[dm-crypt] TrueCrypt support ended -- "Not secure"

[dm-crypt] TrueCrypt support ended -- "Not secure"

[Robert Nichols]

Sourceforge page warns against continued use, and the latest release does not 
permit creation of new volumes.

http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

http://truecrypt.sourceforge.net/

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.

Re: [dm-crypt] TrueCrypt support ended -- "Not secure"

[Chris Drake]

Hi Robert,

That's a hoax - their domain got hijacked.

Kind Regards,
Chris Drake


Thursday, May 29, 2014, 8:49:01 AM, you wrote:

RN> Sourceforge page warns against continued use, and the latest release does not
RN> permit creation of new volumes.

RN> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

RN> http://truecrypt.sourceforge.net/

Re: [dm-crypt] TrueCrypt support ended -- "Not secure"

[Robert Nichols]

On 05/28/2014 08:07 PM, Chris Drake wrote:
> Hi Robert,
>
> That's a hoax - their domain got hijacked.
>
> Kind Regards,
> Chris Drake
>
>
> Thursday, May 29, 2014, 8:49:01 AM, you wrote:
>
> RN> Sourceforge page warns against continued use, and the latest release does not
> RN> permit creation of new volumes.
>
> RN> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/
>
> RN> http://truecrypt.sourceforge.net/
>
>
>
>
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
>

It has been reported that the "hacked" release was certified with the
official TruCrypt signing key, and compromise of that key would be
even more damning.  Would someone who had gained access to that key
squander that power on a prank?

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.

Re: [dm-crypt] TrueCrypt support ended -- "Not secure"

[Chris Drake]

Hi Robert,

It's not the *original* key apparently, but the new one for the
current release.  Current rumors are that they're committing suicide
for the same reasons as Lavabit - which would explain why they're
pushing people over to products with NSA key escrow built in.

Kind Regards,
Chris Drake


Thursday, May 29, 2014, 12:46:19 PM, you wrote:

RN> On 05/28/2014 08:07 PM, Chris Drake wrote:
>> Hi Robert,
>>
>> That's a hoax - their domain got hijacked.
>>
>> Kind Regards,
>> Chris Drake
>>
>>
>> Thursday, May 29, 2014, 8:49:01 AM, you wrote:
>>
>> RN> Sourceforge page warns against continued use, and the latest release does not
>> RN> permit creation of new volumes.
>>
>> RN> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/
>>
>> RN> http://truecrypt.sourceforge.net/
>>
>>
>>
>>
>> _______________________________________________
>> dm-crypt mailing list
>> dm-crypt@saout.de
>> http://www.saout.de/mailman/listinfo/dm-crypt
>>

RN> It has been reported that the "hacked" release was certified with the
RN> official TruCrypt signing key, and compromise of that key would be
RN> even more damning.  Would someone who had gained access to that key
RN> squander that power on a prank?

Re: [dm-crypt] TrueCrypt support ended -- "Not secure"

[Arno Wagner]

Give it at least a few days before jumping to conclusions.
There is a number of possibilities for what happened and
what is said on the page actually being true is just one
of them.

Also note that the claims about valid signatures on the
current, crippled binaries are shaky as the keys were 
apparently changed recently. 

Arno



On Thu, May 29, 2014 at 00:49:01 CEST, Robert Nichols wrote:
> Sourceforge page warns against continued use, and the latest release
> does not permit creation of new volumes.
> 
> http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/
> 
> http://truecrypt.sourceforge.net/
> 
> -- 
> Bob Nichols     "NOSPAM" is really part of my email address.
>                 Do NOT delete it.
> 
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -  Plato