2 ms·
You're rambling. TrueCrypt lets you create fixed sized encrypted volumes, and allows you to decrypt those volumes on any of the three major OS platforms. Ther
by diminoten 12y ago
You're rambling.
TrueCrypt lets you create fixed sized encrypted volumes, and allows you to decrypt those volumes on any of the three major OS platforms.
There's nothing special about TrueCrypt in how it performs the encryption/decryption (or so we're told), but no tool besides TrueCrypt allows such a flexible approach.
And it's you who refuses to accept that [secure,easy] can exist, because it'd make you irrelevant. It's a completely silly stance to take, but it's yours.
But hey, at least I've wrung your opinion on TrueCrypt out of you:
> By encouraging people to rely on tools like Truecrypt, you are, in a very small but real way, endangering them.
For posterity, in case you edit it away.
Which leads me to the question: Why are you even involved in the TrueCrypt audit, if you think it's a bad idea to use such tools?
P.S. Ulbricht was caught because the FBI owned TOR, and that's about it. Maybe your indignation towards TrueCrypt should consider Snowden's use of TrueCrypt to evade the combined allied world's intelligence community.
- tptacek 12y agoWould you like to put money on whether my opinion about Truecrypt is identical to Matthew Green's and Kenn White's, or would you like to include them in your critique? It's amusing that you feel you've "wrung out" of me something one of the few things I've recently blogged at length about.
- diminoten 12y agoThen why are any of you three working on it if you all think it's dangerous to promote its use? You've blogged, "Don't use TrueCrypt"?
- tptacek 12y agoI've already answered that question, directly, on this thread. And no, I blogged "don't use sector-level crypto". In a post literally titled "You Don't Want XTS". Under the subhed "Disks Are The Last Thing You Want To Encrypt". As in, "the last thing in the world".
- diminoten 12y agoNo you haven't.
- tptacek 12y agoTroll. https://www.dropbox.com/s/8qbtybjnxwfu7i0/Screenshot%202015-02-18%2016.01.53.png?dl=0 https://www.dropbox.com/s/8qbtybjnxwfu7i0/Screenshot%202015-...
- diminoten 12y agoPlease stop calling me names.
- diminoten 12y agoThe "No you haven't" was in regard to the fact that you haven't answered why you're involved in TrueCrypt at all, if you don't think it should be used.
- tptacek 12y agoYes, that's what I thought you meant. Perhaps reread the thread.
- diminoten 12y agoWell, you have edited a lot of your comments, so perhaps you did include this information in a later edit? Edit: Having re-read the thread, you haven't explained why you're involved in the TrueCrypt audit, or why you recommend folks use TrueCrypt if you think XTS is bad.
- deleted 12y ago[deleted]
- diminoten 12y agoYou also completely changed the comment I originally replied to. I much prefer your new comment, though my fundamental issue with the fact that you're working on the audit of software you think is dangerous to promote remains.