FiB3R Posted May 28, 2014 Share Posted May 28, 2014 TrueCrypt, leading encryption software touted and used by no less than Edward Snowden and Glenn Greenwald, now appears to be dead, according to its recently updated website, but no one seems to know why?or if the program's ominous warning is legitimate. ?WARNING,? the site reads in large red letters. ?Using TrueCrypt is not secure as it may contain unfixed security issues.? A 10-year-old application, TrueCrypt has long been used for encrypting hard drives and USB sticks on Windows, Linux, and Macs. The open source program was developed by the pseudonymous TrueCrypt team, who have made no public comment since the program?s site changed drastically, leaving many to wonder if the website was hacked or if the warning is legitimate. However, the newest version of TrueCrypt 7.2 has the same ominous warning message now showing to users, suggesting that this isn?t simply a website-related issue. More... Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/ Share on other sites More sharing options...
Osiris Posted May 28, 2014 Share Posted May 28, 2014 Well only one way to be secure now /microwaves hdds, put on tin foil hat FiB3R, Aergan and Ph1b3r0pt1c 3 Share Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424011 Share on other sites More sharing options...
DrJohnSmitherson Posted May 28, 2014 Share Posted May 28, 2014 Wth? This is weird! What other options are there? Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424015 Share on other sites More sharing options...
i_was_here Posted May 28, 2014 Share Posted May 28, 2014 I hope there is some cross-platform alternative to TrueCrypt. I would at least like something I can use on both Windows and Linux. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424021 Share on other sites More sharing options...
FiB3R Posted May 28, 2014 Author Share Posted May 28, 2014 Wth? This is weird! What other options are there? Well, according to TrueCrypts own page on SourceForge, another option is BitLocker. Which may be fair enough, but makes this seem all the more strange. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424025 Share on other sites More sharing options...
DrJohnSmitherson Posted May 28, 2014 Share Posted May 28, 2014 Apparently it's been infected with malware or something Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424029 Share on other sites More sharing options...
Max Norris Posted May 28, 2014 Share Posted May 28, 2014 Wth? This is weird! What other options are there?Built in BitLocker with any supported version of Windows, OSX has FileVault, there's a fair number of alternatives too, for an example list: http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424031 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 I think truecrypt shut down years ago, it was on 7.1 forever... but bitlocker? not every computer has a TPM chip in it Well, according to TrueCrypts own page on SourceForge, another option is BitLocker. Which may be fair enough, but makes this seem all the more strange. yeah I found it odd also, Bitlocker is an odd suggestion from a 3rd party security point of view Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424035 Share on other sites More sharing options...
Max Norris Posted May 28, 2014 Share Posted May 28, 2014 but bitlocker? not every computer has a TPM chip in itIt's not a set-in-stone requirement, you can bypass the restriction via group policy. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424043 Share on other sites More sharing options...
Aergan Posted May 28, 2014 Share Posted May 28, 2014 ???? Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424045 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 It's not a set-in-stone requirement, you can bypass the restriction via group policy. you shouldn't have to bypass anything Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424049 Share on other sites More sharing options...
Max Norris Posted May 28, 2014 Share Posted May 28, 2014 you shouldn't have to bypass anythingIt's just a setting, one among hundreds... by default it's set to the more secure configuration. Would you prefer they didn't give you the option or have it less secure out of the box? Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424053 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 also a little odd that version 7.2 which they just put out is smaller by a good bit than 7.1a Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424055 Share on other sites More sharing options...
BoondockSaint Posted May 28, 2014 Share Posted May 28, 2014 Since TrueCrypt had an official code review, I guess they decided fixing the issues was not feasible. I'm still using 7.1a on Windows 8.1, and I am not having any issues, so for the time being will continue to do so. But at the same time, I will do some research into BitLocker as well. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424057 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 ok, something is seriously wrong with the 7.2 code, installed it in a protected VM environment and it's doing some odd things network wise... I don't think file that is begin served right now is legit... I've never had truecrypt try to make network connections in the past Nogib 1 Share Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424075 Share on other sites More sharing options...
i_was_here Posted May 28, 2014 Share Posted May 28, 2014 I am hoping this is just a hoax now: https://gist.github.com/ValdikSS/c13a82ca4a2d8b7e87ff Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424083 Share on other sites More sharing options...
Toysoldier Posted May 28, 2014 Share Posted May 28, 2014 ok, something is seriously wrong with the 7.2 code, installed it in a protected VM environment and it's doing some odd things network wise... I don't think file that is begin served right now is legit... I've never had truecrypt try to make network connections in the past I wouldn't be surprised if the site was hacked and you have just installed an infected boot/root kit. Lucky you used a VM. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424085 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 I wouldn't be surprised if the site was hacked and you have just installed an infected boot/root kit. Lucky you used a VM. that's why I did it in a VM...... we never trust security software until we audit it first Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424087 Share on other sites More sharing options...
123456789A Posted May 28, 2014 Share Posted May 28, 2014 Wth? This is weird! What other options are there? ROT-13 or 1024-bit NSAKey Praetor and Aergan 2 Share Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424093 Share on other sites More sharing options...
timster Posted May 28, 2014 Share Posted May 28, 2014 ROT-13 or 1024-bit NSAKey lol NSAKey :shiftyninja: Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424097 Share on other sites More sharing options...
Gerowen Posted May 28, 2014 Share Posted May 28, 2014 Still my favorite method of sanitizing hard drives. This hard drive was beginning to fail, so I sanitized it before trashing it. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424107 Share on other sites More sharing options...
neufuse Veteran Posted May 28, 2014 Veteran Share Posted May 28, 2014 Still my favorite method of sanitizing hard drives. This hard drive was beginning to fail, so I sanitized it before trashing it. eh, we use Acetylene Tourches and melt the things into a ball... makes work fun *LOL* Gerowen, Aergan, Brandon H and 2 others 5 Share Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424115 Share on other sites More sharing options...
xendrome Posted May 28, 2014 Share Posted May 28, 2014 Yeah this looks like a domain/sourceforge page hijack... Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424147 Share on other sites More sharing options...
torrentthief Posted May 28, 2014 Share Posted May 28, 2014 bitlocker has an NSA backdoor built-in. Documents leaked to cryptome.org about 2yrs ago showed that law enforcement can unencrypt it. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424151 Share on other sites More sharing options...
Toysoldier Posted May 29, 2014 Share Posted May 29, 2014 bitlocker has an NSA backdoor built-in. Documents leaked to cryptome.org about 2yrs ago showed that law enforcement can unencrypt it. Link? Are you sure they can unencrypt it without your key? last I heard was they were cold-booting them and getting the key from memory. Link to comment https://www.neowin.net/forum/topic/1215495-truecrypt-shuts-down-due-to-alleged-security-issues/#findComment-596424179 Share on other sites More sharing options...
Recommended Posts