Is it a side-effect of SourceForge’s recent forced password reset?
The results of the first part of the two-stage audit were published last month, apparently finding nothing untoward at all.īut even if the second part of the audit had revealed something terrible, why not simply say so, given that the audit would be published anyway? TrueCrypt announced a big code audit recently, as a way of restoring confidence in encryption software following the many Snowden allegations about government surveillance. Is it a panicked response to a failed audit? Sort of like what happened to Lavabit, but deliberately wrapped in mystery.īut wouldn’t just closing the project with no explanation at all be even cleaner? Some have suggested that there might be legal pressure on TrueCrypt, combined with some sort of gag order that prevents the full story being told, so that this was the only lawfully clean way of closing the project. We don’t yet know, but the unlikely, unprofessional-looking and abrupt download page suggests that you’d be unwise to trust anything about it.
If so, no-one from TrueCrypt has yet come forward to suggest so. The 7.2 “decrypt only” version can be downloaded for Windows, OS X and Linux. Yet more curiously, there’s a new version numbered 7.2 that can apparently only decrypt, intended to help you migrate away from the now-defunct TrueCrypt product. The motivation seems to be that on all supported operating systems for which TrueCrypt was available, there’s now some sort of built-in full disk encryption system. Not only that, but the page goes on to state that the project has been closed down, following the end of support for Windows XP:
WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues Now, the website of venerable free disk encryption software TrueCrypt is telling us: No-one seems to know how, or why, and (to make things yet weirder) the PayPal address given for payment didn’t actually exist. Webdriver Torso has nothing on this week’s mysteries!įirst we had Apple iDevices in Australia announcing “ Device hacked by Oleg Pliss” and demanding a $50 Moneypak voucher or $100 via PayPal.
0 kommentar(er)
