The Sudden Policy Change In Truecrypt Explained

X10 (186866) writes "I use Truecrypt, but recently someone pointed me to the SourceForge page of Truecrypt that says it's out of business. I found the message weird, but now there's an explanation: Truecrypt has received a letter from the NSA." Anyone with a firmer source (or who can debunk the claim), please chime in below; considering the fate of LavaBit, it sure sounds plausible. PCWorld lists some alternative software, for Windows users in particular, but do you believe that Microsoft's BitLocker is more secure?

Re:still speculation

[MouseTheLuckyDog]

Rightr because everything that Steve Gibson does is completely accurate. Right?

Re:Speculation

[aaaaaaargh!]

That's exactly what I thought first. But then it came to my mind that Bitlocker is much more secure than Truecrypt, because it has been developed and carefully audited by a corporation with a proven track record in cyber security. That fact makes it practically 100% certain that the developers of Truecrypt just thought "nah, fuck it, we now have Bitlocker, which uses military-grade encryption against all kinds of criminals and cyber-threads, and there are minor to medium potential problems with our code, so we just throw the towel and give up all the work on Truecrypt."

That's obvious, right?

TC developer used hidden message!!!

[Anonymous Coward]

Haha. Frankly, usable crypto kits need security audits.

Re:Speculation

[lsllll]

Amen brother! I switched to Bitlocker a while ago and never even looked back at LUKS or TrueCrypt. The problem I had, though, was that I run only Linux on my machine. No worries. I installed VirtualBox, created a VM and installed Windows on it. That way I could make /home/lsllll as a private share available in the VM and have Bitlocker go at it. That is the ONLY reason why I run Windows. God praise the Bitlocker developers. They saved me from the NSA.

Re: Steve Gibson

[bill_mcgonigle]

If you ever tried listening to one of his podcasts you could make some informed comments. I dare you to go listen to the two recent ones on certificate revocation protocols and not come away better informed. But an informed commenter on Slashdot? My goodness that would be like the bad old days.

Re: Steve Gibson

[MouseTheLuckyDog]

Yep. THey are right up thjere with Lucy's podcasts on how to kick a football.