detection of fake debian (ubuntu)