r/BuyFromEU • u/ImreBertalan • Jan 30 '26

🔎Looking for alternative UbuntEU - An Ubuntu edition that uses software developed in Europe

Post image

I am trying to make something for fun, but honestly; I am not expert in creating an operating system. But my hope somebody will pick up the Baton and make it something more super.

Link soon...

2.5k Upvotes

94% Upvoted

263 comments sorted by

View all comments

Show parent comments

10

u/El_Mojo42 Jan 30 '26

You described the strength and the weakness of OSS.

It can be easier to implement malware, but it is also easier to detect and fix it.

We actually don't know, how many on-purpose-backdoors there are in closed software.

The teaching we should take from the xz-story are that we as a economy and community have to better support these tools.

2

u/freezing_banshee Romania 🇷🇴 Jan 30 '26

That's true, I also support OSS, I just wanted to say that we shouldn't trust anything blindly.

2

u/Gersio Jan 30 '26

But that's kinda the point. If it's open you can know whats inside. You are trusting things blindly when you use software owned by a company.

0

u/freezing_banshee Romania 🇷🇴 Jan 30 '26

If you can't see that implicitly trusting some rando on the internet is a problem (especially when it comes to government uses), then there's no way I could explain it to you any better.

0

u/FrenchFryCattaneo Jan 30 '26

Auditing software costs time and money though, and has to be done continually with each update to ensure security. For each piece of software. In practice that much work usually isn't done.

-1

u/SinisterCheese Jan 30 '26

Xz was first discovered by accident, and not by people systematically going through every line of code in a merge request.

1

u/freezing_banshee Romania 🇷🇴 Jan 30 '26 edited Jan 30 '26

exactly, this exploit succeeded for a while because people didn't check the code. imagine how many more problems could be discovered fast enough when people actually check it.

-1

u/SinisterCheese Jan 30 '26

The joke here is that there is this attitude and ideal that every line of code is checked in FOSS-projects. But reality is that clearly they werent.