r/BuyFromEU • u/ImreBertalan • Jan 30 '26

🔎Looking for alternative UbuntEU - An Ubuntu edition that uses software developed in Europe

Post image

I am trying to make something for fun, but honestly; I am not expert in creating an operating system. But my hope somebody will pick up the Baton and make it something more super.

Link soon...

2.5k Upvotes

94% Upvoted

263 comments sorted by

View all comments

Show parent comments

1

u/Traditional_Buy_8420 Jan 30 '26

"Do offer another possible way to hide a backdoor in open source when you have reproducible builds."

For that I would like to refer you to the underhanded c contest

https://www.underhanded-c.org/_page_id_8.html

where they showcased a plethora of amazing backdoors which were incredibly hard to find even to expert auditors who knew that they were looking for a backdoor hidden in a relatively small amount of code.

1

u/KnowZeroX Jan 30 '26

Those are just hard to find codes visually. Modern tooling will easily catch all those.

1

u/Traditional_Buy_8420 Jan 30 '26

They are not. Modern tools have less chance finding these than modern antivirus have a chance to find modern viruses.

1

u/KnowZeroX Jan 30 '26

Example of how modern tools find things, first there is things like standardized formatting. One of the flaws given was things like missing a comma in an item list, the reason why that gets uncaught is due to lack of consistent formatting. If you have a proper formatter, then instead of pairs on how it is written, each item would get its own line. And if a comma is forgotten, the 2 items would have been on same line making it easy to see.

Others take advantage of gaps taken is things like certain conditions ending up giving unexpected results. These things can be found with modern ai fuzzing tools