485: Destination Linux 485: Craig from Sandfly on Linux Malware Trends, OpenRGB Upgrades & Big Distro News
Summary
Hosts Ryan, Jill, and Zeb discuss community feedback on Arch Linux's AUR security, defending the distro against recent malware attacks. Guest Craig from Sandfly Security shares insights from his upcoming Oslo talk on Linux network implants, covering trends like Go-based cross-platform malware, fileless memfd attacks, and the risks of IoT botnets. The episode also highlights the OpenRGB release candidate for managing RGB lighting and announces a new Patron hangout date.
Topics discussed
Introduction and guest welcome
Announcement of Patron Hangout event
Debate on Arch Linux security and AUR risks
Sandfly Security agentless platform promotion
New Destination Linux merchandise reveal
Craig's upcoming talk on Linux network implants
Discussion on red teaming and hacker ethics
Analysis of Golang malware and fileless attacks
Detecting in-memory and packed malware
IoT device security and proxy network risks
Kernel thread masquerading and rootkits
Compiling rootkits on compromised devices
Sandfly 6.0 launch and blog resources
Jill's pink setup and vintage refrigerator story
OpenRGB 1.0 release and hardware support
Peppermint OS supporting both X11 and Wayland
Ubuntu 26.0 kernel version decision
MX Linux DDoS attack and new updates
MX Linux hardware support and community help
Closing remarks and final sign-off
Listen ad-free on Castria