cooper Posted September 30, 2015 Share Posted September 30, 2015 http://www.itworld.com/article/2987438/newly-found-truecrypt-flaw-allows-full-system-compromise.html The problem's been fixed in VeraCrypt. Quote Link to comment Share on other sites More sharing options...
sud0nick Posted September 30, 2015 Share Posted September 30, 2015 Look's like I'm upgrading to VeraCrypt. Quote Link to comment Share on other sites More sharing options...
Lost In Cyberia Posted September 30, 2015 Share Posted September 30, 2015 Welp, to be fair, the maintainers of the original Truecrypt *did* say to move away from it, despite the audit... Quote Link to comment Share on other sites More sharing options...
cooper Posted October 2, 2015 Author Share Posted October 2, 2015 The problem the current TrueCrypt users now have is that TrueCrypt was audited. Flaws have been discovered but since the codebase is dead and apparently building the code into the binary is a rather involved process you can't trivially fix this verified codebase. VeraCrypt is a fork from this audited TrueCrypt that changed any number of things which are almost certainly done with the best intentions and by skillful security-minded people... but this new code hasn't been audited. So your choice is between a known risk and an unknown risk. Life is full of important decisions. Quote Link to comment Share on other sites More sharing options...
digip Posted October 3, 2015 Share Posted October 3, 2015 They do state that they originally created this because of no easily used file encryption on Windows XP, but with bitlocker on windows now and EFS for most every OS, it makes sense to go with your OS for doing encrypted drives. I do like that True Crypt made a nice file container though that you could easily shuttle files around on USB, but you could get by with password protected, encrypted rar or 7z containers if it's just for transport. Mounting an using it like a live disk drive was nice but not a requirement for me. Quote Link to comment Share on other sites More sharing options...
fugu Posted November 4, 2015 Share Posted November 4, 2015 This is not really related to to original bug, but for those using Arch Linux, theres a package called "tcplay", which will allow you to use your truecrypt volumes in a linux environment. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.