PDA

View Full Version : Has TrueCrypt (an Open-Source Encryption Program) Been Hacked ?




SeanTX
05-28-2014, 08:24 PM
I guess this might fit into General Politics, since if it has been hacked it was very likely the NSA that did it. It's not known yet for sure if it was just the website that has been hacked, or the program itself (it appears newer versions of the program may have been).

I've always assumed there's an NSA back-door built into everything, so never really used the program myself, but thought others might be interested though .

http://www.dailydot.com/technology/truecrypt-dead-unsecure/


TrueCrypt, encryption tool used by Snowden, shuts down due to alleged 'security issues'

By Patrick Howell O'Neill on May 28, 2014 Email

TrueCrypt, leading encryption software touted and used by no less than Edward Snowden and Glenn Greenwald, now appears to be dead, according to its recently updated website, but no one seems to know why—or if the program's ominous warning is legitimate.

“WARNING,” the site reads in large red letters. “Using TrueCrypt is not secure as it may contain unfixed security issues.”

A 10-year-old application, TrueCrypt has long been used for encrypting hard drives and USB sticks on Windows, Linux, and Macs.

The open source program was developed by the pseudonymous TrueCrypt team, who have made no public comment since the program’s site changed drastically, leaving many to wonder if the website was hacked or if the warning is legitimate.

However, the newest version of TrueCrypt 7.2 has the same ominous warning message now showing to users, suggesting that this isn’t simply a website-related issue.

The TrueCrypt website now offers step-by-step instructions on how to transfer encrypted files to BitLocker, a competing full disk encryption program included in Microsoft Windows Vista, 7, and 8.

In a 2012 CryptoParty workshop, Snowden taught local Hawaiians how to use TrueCrypt to protect their data, saying that while no one knew who made it, it was one of the best open-source solutions available.

snip

CPUd
05-28-2014, 09:17 PM
Damn; I think we may have to start rolling our own.