Re: : TrueCrypt Alternatives

On 05/29/2014 08:14 PM, D. Hugh Redelmeier wrote:
> | From: David Collier-Brown <[email protected]>
>
> | On 05/29/2014 10:16 AM, Lennart Sorensen wrote:
>
> | > And I thought the big audit was just about done on it too.
>
> | Something smells: usually when a company closes down just before an
> | auditor reports, it's because they're badly broken...
>
> The "Phase I Audit Report" has been available for a while ago.  In honour of
> the withdrawal, I read the report.  Interesting but not damning.
> <https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf>
> Dated 2014 February 14.
>
> Why TrueCrypt has been withdrawn isn't clear to me.  Since it is open
> source, the project will surely be forked.  And improved.
> --
> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>
There was also a lot of "national security letter" speculation about the
withdrawal, but the only evidence was the extreme oddness of the process.

I suspect the full audit report will tell us more about what could and
could not be the case.

Looking purely at the legal aspects of this, it argues for Evan's "risk
map", but for the geographic risks of software development as opposed to
the geographic risks in domain use or purchase.

Evan, you may have raised just the tip of the iceberg...

--dave

-- 
David Collier-Brown,         | Always do right. This will gratify
System Programmer and Author | some people and astonish the rest
[email protected]           |                      -- Mark Twain

--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists