibility while encouraging modern practices. • ColdFusion 2025 Features: The episode touched on the CSV parsing feature, conceptual compression benefits, and enhancements like streamlined Java object integration. Charvi emphasized the significant effort to address long-pending issues and modernize the platform.