We kick things off with community feedback about resurrecting old hardware with Linux Mint, then dive into how a persistent Windows device ID helped investigators identify a ransomware operator despite VPNs and IP hopping. We explore a new PyPI supply‑chain attack, discuss whether open source can keep up in the age of AI, celebrate the re‑release of GIMP 0.54, and even talk a little Palworld.

Grab your favorite Pal and your Pal Spheres, this isn’t Pokémon, but you’ll want to collect every moment of this episode.

Stop breaking your own servers. Go to deviantairwaves.com/sandfly to see how agentless security actually respects your uptime.

And for the home lab warriors out there, you can secure your own fortress with the Sandfly Home Edition. Use the code DESTINATION50 for 50% off right now. That’s $50 for the first YEAR!

That's deviantairwaves.com/sandfly. Go get your uptime back.

Support the show:
Become a Patron: https://patreon.com/destinationlinux

Get Some Swap: https://shop.deviantairwaves.com/

Support EFF: https://www.eff.org/destinationlinux

One Time Donation: https://buymeacoffee.com/destinationlinux

00:00:00 Welcome to Destination Linux
00:01:19 Community Feedback
00:08:12 Sponsored by Sandfly Security
00:14:09 Thanks to Our Supporters
00:18:05 Malware Operator Caught with Persistent Windows ID
00:34:33 PyPI Supply Chain Attack
00:37:39 Akrites Initiative Launched
00:57:07 GIMP 0.54 Released...Again!
01:04:33 Palworld is Fun
01:08:13 Closing Thoughts

Special Guest: Craig Rowland.

Next, Mo provides an expert breakdown of how AI is revolutionizing security research. From Project Glasswing to the Alpha Omega project, we look at how frontier models are being used to find (and fix) vulnerabilities in critical infrastructure like the Linux kernel. We discuss the "personality quirks" of different AI models and why human expertise is still the "apex predator" in the security chain.

Ryan also shares an update on his "GIMP Challenge," revealing how he’s successfully moved his professional thumbnail workflow to open source. This leads to a deep dive into Adobe’s recent "bad behavior," including $150 million settlements and secret modifications to system hosts files. We ask the tough question: When does commercial software become malware?

Plus, we cover the latest news, including Linux 7.0-rc7, Firefox’s new free VPN, and Zorin OS’s firm stance against mandatory age verification laws.

Timestamps:

• 00:00:00 Welcome to Destination Linux
• 00:02:13 Community Feedback: TLDR vs. Manpages
• 00:05:40 Store Update: Pastel Tumblers & New Desk Mats
• 00:08:18 Sponsored by Sandfly Security
• 00:10:16 Steam Linux Milestone: Breaking 5%!
• 00:23:16 AI in Open Source Security & curl Reports
• 00:25:03 AI Security Projects: Alpha-Omega and Project Glasswing
• 00:50:34 Using Open Models for Security Research
• 00:54:05 Red Hat Evaluates Security Bugs Reported by Mythos
• 01:00:52 The GIMP Challenge: Ryan’s Workflow Shift
• 01:06:03 Adobe's Bad Behavior: Software or Malware?
• 01:13:03 News Roundup: Linux 7.0-rc7 Released
• 01:14:06 Firefox Adds Free VPN
• 01:15:01 PacHub: A Sleek GUI for Pacman and AUR
• 01:16:09 ZorinOS Rejects Mandatory Age Verification
• 01:25:16 Closing Thoughts

Show References & Links

Community & Tools:

• TLDR Pages: https://tldr.sh/
• GIMP 3 Themes (GitHub): https://github.com/bunnywaffle/GIMP-3-Themes/tree/main
• G'MIC Plugin for GIMP: https://gmic.eu/download.html

Articles & News:

• Linux Smashes Past 5% on Steam Survey: https://www.gamingonlinux.com/2026/04/linux-smashes-past-5-percent-on-the-steam-survey-for-the-first-time/
• Adobe Secretly Modifies Your Hosts File (OSNews): https://www.osnews.com/story/144737/adobe-secretly-modifies-your-hosts-file-for-the-stupidest-reason/
• Zorin OS Says No to Mandatory Age Verification: https://linuxiac.com/zorin-os-says-no-to-mandatory-age-verification-in-linux/
• Firefox Free VPN Enabled: https://www.omgubuntu.co.uk/2026/04/firefox-free-vpn-enabled
• Linux 7.0-rc7 Released: https://www.phoronix.com/news/Linux-7.0-rc7-Released/

Security & AI Research:

• Aisle: AI Cybersecurity After Mythos: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier
• Aisle Wall of Fame (Vulnerability Research): https://aisle.com/wall-of-fame
• Red Hat: Navigating the Mythos Haunted World: https://www.redhat.com/en/blog/navigating-mythos-haunted-world-platform-security
• Humorous Video on DNF5 & Age Verification: https://www.youtube.com/watch?v=flH17X32MrY

Support the Show:

• Destination Linux Official Store: https://shop.deviantairwaves.com/
• Sandfly Security (Agentless Linux Security): https://deviantairwaves.com/sandfly