475: Open Source vs AI, PyPI Attacks & Palworld Penguins - DL475
Summary
Hosts Jill and Ryan welcome Sandfly Security CEO Craig Roland to discuss Linux security, privacy, and hardware revival. They cover a listener’s success resurrecting an old MacBook with Linux Mint, the limitations of VPNs against device fingerprinting, and supply chain risks in Python packages. The episode also explores how AI accelerates both cyberattacks and defensive efforts, highlighting the Linux Foundation’s new Akrite initiative for shared threat intelligence.
Topics discussed
Intro and Community Feedback: Bev's MacBook Repair
DIY Repairs, Linux Mint on Old Macs, and Hardware Upgrades
Sponsor: Sandfly Agentless Linux Security and Black Hat
Patrons, EFF Partnership, and Show Merchandise
Privacy Lessons: Device Fingerprinting vs. VPNs
Linux Machine IDs, Browser Fingerprinting, and Hacker Ego
Supply Chain Chaos: xz Utils and AI-Driven Attacks
Linux Foundation's Akrite Initiative for Open Source Security
Linux Nostalgia: The History of GIMP and GTK
Palworld on Linux, Final Thoughts, and Sign Off
Listen ad-free on Castria