Interesting answers, thanks!

Hm i never coded a line in my life, but i always wondered so honest question to the experts here: is it realistic that someone codes security back doors so hidden in other bad or wrong documented code, that nobody recognizes it in OSS community? I mean code is getting more complicated and specialized, dont you need more and more human resources (more than one person and hopefully not all with a bad intention) to check over that code? If im correct you shouldnt let more code into your software than the community is able to check an validate several times… Doesnt mean it has to be russians that need to be excluded idk

exactly that is the case, fortunately life is still simple and no one judges me for my stupidity. Did i mention that i love cereals and cartoons in the morning?

Ah thanks… If i were grown up, i would feel pretty stupid for not getting that

Can somone eli5?