475: Open Source vs AI, PyPI Attacks & Palworld Penguins - DL475

Welcome to Destination Linux, Episode 475! Jill is your Pal Master today, guiding you through an episode filled with privacy insights, supply‑chain surprises, AI security shakeups, and a dash of Linux nostalgia. Ryan is here, Craig Rowland from Sandfly Security joins us, and Zeb will be back next week! We kick things off with community feedback about resurrecting old hardware with Linux Mint, then dive into how a persistent Windows device ID helped investigators identify a ransomware operator despite VPNs and IP hopping. We explore a new PyPI supply‑chain attack, discuss whether open source can keep up in the age of AI, celebrate the re‑release of GIMP 0.54, and even talk a little Palworld. Grab your favorite Pal and your Pal Spheres, this isn’t Pokémon, but you’ll want to collect every moment of this episode. Stop breaking your own servers. Go to deviantairwaves.com/sandfly to see how agentless security actually respects your uptime. And for the home lab warriors out there, you can secure your own fortress with the Sandfly Home Edition. Use the code DESTINATION50 for 50% off right now. That’s $50 for the first YEAR! That's deviantairwaves.com/sandfly. Go get your uptime back. Support the show: Become a Patron: https://patreon.com/destinationlinux Get Some Swap: https://shop.deviantairwaves.com/ Support EFF: https://www.eff.org/destinationlinux One Time Donation: https://buymeacoffee.com/destinationlinux 00:00:00 Welcome to Destination Linux 00:01:19 Community Feedback 00:08:12 Sponsored by Sandfly Security 00:14:09 Thanks to Our Supporters 00:18:05 Malware Operator Caught with Persistent Windows ID 00:34:33 PyPI Supply Chain Attack 00:37:39 Akrites Initiative Launched 00:57:07 GIMP 0.54 Released...Again! 01:04:33 Palworld is Fun 01:08:13 Closing Thoughts Special Guest: Craig Rowland.