[liberationtech] Not an Emergency: Has TrueCrypt.org been Hijacked?

[sam de silva]

Hi there,

I accessed the truecrpyt site less than 24 hours ago and it went to the true crypt site i have been familiar with.

We are about to finalise a dig safety curriculum, so it'll be great to get some feedback from the info-sec community about this as soon as possible.  

Thanks in advance, Sam




On 29/05/2014, at 6:42 AM, Griffin Boyce <griffin at cryptolab.net> wrote:

> Rich Kulawiec wrote:
>> It's probably just been hacked.  Since the principals haven't commented
>> yet, I suspect they're probably busy diagnosing and fixing it.  I suggest
>> ignoring the yapping on Twitter, having a nice microbrew, and awaiting
>> further developments.
> 
>  My suspicion is that either they were hacked (and had their key stolen), or that they were ordered to shutdown and recommend Microsoft's (presumably backdoored) BitLocker as a replacement.  BitLocker's enterprise documentation makes me *incredibly* suspicious that it is susceptible to monitoring by third-parties.
> 
>  Pardon my tinfoil hat.
> 
> ~Griffin
> -- 
> Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys at stanford.edu.