[liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

[Bernard Tyers]

Hi Nighat,

When you say a while, how long do you mean?

There is a thread on the Twitters at the moment about this:

https://twitter.com/runasand/status/471740622031032320

- The the signature of the .exe still verifies.
- The key seems to be legit: https://www.google.nl/?gfe_rd=cr&ei=gUaGU_fmJ8eyOsvogYgF#q=c5f4+bac4+a7b2+2db8+b8f8+5538+e3ba+73ca+f0d6+F0D6+B1E0

Thanks 
Bernard

On 28 May 2014, at 22:03, Nighat Dad <nigidaad at gmail.com> wrote:

> That warning on TrueCrypt's website has been there since a while. AFAIK, iSEC did a security audit of TrueCrypt and found various weaknesses and issues in it. opencryptoaudit.org/reports/iSec_F…
> 
> 
> 
> 
> On Wed, May 28, 2014 at 10:58 PM, KheOps <kheops at ceops.eu> wrote:
> On Wed, May 28, 2014 at 01:44:12PM -0700, Brad Beckett wrote:
> > Truecrypt.org now redirects to: http://truecrypt.sourceforge.net/ with a
> > warning to use Bitlocker and not Truecrypt.
> 
> Hard to tell whether it's a hijack or an actual warning message. Does it
> make sense that TrueCrypt development could have ended with the
> termination of the support of Windows XP?
> 
> I'd be glad to hear more info on this!
> 
> KheOps
> 
> 
> --
> Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys at stanford.edu.
> 
> -- 
> Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys at stanford.edu.