5 ms·

I think you're wrong about Truecrypt, it's still safe but just won't ever be updated. https://www.grc.com/misc/truecrypt/truecrypt.htm https://www.grc.com/misc

I think you're wrong about Truecrypt, it's still safe but just won't ever be updated. https://www.grc.com/misc/truecrypt/truecrypt.htm https://www.grc.com/misc/truecrypt/truecrypt.htm

dogma1138 8y ago
With the level of uncertainty and the suspicious circumstances behind the author you can’t really consider it’s safe to use considering the threat model.
cyphar 8y ago
I get their point, but just as it might be "foolish" to assume that software which was audited is no longer secure just because the developers have stopped working on it, it is also "foolish" to use cryptographic software that is not being worked on actively by experts. And since TrueCrypt is proprietary, people should not be using it anyway (not because you cannot read or modify the source code but because the license itself is "full of traps" according to the fedora-legal team[1])-- Linux's dm-crypt can decrypt TrueCrypt volumes (though it's read-only from memory) if you need legacy support. [1]: https://lists.freedesktop.org/archives/distributions/2008-October/000276.html https://lists.freedesktop.org/archives/distributions/2008-Oc...
DanBC 8y ago
Truecrypt may be secure, but linking to GRC is going to persuade me that it isn't.
- barking 8y ago
  Who can you trust? I use trucrypt to encrypt my windows machine but I've been thinking about moving away from it because it seems to cause issues with some windows updates. So if not Truecrypt, what, bitlocker?
  - Strom 8y ago
    You can upgrade to VeraCrypt [1] which is a continuation of TrueCrypt. It's backwards compatible with TrueCrypt volumes but also fixes a bunch of issues that have been found in TrueCrypt code. It also supports newer features like EFI boot and Windows 10 big updates. -- [1] https://www.veracrypt.fr/ https://www.veracrypt.fr/
    - barking 8y ago
      Hi strom,do you have experience using this? I tried it a couple of years back on a new pc but I had some issue (I cant't remember what it was) with full disk encryption which caused me to go with Truecrypt.
      - Strom 8y ago
        Yes I used to use TrueCrypt but have been using VeraCrypt on all my computers for about a year now. Most recent issue I had was with EFI boot and major Windows 10 updates, but the latest beta of VeraCrypt addresses that issue as well.
        barking 8y ago
        Good to know, I'll definitely give it as go as the windows update issue with Truecrypt is a pain. Thanks.

I think you're wrong about Truecrypt, it's still safe but just won't ever be updated. https://www.grc.com/misc/truecrypt/truecrypt.htm https://www.grc.com/misc/truecrypt/truecrypt.htm

dogma1138 8y ago

With the level of uncertainty and the suspicious circumstances behind the author you can’t really consider it’s safe to use considering the threat model.

cyphar 8y ago

I get their point, but just as it might be "foolish" to assume that software which was audited is no longer secure just because the developers have stopped working on it, it is also "foolish" to use cryptographic software that is not being worked on actively by experts. And since TrueCrypt is proprietary, people should not be using it anyway (not because you cannot read or modify the source code but because the license itself is "full of traps" according to the fedora-legal team[1])-- Linux's dm-crypt can decrypt TrueCrypt volumes (though it's read-only from memory) if you need legacy support. [1]: https://lists.freedesktop.org/archives/distributions/2008-October/000276.html https://lists.freedesktop.org/archives/distributions/2008-Oc...

DanBC 8y ago

Truecrypt may be secure, but linking to GRC is going to persuade me that it isn't.

barking 8y ago
Who can you trust? I use trucrypt to encrypt my windows machine but I've been thinking about moving away from it because it seems to cause issues with some windows updates. So if not Truecrypt, what, bitlocker?
- Strom 8y ago
  You can upgrade to VeraCrypt [1] which is a continuation of TrueCrypt. It's backwards compatible with TrueCrypt volumes but also fixes a bunch of issues that have been found in TrueCrypt code. It also supports newer features like EFI boot and Windows 10 big updates. -- [1] https://www.veracrypt.fr/ https://www.veracrypt.fr/
  - barking 8y ago
    Hi strom,do you have experience using this? I tried it a couple of years back on a new pc but I had some issue (I cant't remember what it was) with full disk encryption which caused me to go with Truecrypt.
    - Strom 8y ago
      Yes I used to use TrueCrypt but have been using VeraCrypt on all my computers for about a year now. Most recent issue I had was with EFI boot and major Windows 10 updates, but the latest beta of VeraCrypt addresses that issue as well.
      - barking 8y ago
        Good to know, I'll definitely give it as go as the windows update issue with Truecrypt is a pain. Thanks.