full-disclosure - Re: [FD] TrueCrypt 7.1 repos on GitHub

Open Source and information security mailing list archives

Message-ID: <CAOJKFBBbWVCqLEsNmYs+OxvStn5PnoVzmdM8smOkZkfbS8_DPQ@mail.gmail.com>
Date: Fri, 30 May 2014 15:00:39 -0500
From: Brandon Perry <bperry.volatile@...il.com>
To: fulldisclosure@...e.net
Cc: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: Re: [FD] TrueCrypt 7.1 repos on GitHub - forking starting point

Two issues with this:

1) TrueCrypt wasn't free as in freedom, it was free as in beer. These forks
break the license afaik.

2) Do you trust these users to understand the codebase thoroughly enough
and understand cryptography enough to not introduce stupid crypto bugs?
That is a huge caveat.

Just my 2c.

On Fri, May 30, 2014 at 10:58 AM, CIURANA EUGENE (pr3d4t0r - Full
Disclosure) <fulldisclosure@...e.net> wrote:

>
>
> Hi again!
>
> There are at least two forks on GitHub of what appear to
> be complete, legit versions of TrueCrypt 7.1 -- there are others
> scattered throughout the web.
>
>         * https://github.com/syglug/truecrypt
>
>         * https://github.com/FauxFaux/truecrypt
>
> Cloning and building on OS X,
> figuring out if the files are OKi (in contact with the TrueCrypt Audit
> folks soon). Any C/C+ coders out there willing to give a hand? This is
> for OS X and Linux only.
>
> Cheers!
>
> pr3d
>
> _______________________________________________
> Sent through the Full Disclosure mailing list
> http://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/
>

-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives