4 ms·
I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if th
by coldpie 11y ago
I don't know what features you like or find important. But you have to consider the licensing model as a feature when choosing your software. What happens if the software is sold or no longer maintained?
For me, I use a plaintext file in a Truecrypt archive because I'm a massive dweeb.
- baldfat 11y agoTruecrypt appears to be compromised. http://www.zdnet.com/article/truecrypt-critical-flaws-revealed-its-time-to-jump-ship/ http://www.zdnet.com/article/truecrypt-critical-flaws-reveal...
- coldpie 11y agoI don't use Windows and that exploit isn't relevant to my use-case anyway (requires an evil local user). I'll move to another encryption program sometime, but it hasn't been a priority.
- skrowl 11y agoYou should be using VeraCrypt (https://veracrypt.codeplex.com/ https://veracrypt.codeplex.com/) rather than TrueCrypt. The authors of TrueCrypt even said to stop using it when they stopped maintaining it.
- coldpie 11y agoYeah, I should. But Arch doesn't provide packages for it yet and there's no realistic attack vector against my usage of TrueCrypt, so meh. It's good enough until Arch starts shipping packages.
- discreditable 11y agoYou can use Linux's own cryptsetup to mount TrueCrypt volumes. No TrueCrypt needed. There's documentation on the ArchWiki. https://wiki.archlinux.org/index.php/TrueCrypt https://wiki.archlinux.org/index.php/TrueCrypt
- coldpie 11y agoCool, thanks!
- baldfat 11y agohttps://aur.archlinux.org/packages/veracrypt/ https://aur.archlinux.org/packages/veracrypt/
- coldpie 11y agoSure, but at that point, why is maintaining my own package better than just using Truecrypt?