TrueCrypt is Dead

[CrAsHnBuRnXp]

Sorry if this has been posted. Did a quick search and didnt see anything. If this has been posted already feel free to delete it.

On May 29th TrueCrypt’s website was updated with a brief, cryptic message. It warned that “Using TrueCrypt is not secure as it may contain unfixed security issues”. A new version was released that was incapable of encrypting anything. It exists only to help users recover encrypted files.

So apparently Truecrypt is dangerous to use and no longer safe? What are your thoughts and concerns? Why has it been abandoned after so long?

http://www.economist.com/news/scien...-piece-software-disappears-mysteriously-tales

http://en.wikipedia.org/wiki/TrueCrypt

https://www.grc.com/misc/truecrypt/truecrypt.htm

 

[newtekie1]

Yeah, I saw that a few days ago. Kind of sad.

My theory though, is that there really is a security hole in TrueCrypt. Possibly similar to the holes that have been found recently in other encryption methods. I mean Heartbleed was found, and just a few days ago another bug was found in OpenSSL that makes it totally useless and apparently the most recent bug has been in in OpenSSL for over a decade! So my theory is the developers of TrueCrypt know there is a bug, they likely don't want to fix it, so they are just dropping the product before the bug is actually discovered.

 

[timta2]

My conspiracy theory is that the vulnerability is one they were forced to put there by the NSA.

 

[CrAsHnBuRnXp]

Yeah, I saw that a few days ago. Kind of sad.

My theory though, is that there really is a security hole in TrueCrypt. Possibly similar to the holes that have been found recently in other encryption methods. I mean Heartbleed was found, and just a few days ago another bug was found in OpenSSL that makes it totally useless and apparently the most recent bug has been in in OpenSSL for over a decade! So my theory is the developers of TrueCrypt know there is a bug, they likely don't want to fix it, so they are just dropping the product before the bug is actually discovered.

I didn't even hear the one about OpenSSL.

My conspiracy theory is that the vulnerability is one they were forced to put there by the NSA.

if that's a case what is even the purpose of releasing encryption software if you're just going to put a huge back door inside the source code for the government agencies to get through. It just makes the whole program seem null. Makes it pointless.

 

[newtekie1]

I didn't even hear the one about OpenSSL.

http://www.wired.com/2014/06/heartbleed-redux-another-gaping-wound-in-ssl-uncovered/

The thing is, they say the bug was previously unknown, but that just means it was unknown to them. If hackers knew about it, they probably weren't likely to report it, they would exploit it.

 

[Steevo]

All security has to be based on data, and since computers are only capable of 1 & 0 it can be broken. Unlike human brains where a plethoura of neurons and life experiance programming those allows for the range of ideas we have and nuances to create arbitrary ideas....


I thought more RNG would be based off a random zip code, temperature at that zip code, likely chance of precipitation, and other random data instead of always using the same RNG that was proven to be flawed.

 

[TRWOV]

When I was reading the Kaveri review on Anandtech I saw an ad saying so. Seemed weird and didn't click on it but later I visited the website

 

[RCoon]

I didn't even hear the one about OpenSSL.


if that's a case what is even the purpose of releasing encryption software if you're just going to put a huge back door inside the source code for the government agencies to get through. It just makes the whole program seem null. Makes it pointless.

Lenovo computers have been banned from being used by British intellegence and MI5 because they have a hard coded backdoor through manufacturing. It wouldn't surprise me if the world's leading open source encryption software that everyone uses for its cost was vulnerable for the purpose of spying. The devs are little men compared to the big suits.

 

[Arjai]

Why would anyone buy a Lenovo, anyways? Are they even closely related to their prices?

Apples are overpriced, in my opinion but, they provide something that PC's don't, (insert random sarcastic comment on the intelligence of Apple user's).

At least, IMO, the ASUS I bought is worth more than I paid for it. BLAH, BLAH, Laugh.



Oh, to be a little more Germain, Security is more an Illusion than Reality. Just don't do things you need to hide, or, things that will call special attention to you. Also, it is a good idea to change passwords on a regular basis, depending on your threat interpretations.

 

[Steevo]

^ I feel we are all dumber for that comment.