3 ms·
Fiasco? You mean where they voluntarily shut down rather than compromise themselves? Or are you referring to another matter?
by rokkamokka 5mo ago
Fiasco? You mean where they voluntarily shut down rather than compromise themselves? Or are you referring to another matter?
- michaelt 5mo agoPresumably when the authors of TrueCrypt declared “Using TrueCrypt is not secure” If I trust them to provide my FDE software, I certainly trust them when they say I shouldn’t use it.
- recursivegirth 5mo agoThis. I have no trust in TrueCrypt or it's derivatives. If TrueCrypt was compromised then it stands that VeraCrypt is as well.
- Hypomixolydian 5mo agoHow so? Veracrypt was independently audited, even by German BSI [1] and no serious problems were found. [1] https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Veracrypt/Veracrypt.pdf https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publicat...
- ndiddy 5mo agoMy interpretation was that the authors received a National Security Letter and chose to shut down development rather than let their software get backdoored. IIRC the shutdown announcement cited the discontinuation of Windows XP as why the software got discontinued (when it was cross platform and supported newer versions of Windows) and included a step-by-step guide for how to migrate to Bitlocker (a red flag for anyone remotely cynical). An independent audit of the last version of TrueCrypt was published about a year after the discontinuation. It did not find any significant security issues or backdoors.
- Scaled 5mo agoOne of the greatest cyber security mysteries of our time. Regardless of what actually happened, I hope the author is okay. (The story implied to me that the author was forced to post that, or was disappeared and the website was changed by someone else)