475: Open Source vs AI, PyPI Attacks & Palworld Penguins - DL475

Welcome to Destination Linux, Episode 475! Jill is your Pal Master today, guiding you through an episode filled with privacy insights, supply‑chain surprises, AI security shakeups, and a dash of Linux nostalgia. Ryan is here, Craig Rowland from Sandfly Security joins us, and Zeb will be back next week!

We kick things off with community feedback about resurrecting old hardware with Linux Mint, then dive into how a persistent Windows device ID helped investigators identify a ransomware operator despite VPNs and IP hopping. We explore a new PyPI supply‑chain attack, discuss whether open source can keep up in the age of AI, celebrate the re‑release of GIMP 0.54, and even talk a little Palworld.

Grab your favorite Pal and your Pal Spheres, this isn’t Pokémon, but you’ll want to collect every moment of this episode.

Stop breaking your own servers. Go to deviantairwaves.com/sandfly to see how agentless security actually respects your uptime.

And for the home lab warriors out there, you can secure your own fortress with the Sandfly Home Edition. Use the code DESTINATION50 for 50% off right now. That’s $50 for the first YEAR!

That's deviantairwaves.com/sandfly. Go get your uptime back.

Support the show:
Become a Patron: https://patreon.com/destinationlinux

Get Some Swap: https://shop.deviantairwaves.com/

Support EFF: https://www.eff.org/destinationlinux

One Time Donation: https://buymeacoffee.com/destinationlinux

00:00:00 Welcome to Destination Linux
00:01:19 Community Feedback
00:08:12 Sponsored by Sandfly Security
00:14:09 Thanks to Our Supporters
00:18:05 Malware Operator Caught with Persistent Windows ID
00:34:33 PyPI Supply Chain Attack
00:37:39 Akrites Initiative Launched
00:57:07 GIMP 0.54 Released...Again!
01:04:33 Palworld is Fun
01:08:13 Closing Thoughts

Special Guest: Craig Rowland.