Linux za Sve forum

TrueCrypt - popularni program otvorenog koda za enkripciju particija i diskova - naglo je prestao s razvojem. Na službenoj web stranici je postavljena vrišteća obavijest kako program više nije siguran jer sadrži sigurnosne propuste, kao i detaljne upute za migraciju na zatvoreni BitLocker za Win, Mac i Linux.

WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

This page exists only to help migrate existing data encrypted by TrueCrypt.

The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP. Windows 8/7/Vista and later offer integrated support for encrypted disks and virtual disk images. Such integrated support is also available on other platforms (click here for more information). You should migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk images supported on your platform.

(...)

WARNING: Using TrueCrypt is not secure

You should download TrueCrypt only if you are migrating data encrypted by TrueCrypt.

Postoje brojna nagađanja o motivima ovog poteza. Ako postoje sigurnosni propusti, zašto jednostavno nisu ispravljeni? Čemu preusmjeravanje na BitLocker - program zatvorenog koda koji dolazi predinstaliran u Windowsu? BitLocker nije popustio pritiscima američkog FBI-a i NSA za postavljanjem backdoora za neprimjetan pregled enkriptiranog sadržaja, što ne mora biti slučaj i s TrueCryptom. Matthew Green, jedan od autora programa, potvrđuje da je taj scenarij vjerojatan.



http://truecrypt.sourceforge.net/
http://truecrypt.sourceforge.net/OtherPlatforms.html
http://en.wikipedia.org/wiki/BitLocker# ... y_concerns
https://twitter.com/matthew_d_green/sta ... 8147519488
http://www.webupd8.org/2014/05/suspicio ... ement.html

Očito je taj TrueCrypt jako moćna enkripcija, pa su dobili "ponudu koja se ne odbija" i eto kraja.

Sinoć je izbila cijela drama oko toga na redditu, javljaju se i prve teorije zavjere

Abzeenth je napisao/la:Sinoć je izbila cijela drama oko toga na redditu, javljaju se i prve teorije zavjere

Evo link. Ovo je plodno tlo za teorije zavjere

Poprilično iznenadna i ne baš previše objašnjena objava na stranicama TrueCrypta:

TrueCrypt nije siguran...

Razvoj TrueCrypta je završio 5/2014...

Za sad postoje samo različita nagađanja o tome kako je stranica možda hakirana ili ih je dohvatila neka troslovna agencija ili...
Sve u svemu veliko iznenađenje

Već postoji tema o ovome: http://www.linuxzasve.com/forum/viewtop ... 24&t=11764

Ups, promaklo mi je. Sorry!

Čini se da će ipak biti forkan. Novi website uspostavljen u Švicarskoj

Currently it is very unclear what really happened. Was it really just the end of a 10year effort, or was it driven by some government. While a simple defacement is more and more unlikely we still don't know where this is going. However the last 36 hours showed clearly that TrueCrypt is a fragile product and must be based on more solid ground. We start now with offering to download the Truecrypt file as is, and we hope we can organize a solid base for the Future.

There are no signs that there is any known security problem within TrueCrypt 7.1a and the audit will go on uninterrupted. Even though the trust into the developer team has diminshed drastically, we believe that there needs to be an Open Source, Cross plattform fulldisk encryption option.

http://news.softpedia.com/news/TrueCryp ... 4447.shtml
http://truecrypt.ch/