lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAEjRxXvPXVguR3gynOMo2paA3_z3DbfNy_9SZbpgNhrcexgE=w@mail.gmail.com>
Date: Fri, 30 May 2014 00:39:18 +0200
From: Philip Cheong <philip.cheong@...stx.se>
To: Justin Bull <me@...tinbull.ca>
Cc: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: Re: [FD] TrueCrypt?

It's almost as mysterious as the Lavabit shutdown. Interestingly enough
there is a recent update on the story of Lavabit and how the company was
considered a third party up a crime so they did not have a right to legal
counsel. Check it out http://lavabit.com

I'm certainly interested to hear more on the back story of the TrueCrypt
shutdown and this supposed vulnerability.

On Thursday, May 29, 2014, Justin Bull <me@...tinbull.ca> wrote:

> But why go out in that style? Why not be frank? Why be so careless as to
> recommend BitLocker?
>
> The diff was meticulous but the website and comms were not. It doesn't add
> up.
>
> Sent from mobile.
> On May 29, 2014 5:13 PM, "secuip" <root@...uip.fr <javascript:;>> wrote:
>
> > http://krebsonsecurity.com/2014/05/true-goodbye-using-
> > truecrypt-is-not-secure/comment-page-1/#comment-255908
> >
> >
> > Le 29/05/2014 22:51, uname -a a écrit :
> >
> >> There are several strange behaviors.
> >>
> >> Sitesource is not clean. Just a html that say take now Bitlocker or
> >> other built-in tools of your OS !?
> >>
> >> New Keys got added to SF 3h before release of 7.2 happened.
> >>
> >> On SF the old versions got removed. For older Versions you've to
> >> download them elsewhere (there are several sources available).
> >>
> >> Encryption, Help and all traces to truecrypt.org got removed in the
> >> Programsource.
> >>
> >> No explanation for this anywhere. Just speculations.
> >>
> >> Truecrypt isn't available on the webarchive!
> >>
> >> The Wiki got editet massively.
> >>
> >>
> >>
> >> Am 29.05.2014 04:21, schrieb Anthony Fontanez:
> >>
> >>> I'm surprised I haven't seen any discussion about the recent issues
> with
> >>> TrueCrypt.  Links to current discussions follow.
> >>>
> >>> /r/sysadmin: http://www.reddit.com/r/sysadmin/comments/26pxol/
> >>> truecrypt_is_dead/
> >>> /r/netsec: http://www.reddit.com/r/netsec/comments/26pz9b/
> >>> truecrypt_development_has_ended_052814/
> >>>
> >>> Thank you,
> >>>
> >>> Anthony Fontanez
> >>> PC Systems Administrator
> >>> Client Services - College of Liberal Arts
> >>> Information & Technology Services, Enterprise Support
> >>> Rochester Institute of Technology
> >>> LBR-A290
> >>> 585-475-2208 (office)
> >>> ajfrcc@....edu<mailto:ajfrcc@....edu>
> >>>
> >>> Submit a request via email: servicedesk@....edu<mailto:ser
> >>> vicedesk@....edu>
> >>> Check the status of an active request: footprints.rit.edu<https://
> >>> footprints.rit.edu/>
> >>> Manage your RIT account and computers: start.rit.edu<https://start.
> >>> rit.edu/>
> >>>
> >>> CONFIDENTIALITY NOTE: The information transmitted, including
> >>> attachments, is intended only for the person(s) or entity to which it
> is
> >>> addressed and may contain confidential and/or privileged material. Any
> >>> review, retransmission, dissemination or other use of, or taking of any
> >>> action in reliance upon this information by persons or entities other
> than
> >>> the intended recipient is prohibited. If you received this in error,
> please
> >>> contact the sender and destroy any copies of this information.
> >>>
> >>>
> >>>
> >>> _______________________________________________
> >>> Sent through the Full Disclosure mailing list
> >>> http://nmap.org/mailman/listinfo/fulldisclosure
> >>> Web Archives & RSS: http://seclists.org/fulldisclosure/
> >>>
> >>>  _______________________________________________
> >> Sent through the Full Disclosure mailing list
> >> http://nmap.org/mailman/listinfo/fulldisclosure
> >> Web Archives & RSS: http://seclists.org/fulldisclosure/
> >>
> >
> >
> > _______________________________________________
> > Sent through the Full Disclosure mailing list
> > http://nmap.org/mailman/listinfo/fu<http://nmap.org/mailman/listinfo/fulldisclosure>



-- 
*Philip Cheong*
*Elastx *| Public and Private PaaS
email: philip.cheong@...stx.se
office: +46 8 557 728 10
mobile: +46 702 8170 814
twitter: @Elastx <https://twitter.com/Elastx>
http://elastx.se

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