Show Notes
This week on Destination Linux, we are joined by a special guest host: Craig Rowland, the CEO of Sandfly Security! We’re diving deep into the reality of modern security—specifically when third-party code knocks over your castle. From malicious VSCode extensions to the "React2Shell" vulnerability, we discuss why "Open Source" doesn't automatically mean "Safe" and how to protect your supply chain.
Then, is it possible to have the macOS experience without the Apple ecosystem? Ryan explores ravynOS, a daring new project with "macOS vibes and a BSD soul." It’s attempting to bring the Aqua interface—and eventually Mac app compatibility—to the open-source world.
Plus, Jill brings us massive news from Canonical and AMI. You might soon be installing Ubuntu directly from your motherboard's BIOS without ever needing a USB drive. We break down how this partnership changes the game for hardware.
Finally, we read an incredible listener story.
Show Notes:
00:00:00 Intro
00:02:39 Extended Intro: Open Source or Bust
00:03:08 Community Feedback: A Pentester’s Origin Story
00:10:03 Guest Host: Sandfly Security & Agentless Protection
00:15:53 Security Deep Dive: Supply Chain Attacks, Malicious VSCode Extensions & React2Shell
00:44:31 ravynOS: The Open Source Mac Killer?
00:56:05 News: Canonical + AMI: Installing Ubuntu from the BIOS
01:08:07 Outro
01:09:33 Post-Show Shenanigans
Support the Show:
Sponsored by Sandfly Security: destinationlinux.net/sandfly - Get 50% off the Home Edition with code DESTINATION50 Special Guest: Craig Rowland.
More from Destination Linux
In Destination Linux Episode 488, Jill hosts an action‑packed Linux adventure with Zeb and special guest host Mathieu Comandon, creator of Lutris. Mathieu brings massive Linux gaming updates, including Easy Anti‑Cheat Linux v2, the Epic Games Launcher AppImage Beta, and his early impressions of the Steam Frame - marking one of the biggest Linux gaming leaps in years.
In Destination Linux Episode 487, Ryan hosts an episode packed with open‑source news, community stories, and the triumphant return of Rocco, bringing that classic Big Daddy Linux energy back to the show for the second time in a single month.
In Destination Linux Episode 486, Jill hosts an extended and heartfelt conversation with Monica Ayhens‑Madon, one of the most passionate open‑source community advocates in the Linux world. Monica shares her journey from Canonical’s Community Team to Ubuntu MATE, her time on the Ubuntu Community Council, and her current role helping shape the future of Thunderbird.
In Destination Linux Episode 485, Ryan, Jill, and Zeb are joined by Craig from Sandfly Security for a deep dive into the latest Linux security trends. Craig shares insights from the upcoming Cold Incident Response Conference, including modern Linux malware tactics, IoT rootkit risks, fake kernel threads, UPX‑packed binaries, and new Golang C2 frameworks targeting non‑x86 platforms.
Máirín 'Mo' Duffy from Red Hat joins Jill, Ryan, and Zeb for a packed episode covering responsible AI, Valve’s new Steam Frame VR headset, Plex security warnings, accessibility breakthroughs, and one of the most open‑source wearables ever made. Plus community feedback, Session updates, and Sandfly Security.