Back and forth speculation is great and all, but does anyone know of a solid alternative to TrueCrypt? Perferably open-source but at the very least not a potential government lap-dog like Microsoft?
TrueCrypt suggesting migration to BitLocker?
151–160 of 414 posts
Re: TrueCrypt suggesting migration to BitLocker?
#152In order of likelihood: * Defaced site, timed to screw up a big announcement * Rogue content maintainer * Phase II of audit turned up something rather bad (edit: NO - see tptacek below) edit: Variations on "developer forced to do this" (cf simmerian's comment): * Developer was big brother all along and they are shutting it down * Security vuln about to be disclosed, dev scrambles to inform (albeit poorly) * Legally o…
Another possibility - the author was required by a court order to provide a backdoor for unfettered access to truecrypt disk, and to not disclose the existence of the order. The solution was to modify the code so that everyone has unfettered access (i.e. disable encryption entirely) and make the recommendation that everyone switch to something else.
Re: TrueCrypt suggesting migration to BitLocker?
#153Re: TrueCrypt suggesting migration to BitLocker?
#154In order of likelihood: * Defaced site, timed to screw up a big announcement * Rogue content maintainer * Phase II of audit turned up something rather bad (edit: NO - see tptacek below) edit: Variations on "developer forced to do this" (cf simmerian's comment): * Developer was big brother all along and they are shutting it down * Security vuln about to be disclosed, dev scrambles to inform (albeit poorly) * Legally o…
NSA is obviously in on it. Who else would recommend using holy-bug-riddled proprietary-back-doored-on-purpose encryption software? ;-P
I choose to believe Niels Ferguson when he says "Over my dead body.": http://blogs.msdn.com/b/si_team/archive/2006/03/02/542590.as...
Re: TrueCrypt suggesting migration to BitLocker?
#155Earlier quoted context omitted.
Same key as the previous binaries? I doubt it, given that the keys were replaced mere 3 hours before the new binaries were published: http://sourceforge.net/p/truecrypt/activity/?page=0&limit=10...
Anyone have key fingerprints for pub keys used for the 7.1a vs 7.2 signing? Preferably pub key from a while ago I guess.
This looks like the previous key:
https://github.com/DrWhax/truecrypt-archive/blob/master/True...
Besides the different file name, the contents of the files match: http://www.diffchecker.com/szpb500v
Re: TrueCrypt suggesting migration to BitLocker?
#156A significant concern of mine with this is that Windows 8 has support for syncing your bitlocker encryption keys with microsoft. If privacy is something a user is seeking, how easy would it be to subpoena bitlocker keys for a user under duress?
Trivial. It's the same as any other business record.
Re: TrueCrypt suggesting migration to BitLocker?
#157Earlier quoted context omitted.
Same key as the previous binaries? I doubt it, given that the keys were replaced mere 3 hours before the new binaries were published: http://sourceforge.net/p/truecrypt/activity/?page=0&limit=10...
Anyone have key fingerprints for pub keys used for the 7.1a vs 7.2 signing? Preferably pub key from a while ago I guess.
There's a "TrueCrypt Foundation" key on the keyservers from 2004, the ID is E3BA73CAF0D6B1E0.
Re: TrueCrypt suggesting migration to BitLocker?
#158Maybe it is time for LibreTruecrypt ;) like LibreSSL !
Re: TrueCrypt suggesting migration to BitLocker?
#159In order of likelihood: * Defaced site, timed to screw up a big announcement * Rogue content maintainer * Phase II of audit turned up something rather bad (edit: NO - see tptacek below) edit: Variations on "developer forced to do this" (cf simmerian's comment): * Developer was big brother all along and they are shutting it down * Security vuln about to be disclosed, dev scrambles to inform (albeit poorly) * Legally o…
* That's a lot of wasted effort for a defacement with seemingly no motive except some (uncredited) lulz. * Possible, but once again I see no motive that would produce this brand of outburst. * And it's unfixable? That would be a world first. I think it's much more plausible this is some powerful entity forcing a hand. We know by now there's plenty of motive and candidates to fit that shoe.
[deleted]
Re: TrueCrypt suggesting migration to BitLocker?
#160Earlier quoted context omitted.
NSA is obviously in on it. Who else would recommend using holy-bug-riddled proprietary-back-doored-on-purpose encryption software? ;-P
I choose to believe Niels Ferguson when he says "Over my dead body.": http://blogs.msdn.com/b/si_team/archive/2006/03/02/542590.as...
A NSL is powerful enough to render all this moot. Therein lies the great danger of NSLs.