Truecrypt Compromised?

[GlockSpock]

https://www.google.com/search?q=truecrypt&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a&channel=fflb

 

http://truecrypt.sourceforge.net/

 

WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

 

This page exists only to help migrate existing data encrypted by TrueCrypt.

The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP. Windows 8/7/Vista and later offer integrated support for encrypted disks and virtual disk images. Such integrated support is also available on other platforms (click here for more information). You should migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk images supported on your platform.

[MacGyver]

It does seem at this point that the developers have backed away from it.

 

There seem to be three schools of thought:

 

1. The developers just got tired of doing it and stepped away
2. Their SourceForge page got hacked
3. They got some type of court order similar to Lavabit

I might add a fourth - I lean towards some sort of dead man's switch being flipped.

 

I don't know that it matters, the product can't be trusted at this point.

[div]

The independent review of the current version of truecrypt found no issues or backdoors. I'm really leaning towards the first scenario MacGyver outlined. The devs moved on, and since they won't be supporting it any longer there will be no more bug fixes. Sent from my Nexus 7 using Tapatalk

[TMF]

I remember having a discussion with some buddies years ago about how it would make sense for the NSA to create True Crypt as a freeware encryption in hopes that the enemy would use it and they have the key to unlock all. I suppose of that were the case we would never know. Sent from my iPhone using Tapatalk

[MacGyver]

The anonymity of the developers was the primary reason I never really trusted it.  Despite the independent audit they just went through, that's a big issue to me.

 

I expect it's not the last we'll hear of the story.  If they got some type of notice like Ladar Levison, I expect we'll hear about it.

[TMF]

[quote name="MacGyver" post="1155068" timestamp="1401808803"]The anonymity of the developers was the primary reason I never really trusted it. Despite the independent audit they just went through, that's a big issue to me. I expect it's not the last we'll hear of the story. If they got some type of notice like Ladar Levison, I expect we'll hear about it.[/quote] At any rate, even if the program is compromised by the developers or intel organizations it is still a good program for everyday use such as CC, passwords or other personal information. I would love to use it to transmit sensitive info between the wife and I when I'm gone; especially during tax season. Unfortunately this stuff is impossible to teach the wife. Sent from my iPhone using Tapatalk

[JayC]

#3 without a doubt...  They received an NSL or secret court order that compromised the software...  Anybody who knows security realized the recommendations they were making to replace truecrypt were a clue..