475: Open Source vs AI, PyPI Attacks & Palworld Penguins - DL475

Welcome to Destination Linux, Episode 475! Jill is your Pal Master today, guiding you through an episode filled with privacy insights, supply‑chain surprises, AI security shakeups, and a dash of Linux nostalgia. Ryan is here, Craig Rowland from Sandfly Security joins us, and Zeb will be back next week!

We kick things off with community feedback about resurrecting old hardware with Linux Mint, then dive into how a persistent Windows device ID helped investigators identify a ransomware operator despite VPNs and IP hopping. We explore a new PyPI supply‑chain attack, discuss whether open source can keep up in the age of AI, celebrate the re‑release of GIMP 0.54, and even talk a little Palworld.

Grab your favorite Pal and your Pal Spheres, this isn’t Pokémon, but you’ll want to collect every moment of this episode.

Stop breaking your own servers. Go to deviantairwaves.com/sandfly to see how agentless security actually respects your uptime.

And for the home lab warriors out there, you can secure your own fortress with the Sandfly Home Edition. Use the code DESTINATION50 for 50% off right now. That’s $50 for the first YEAR!

That's deviantairwaves.com/sandfly. Go get your uptime back.

Support the show:

Become a Patron: patreon.com/destinationlinux

Get Some Swap: shop.deviantairwaves.com

Support EFF: eff.org/destinationlinux

One Time Donation: buymeacoffee.com/destinationlinux

00:00:00 Welcome to Destination Linux

00:01:19 Community Feedback

00:08:12 Sponsored by Sandfly Security

00:14:09 Thanks to Our Supporters

00:18:05 Malware Operator Caught with Persistent Windows ID

00:34:33 PyPI Supply Chain Attack

00:37:39 Akrites Initiative Launched

00:57:07 GIMP 0.54 Released...Again!

01:04:33 Palworld is Fun

01:08:13 Closing Thoughts
Special Guest: Craig Rowland.