m********5
发帖数: 17667 | 1 审计估计过不了，于是干脆停了
大家安了吧，在NSA面前没有秘密
http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website
Several readers sent word that the website for TrueCrypt, the popular disk
encryption system, says that development has ended, and Windows users should
switch to BitLocker. A notice on the site reads, "WARNING: Using TrueCrypt
is not secure as it may contain unfixed security issues. ... You should
migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk
images supported on your platform." It includes a link to a new version of
TrueCrypt, 7.2, and provides instructions on how to migrate to BitLocker.
Many users are skeptical of a site defacement, and there's been no
corroborating post or communication from the maintainers. However, the
binaries appear to be signed with the same GPG key that the TrueCrypt
Foundation used for previous releases. A source code diff of the two
versions has been posted, and the new release appears to simply remove much
of what the software was designed to do. It also warns users away from
relying on it for security. (The people doing an audit of TrueCrypt had
promised a 'big announcement' soon, but that was coincidental.) Security
experts are warning to avoid the new version until the situation can be
verified. | d****o
发帖数: 32610 | 2 RSA都有后门，还想怎样？早就跪安了
should
TrueCrypt
【在 m********5 的大作中提到】
: 审计估计过不了，于是干脆停了
: 大家安了吧，在NSA面前没有秘密
: http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website
: Several readers sent word that the website for TrueCrypt, the popular disk
: encryption system, says that development has ended, and Windows users should
: switch to BitLocker. A notice on the site reads, "WARNING: Using TrueCrypt
: is not secure as it may contain unfixed security issues. ... You should
: migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk
: images supported on your platform." It includes a link to a new version of
: TrueCrypt, 7.2, and provides instructions on how to migrate to BitLocker.
| m********5
发帖数: 17667 | 3 http://arstechnica.com/security/2014/05/truecrypt-is-not-secure
Last year, amid revelations that the NSA can decode large swaths of the
Internet's encrypted data, supporters ponied up large sums of money to audit
TrueCrypt. Results from phase one of the audit released last month revealed
no evidence of any backdoors. Additional audits were pending.
其他上当出钱给他们开发的，要求audit,结果phase one刚结束，其他的audit正要开始
的时候项目组直接消失了，LoL
估计新一轮审计发现很多漏洞和后门，眼看过不了，就整个项目直接停了，如果是资金
问题，完全可以fork出来交给社区，如果是自由的代码贡献人和管理人，不可能全都同
时停掉，这种情况最大可能就是NSA的项目终止，人员抽调去干别的了。
所以我一直说，加密软件，用自己写的才好，别贪什么功能繁多
should
TrueCrypt
【在 m********5 的大作中提到】
: 审计估计过不了，于是干脆停了
: 大家安了吧，在NSA面前没有秘密
: http://it.slashdot.org/story/14/05/28/2126249/truecrypt-website
: Several readers sent word that the website for TrueCrypt, the popular disk
: encryption system, says that development has ended, and Windows users should
: switch to BitLocker. A notice on the site reads, "WARNING: Using TrueCrypt
: is not secure as it may contain unfixed security issues. ... You should
: migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk
: images supported on your platform." It includes a link to a new version of
: TrueCrypt, 7.2, and provides instructions on how to migrate to BitLocker.
|
|
