Author Topic: TrueCrypt shuts itself down  (Read 4388 times)

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
TrueCrypt shuts itself down
« on: May 29, 2014, 03:18:57 AM »
Yesterday, the crypto twitterverse was aflame that the most popular open source crypto application had self-destructed. Their page at source forge was recommending a switch to BitLocker (WTF?) and the last checkin basically no-opped the entire app. The resultant executable was also signed by the BitLocker GPG key.

Turns out that the team discovered a back door? Vulnerability? NSA intercept? That convinced them it was fatally compromised.

This is all I can find on the subject:
http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

Army of One

  • Getbig V
  • *****
  • Posts: 30388
Re: TrueCrypt shuts itself down
« Reply #1 on: May 29, 2014, 03:48:35 AM »
How will this effect men in thongs?Will Olympia prep be disrupted?

evandatp

  • Getbig IV
  • ****
  • Posts: 2517
  • Haunted4Pay
Re: TrueCrypt shuts itself down
« Reply #2 on: May 29, 2014, 04:12:11 AM »
Warning, while these two links contain endless speculation by uninformed blowhards, they are not bodybuilding related:

http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website-says-to-switch-to-bitlocker
https://news.ycombinator.com/item?id=7812133



_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #3 on: May 29, 2014, 06:43:02 AM »
Warning, while these two links contain endless speculation by uninformed blowhards, they are not bodybuilding related:

http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website-says-to-switch-to-bitlocker
https://news.ycombinator.com/item?id=7812133




I was really into the notion that Snowden was gonna drop a bomb last night that it was fatally compromised. Didn't happen.

Jizzacked

  • Guest
Re: TrueCrypt shuts itself down
« Reply #4 on: May 29, 2014, 08:00:26 AM »
Warning, while these two links contain endless speculation by uninformed blowhards, they are not bodybuilding related:

http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website-says-to-switch-to-bitlocker
https://news.ycombinator.com/item?id=7812133




never thought I would see a hacker news link on here  ;D

evandatp

  • Getbig IV
  • ****
  • Posts: 2517
  • Haunted4Pay
Re: TrueCrypt shuts itself down
« Reply #5 on: May 29, 2014, 01:52:54 PM »
I was really into the notion that Snowden was gonna drop a bomb last night that it was fatally compromised. Didn't happen.
After being called out by John Kerry, he's distracted/busy, if he's even aware of it.

I'm waiting to see if this makes it to the mainstream media .

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #6 on: May 29, 2014, 01:56:02 PM »
After being called out by John Kerry, he's distracted/busy, if he's even aware of it.

I'm waiting to see if this makes it to the mainstream media .

I am sure that being told to "man up" by that botoxed, plastic-faced fag is really keeping The Snow up at night  ::)

evandatp

  • Getbig IV
  • ****
  • Posts: 2517
  • Haunted4Pay
Re: TrueCrypt shuts itself down
« Reply #7 on: May 29, 2014, 02:17:04 PM »
I am sure that being told to "man up" by that botoxed, plastic-faced fag is really keeping The Snow up at night  ::)
  :D It's giving plenty of journalists something to do in the meantime.

Was TC something you use(d) for home or work?

syntaxmachine

  • Getbig IV
  • ****
  • Posts: 2687
Re: TrueCrypt shuts itself down
« Reply #8 on: May 29, 2014, 02:21:16 PM »
If the issue is really that the NSA is trying to force them to put in a backdoor and they are pulling a Lavabit, then previous versions of TC should still be good to go -- the backdoors wouldn't be retroactive, would they?

Even if there is a legitimate vulnerability, TC would have some utility for the average person: most people looking at your usb stick (say) and seeing a 1gb .tc partition wouldn't even know what it is, let alone be able to exploit a vulnerability to access it. But I understand that this won't satisfy the truly security conscious.

The Ugly

  • Getbig V
  • *****
  • Posts: 21286
Re: TrueCrypt shuts itself down
« Reply #9 on: May 29, 2014, 02:26:53 PM »
Yesterday, the crypto twitterverse was aflame that the most popular open source crypto application had self-destructed. Their page at source forge was recommending a switch to BitLocker (WTF?) and the last checkin basically no-opped the entire app. The resultant executable was also signed by the BitLocker GPG key.

Turns out that the team discovered a back door? Vulnerability? NSA intercept? That convinced them it was fatally compromised.

This is all I can find on the subject:
http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

I don't understand a single word of this.

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #10 on: May 29, 2014, 04:53:14 PM »
  :D It's giving plenty of journalists something to do in the meantime.

Was TC something you use(d) for home or work?

At home mostly.

Lustral

  • Getbig V
  • *****
  • Posts: 5164
  • FREE NOODLES
Re: TrueCrypt shuts itself down
« Reply #11 on: May 29, 2014, 04:56:44 PM »
Do I have to go to Uni to understand this thread? I hate feeling ignorant on a topic.

