[kwlug-disc] Truecrypt

[Darcy Casselman]

I'm not a crazy conspiracy guy, so I'm going to assume for now that Andrew
Green (the TrueCrypt audit guy) is right and that the anonymous maintainers
decided to quit and wanted to do so in characteristically dramatic fashion.

http://krebsonsecurity.com/2014/05/true-goodbye-using-truecrypt-is-not-secure/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+KrebsOnSecurity+%28Krebs+on+Security%29

But yeah, it's probably time to look for alternatives.

Darcy.


On Thu, May 29, 2014 at 11:05 AM, Khalid Baheyeldin <kb at 2bits.com> wrote:

> Other people are speculating that Hector Monsegur (Sabu), the hacker that
> was freed by the Feds after he cooperated, was a contributor to TruCrypt,
> and that was one obstacle they always faced (decrypting encrypted volumes),
> so there it goes once he was out.
>
> As for alternatives, seems that LUKS is backward compatible with TruCrypt.
>
> https://code.google.com/p/cryptsetup/
>
>
>
> On Thu, May 29, 2014 at 10:20 AM, Khalid Baheyeldin <kb at 2bits.com> wrote:
>
>> Many theories floating around ...
>>
>> With secret court orders no one can be sure of anything ...
>>
>> But there are other possibilities.
>>
>> See the comments here (change to threshold 3 or 4 to limit to the highest
>> rated ones)
>>
>> http://soylentnews.org/article.pl?sid=14/05/29/0243223
>>
>>
>> On Thu, May 29, 2014 at 10:16 AM, Chris Irwin <chris at chrisirwin.ca>wrote:
>>
>>> I wanted to see what everybody's thoughts are about the truecrypt
>>> "annoucement" yesterday.
>>>
>>> Quoted from their website:
>>>
>>> > WARNING: Using TrueCrypt is not secure as it may contain unfixed
>>> security issues
>>> >
>>> > This page exists only to help migrate existing data encrypted by
>>> TrueCrypt.
>>> >
>>> > The development of TrueCrypt was ended in 5/2014 after Microsoft
>>> terminated support of Windows XP. Windows 8/7/Vista and later offer
>>> integrated support for encrypted disks and virtual disk images. Such
>>> integrated support is also available on other platforms (click here for
>>> more information). You should migrate any data encrypted by TrueCrypt to
>>> encrypted disks or virtual disk images supported on your platform.
>>>
>>> There is discussion on slashdot, hacker news, and many other sites. So
>>> far, there is no consensus on what is going on? Half-hearted compliance
>>> with a US NSL? Dead-man switch prematurely activating?
>>>
>>> Does anybody else have thoughts or insights?
>>>
>>> I'm a dmcrypt user personally, but I know several folks on the list use
>>> truecrypt.
>>>
>>> --
>>> Chris Irwin
>>> <chris at chrisirwin.ca>
>>>
>>> _______________________________________________
>>> kwlug-disc mailing list
>>> kwlug-disc at kwlug.org
>>> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>>
>>>
>>
>>
>> --
>> Khalid M. Baheyeldin
>> 2bits.com, Inc.
>> Fast Reliable Drupal
>> Drupal optimization, development, customization and consulting.
>> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
>> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
>> For every complex problem, there is an answer that is clear, simple, and
>> wrong." -- H.L. Mencken
>>
>
>
>
> --
> Khalid M. Baheyeldin
> 2bits.com, Inc.
> Fast Reliable Drupal
> Drupal optimization, development, customization and consulting.
> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
> For every complex problem, there is an answer that is clear, simple, and
> wrong." -- H.L. Mencken
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20140529/17ff2bb9/attachment.htm>