ReactOS and TrueCrypt

[Jedi-to-be]

http://www.youtube.com/watch?v=ohx05I5RqRs

choose 720p

[dizt3mp3r]

Luckily, I only use truecrypt to keep prying eyes from documents/images that might be unsuitable to the viewer. I might be taking my personal laptop into work, connecting into the corporate network and so I might want to keep documents referring to pricing/technology hidden from them. I put them in a truecrypt volume and then I am relatively certain they are thoroughly obscured. As I am not worried by anyone de-encrypting the volume I would suggest it is OK for people like me to keep using truecrypt. For those that need real encryption there may be other solutions but is any as convenient as Truecrypt?

If you are paranoid and believe that something even more suspicious is going on, some believing that the NSA has been using it to gain access to supposedly secret files (I'm not one of them) then you have already been exposed for a long while...

The excuse for stopping development - XP has come to an end is a poor one as this video shows!

[laurflorin]

Hey... don't want to be a spoiler or anything, but you had better check the truecrypt website:

www.truecrypt.com will redirect you to http://truecrypt.sourceforge.net/
where you will see what this is all about.

[dizt3mp3r]

That is what I was referring to...

[gamax92]

Well, if BitLocker could:
Encrypt the entire harddrive
Make volumes that looked like random data and not VHD's
Make hidden partitions,
Use unpartitioned space
Was avaliable for every version of Windows
Then I'd be fine with this.

But uhh ...


It can't.

That was a stupid reason to discontinue TrueCrypt. Their last version isn't even a full featured product, it only serves to help migrate to other programs.
There is even a tool to retrieve BitLocker passwords, and its by Microsoft. TrueCrypt doesn't store the actual password!

[laurflorin]

@ dizt3mp3r

My apologies, I skimmed through the text and didn't read all the details.

[laurflorin]

But True Crypt is open source, right? Maybe someone can take over and continue
supporting it...

Maybe ReactOS team could integrate it a part of the OS (like BitLocker in Windows counterpart),
probably if someone has donated to push truecrypt app to be supported.
That could be useful.

Or who knows, perhaps some other company would take over and redesign it,
like Winamp now, which has been left hanging by the previous developer
and now is in the process of rewrite after being bought by Radionomy.

However, I don't know why the projects states that now TrueCrypt poses a risk
to use...

[Black_Fox]

The situation is so weird, the most probable explanation so far is they were strongarmed to stop TC development (or to include a backdoor) and at the same time forced not to tell anybody. Mentioning BitLocker that only a small minority of Windows users has access to (it's only on Enterprise/Ultimate versions of Vista and newer) is pretty weak argument. But maybe they just went crazy.
All important info here: http://www.reddit.com/r/sysadmin/commen ... t_is_dead/

[Nemerian]

https://veracrypt.codeplex.com/ (fork)
http://truecrypt.ch/ (revival project)

[oldman]

https://veracrypt.codeplex.com/ (fork)
http://truecrypt.ch/(revival project)

Your last url is entangled within the brackets! This is correct "http://truecrypt.ch/".

[Dzmitry.Lahoda]

Yet another fork ciphershed.org.

[dark]

The situation is so weird, the most probable explanation so far is they were strongarmed to stop TC development (or to include a backdoor) and at the same time forced not to tell anybody. Mentioning BitLocker that only a small minority of Windows users has access to (it's only on Enterprise/Ultimate versions of Vista and newer) is pretty weak argument. But maybe they just went crazy.
All important info here: http://www.reddit.com/r/sysadmin/commen ... t_is_dead/

While it's possible they were strong armed, it is more likely a situation like what lead to the heartbleed bug. It takes money to do security audits, and open source software just doesn't have the money to pay for the audits necessary to prove it is actually secure.

[erkinalp]

CipherShed is the GPL fork of TrueCrypt which we can bundle.
https://github.com/CipherShed/CipherShed

[laurflorin]

Update: I have also found VeraCrypt, also a fork of TrueCrypt

https://veracrypt.codeplex.com/