Truecrypt tinfoil hat testing
Crypto
crypto at jpunix.net
Thu May 29 14:48:42 PDT 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 5/29/2014 4:38 PM, Crypto wrote:
> On 5/29/2014 4:22 PM, rysiek wrote:
>> Dnia czwartek, 29 maja 2014 21:23:27 NullDev pisze:
>>> With exquisite timing, I bought a new external HDD yesterday
>>> (28.05.14) and set about encrypting it with TrueCrypt. I
>>> installed via the terminal as I'm on Linux, ie:
>>>
>>> wget
>>> http://www.truecrypt.org/download/truecrypt-7.1a-linux-x64.tar.gz
>>>
>>>
>>>
>>>
>
>>>
I extracted it, and encrypted my drive. The TrueCrypt website was
>>> looking it's normal self at that point: I referred to it a few
>>> times during the encryption.
>>>
>>> However, no sooner had it finished at about 4pm UK time
>>> yesterday, I received the first email from someone on the list
>>> about Truecrypt pulling the plug. Their site had been changed
>>> to the one we see today, recommending we switch to an
>>> alternative like, ahem, something as fabulously secure as
>>> Bitlocker.
>>>
>>> Ironic timing, huh? So, I have what was possibly the last
>>> download of a version 7.1a tarball before everything went
>>> titsup, and if you read what The Register said about
>>> Truecrypt's V.7.2 being corrupted/infected/backdoored here:
>>>
>>> http://www.theregister.co.uk/2014/05/28/truecrypt_hack/
>>>
>>> Then theoretically I have something to wonder about. However,
>>> it would appear that the date, checksum and verification are ok
>>> on what I downloaded. It *seems* clean.
>>>
>>> It would be interesting to see if it's in anyone's scope to
>>> compare the source code with other versions of 7.1a for Linux:
>>> it's beyond mine, apologies. If anyone wants me to send them
>>> the tarball I'll be happy to oblige.
>>>
>>> Let me know if I can be of assistance.
>
>> Upload it on Github somewhere, and let's use this tool to compare
>> different 7.1a versions publicly? If we trust GitHub, that is.
>> ;)
>
>
> I have some older Windows binaries that I'll upload to Mediahub
> and publish the URLs.
>
>
Hmm. Looking through my recent backups the only copy of Truecrypt I
have at the moment is:
http://www.mediafire.com/download/a88i4622qh6v7ku/TrueCrypt_Setup_7.1a.exe
Anyone that wants it is welcome to it.
- --
Crypto
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=nzKi
-----END PGP SIGNATURE-----
More information about the cypherpunks
mailing list