Truecrypt may be compromised

[planetdoc]

those who visit truecrypt's sourceforge page will get this warning

WARNING: Using TrueCrypt is Not Secure As it may contain unfixed security issues

A FOSS project shutters itself and, rather than linking to a fork or posting tarballs of a few versions' worth of source, recommends commercial alternatives. Suspicious

They Recommend to migrate to Bitlocker....an encryption platform by Microsoft that the feds asked for a backdoor. Suspicous.

Some users believe the program was compromised due to a national security letter, or it may be a break-in. Many things don't add up, including the fact that Truecrypt re-issued all of its keys only 4 hours before releasing the new version, 7.2. On top of this - they say they have stopped development because WinXP support has ended... which doesn't add up at all. Even those who audited truecrypt found out suddenly today about the changes and shutdown of the trucrypt project.

At this point it is not recommended to use the new version 7.2

[DaveNull]

**** Steve Gibson right in the ear. That guy is a fraud and a charlatan. The fact that he says it's safe is evidence to the contrary.

[planetdoc]

Originally Posted by DaveNull

**** Steve Gibson right in the ear. That guy is a fraud and a charlatan. The fact that he says it's safe is evidence to the contrary.

citation please.

https://en.wikipedia.org/wiki/Steve_...#Controversies

I dont know enough about his background, so please enlighten me.

[htismaqe]

I don't know if he's a fraud but he does promote some things that are kind of "pseudo science".

He's one of those guys that is very polarizing.

[DaveNull]

The Steve Gibson page at Attrition should get you started.

[nstygma]

i like diskcryptor

[planetdoc]

Originally Posted by DaveNull

The Steve Gibson page at Attrition should get you started.

I just finished reading that.

The WMF "backdoor" was a real security vulnerability, and his concerns about raw sockets were not mere speculation. Windows addressed both of these issues. ShieldsUp!was just a simple web based port scanner...it isn't intended to be the holly grail of self penetration testing. Spinrite is not be the best, but it works.

to call this evidence that he is a "charlatan" is very weak, IMO.

[planetdoc]

Originally Posted by nstygma

i like diskcryptor

http://www.hacker10.com/encryption-s...pt-comparison/

[DaveNull]

Originally Posted by planetdoc

I just finished reading that.

The WMF "backdoor" was a real security vulnerability, and his concerns about raw sockets were not mere speculation. Windows addressed both of these issues. ShieldsUp!was just a simple web based port scanner...it isn't intended to be the holly grail of self penetration testing. Spinrite is not be the best, but it works.

to call this evidence that he is a "charlatan" is very weak, IMO.

Whatever. I'd just recommend getting security information from sources that have some credibility. His name is used as a punchline in the security community.

[planetdoc]

TrueCrypt security audit presses on, despite developers jumping ship
(highlights)

Phase II of the TrueCrypt audit...involves a thorough cryptanalysis, including an audit of the TrueCrypt cipher suites, random number generators, and the way volumes are encrypted. In short, it will analyze the entire way encryption is implemented in the program.

White said the technical lead of Phase II is Thomas Ptacek, a widely respected security expert at Matasano who specializes in cryptographic protections. He'll be working closely with a variety of other highly regarded researchers, including Nate Lawson, a cryptographer at Root Labs. The work is expected to begin in June and wrap up by the end of September, White said.

[unlurking]

Originally Posted by planetdoc

I just finished reading that.

The WMF "backdoor" was a real security vulnerability, and his concerns about raw sockets were not mere speculation. Windows addressed both of these issues. ShieldsUp!was just a simple web based port scanner...it isn't intended to be the holly grail of self penetration testing. Spinrite is not be the best, but it works.

to call this evidence that he is a "charlatan" is very weak, IMO.

JFC.

I haven't had to argue raw sockets in a decade. I didn't realize there were any Gibson followers left.