Truecrypt tinfoil hat testing

[Crypto]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 5/29/2014 4:22 PM, rysiek wrote:
> Dnia czwartek, 29 maja 2014 21:23:27 NullDev pisze:
>> With exquisite timing, I bought a new external HDD yesterday 
>> (28.05.14) and set about encrypting it with TrueCrypt. I 
>> installed via the terminal as I'm on Linux, ie:
>> 
>> wget 
>> http://www.truecrypt.org/download/truecrypt-7.1a-linux-x64.tar.gz
>>
>>
>>
>> 
I extracted it, and encrypted my drive. The TrueCrypt website was
>> looking it's normal self at that point: I referred to it a few 
>> times during the encryption.
>> 
>> However, no sooner had it finished at about 4pm UK time 
>> yesterday, I received the first email from someone on the list 
>> about Truecrypt pulling the plug. Their site had been changed to 
>> the one we see today, recommending we switch to an alternative 
>> like, ahem, something as fabulously secure as Bitlocker.
>> 
>> Ironic timing, huh? So, I have what was possibly the last 
>> download of a version 7.1a tarball before everything went
>> titsup, and if you read what The Register said about Truecrypt's
>> V.7.2 being corrupted/infected/backdoored here:
>> 
>> http://www.theregister.co.uk/2014/05/28/truecrypt_hack/
>> 
>> Then theoretically I have something to wonder about. However, it 
>> would appear that the date, checksum and verification are ok on 
>> what I downloaded. It *seems* clean.
>> 
>> It would be interesting to see if it's in anyone's scope to 
>> compare the source code with other versions of 7.1a for Linux: 
>> it's beyond mine, apologies. If anyone wants me to send them the 
>> tarball I'll be happy to oblige.
>> 
>> Let me know if I can be of assistance.
> 
> Upload it on Github somewhere, and let's use this tool to compare 
> different 7.1a versions publicly? If we trust GitHub, that is. ;)
> 

I have some older Windows binaries that I'll upload to Mediahub and
publish the URLs.

- -- 
Crypto

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=UP2b
-----END PGP SIGNATURE-----