WillGrant

  • Getbig V
  • *****
  • Posts: 21058
  • Ron is Watching
Re: TrueCrypt shuts itself down
« Reply #12 on: May 29, 2014, 10:15:11 PM »

Mr Nobody

  • Getbig V
  • *****
  • Posts: 40197
  • Falcon gives us new knowledge every single day.
Re: TrueCrypt shuts itself down
« Reply #13 on: May 29, 2014, 10:18:44 PM »
Yesterday, the crypto twitterverse was aflame that the most popular open source crypto application had self-destructed. Their page at source forge was recommending a switch to BitLocker (WTF?) and the last checkin basically no-opped the entire app. The resultant executable was also signed by the BitLocker GPG key.

Turns out that the team discovered a back door? Vulnerability? NSA intercept? That convinced them it was fatally compromised.

This is all I can find on the subject:
http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/
Goodrum probably has more info on this.

mryorkielover

  • Getbig IV
  • ****
  • Posts: 1914
Re: TrueCrypt shuts itself down
« Reply #14 on: May 29, 2014, 10:24:19 PM »
All this hacker talk is making me hungry



FermiDirac

  • Getbig IV
  • ****
  • Posts: 2351
  • That'll do pig, that'll do
Re: TrueCrypt shuts itself down
« Reply #15 on: May 30, 2014, 12:42:58 AM »
Open source encryption tools?  Oh brother.

It was just a matter of time.

Edit: Just read "There was significant changes in the code between versions 7.1a and 7.2."
Why would anyone even hesitate about security being breached in this case? Oh brother x2

FermiDirac

  • Getbig IV
  • ****
  • Posts: 2351
  • That'll do pig, that'll do
Re: TrueCrypt shuts itself down
« Reply #16 on: May 30, 2014, 12:44:56 AM »
Do I have to go to Uni to understand this thread? I hate feeling ignorant on a topic.

5 min on wiki about encryption and 5 min reading articles about TrueCrypt will be enough.  :)

FermiDirac

  • Getbig IV
  • ****
  • Posts: 2351
  • That'll do pig, that'll do
Re: TrueCrypt shuts itself down
« Reply #17 on: May 30, 2014, 12:52:44 AM »
How will this effect men in thongs?Will Olympia prep be disrupted?

Consider the following scenario:

Some of the judges are schmoes, and uses TrueCrypt to hide their schmoeness. Now that TrueCrypt is no longer safe, someone with malicious intentions could find out that the olympia judges are schmoes and out them. If they are outed, it becomes apparent why some people get so high placings in the olympia.

HTH

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #18 on: May 30, 2014, 02:59:26 AM »
Open source encryption tools?  Oh brother.

It was just a matter of time.

Edit: Just read "There was significant changes in the code between versions 7.1a and 7.2."
Why would anyone even hesitate about security being breached in this case? Oh brother x2

You do know that the most secure encryption is open source, right?

FermiDirac

  • Getbig IV
  • ****
  • Posts: 2351
  • That'll do pig, that'll do
Re: TrueCrypt shuts itself down
« Reply #19 on: May 30, 2014, 03:27:58 AM »
You do know that the most secure encryption is open source, right?

Yes, I am aware of it. But in most cases, frequently used open source software is heavily moderated and kept in check. I'm quite shocked that this happened.

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #20 on: May 30, 2014, 03:32:14 AM »
Yes, I am aware of it. But in most cases, frequently used open source software is heavily moderated and kept in check. I'm quite shocked that this happened.

As of last night, nobody was quite sure what happened. The Dev team for TC is an anonymous and mercurial bunch. They haven't surfaced. Even Bruce Schneier, who is usually better informed than most on this stuff, has nothing.

TC was undergoing an security audit, paid for because of the OpenSSL heartbleed debacle, and had passed the first audit at least. Perhaps there was something coming out of the next audit wave?

FermiDirac

  • Getbig IV
  • ****
  • Posts: 2351
  • That'll do pig, that'll do
Re: TrueCrypt shuts itself down
« Reply #21 on: May 30, 2014, 05:55:19 AM »
As of last night, nobody was quite sure what happened. The Dev team for TC is an anonymous and mercurial bunch. They haven't surfaced. Even Bruce Schneier, who is usually better informed than most on this stuff, has nothing.

TC was undergoing an security audit, paid for because of the OpenSSL heartbleed debacle, and had passed the first audit at least. Perhaps there was something coming out of the next audit wave?

Could be a possibility.

I'm still very confused about how this could go unnoticed. Considering it's open source and frequently used by "tech savy" people, i.e. people who can read code.

HTexan

  • Getbig V
  • *****
  • Posts: 20031
  • Heath must lose!!
Re: TrueCrypt shuts itself down
« Reply #22 on: May 30, 2014, 05:57:45 AM »
Humm  I have an old truecrypt volume somewhere. I wonder how people are hacking them?
A

The True Adonis

  • Getbig V
  • *****
  • Posts: 50255
  • Fear is proof of a degenerate mind.
Re: TrueCrypt shuts itself down
« Reply #23 on: May 30, 2014, 06:29:28 AM »
Tales from the Crypt was a great show in its prime.  Arnold even directed an episode.

_aj_

  • Competitors
  • Getbig V
  • *****
  • Posts: 17631
  • The Return of the OG
Re: TrueCrypt shuts itself down
« Reply #24 on: May 30, 2014, 09:22:41 AM »
Tales from the Crypt was a great show in its prime.  Arnold even directed an episode.

I loved the Crypt Creep.