Hm i never coded a line in my life, but i always wondered so honest question to the experts here: is it realistic that someone codes security back doors so hidden in other bad or wrong documented code, that nobody recognizes it in OSS community? I mean code is getting more complicated and specialized, dont you need more and more human resources (more than one person and hopefully not all with a bad intention) to check over that code? If im correct you shouldnt let more code into your software than the community is able to check an validate several times... Doesnt mean it has to be russians that need to be excluded idk

Some old folk are reminded of https://en.wikipedia.org/wiki/Export_of_cryptography_from_the_United_States

Is there a specific reason for this?

"Have we become so fearful? Have we become so cowardly That we must extinguish a man because he carries the blood of a current enemy?"

• Picard, Star Trek TNG

Lol, ml. users getting wild in the comments