478: Destination Linux 478: The Arch AUR Attack, Jellyfin Shakeup, and Cinnamon’s Wayland Future
Summary
Destination Linux hosts Jill, Ryan, and Zeb discuss the massive AUR compromise affecting over 400 Arch packages, analyzing the supply chain risks and security implications for open source. They also clarify Microsoft’s hidden tracking identifiers, debate library resources, and cover the Jellyfin leadership shakeup. The episode concludes with lighthearted gaming chat and community support updates.
Topics discussed
Intro and episode overview
Community feedback: Libraries and languages
Sponsor: Sandfly security platform
Patrons and merchandise
CachyOS and the Arch User Repository
AUR supply chain attacks and trust issues
Mitigating risks: Reading PKGBUILDs and sandboxing
The future of open source trust and governance
Microsoft tracking IDs and gaming news
Jellyfin leadership resignation and burnout
Linux Mint, Cinnamon, and Wayland vs X11
Outro and Star Trek convention
Listen ad-free on Castria