News for hackers. Stuff that matters.
Re:How the CIA used Crypto AG encryption devices to spy on c... by RcouF1uZ4gsC on Tuesday February 11, 2020 @12:48PM (#22300569)
From the TrueCrypt webpage: http://truecrypt.sourceforge.net/

> WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

The fact that they use awkward wording that contains words whose first letters that start with NSA (not secure as) is pretty suggestive that you are right.

Re:How the CIA used Crypto AG encryption devices to spy on c... by pstuart on Tuesday February 11, 2020 @12:51PM (#22300615)
Wow. In a different timeline I'd dismiss that as tinfoil hat time, but in this one it seems spot on.
Re:How the CIA used Crypto AG encryption devices to spy on c... by maxerickson on Tuesday February 11, 2020 @04:51PM (#22303302)
Is the idea that there would be consequences for a blatant message but not for a sort of more subtle one?
Re:How the CIA used Crypto AG encryption devices to spy on c... by lawnchair_larry on Tuesday February 11, 2020 @05:01PM (#22303390)
Nope, still tinfoil hat. This is just apophenia.
Re:How the CIA used Crypto AG encryption devices to spy on c... by pstuart on Wednesday February 12, 2020 @01:32AM (#22306425)
Thank you for the new word.

You make your case as if you have proof, which you likely don't. It's a moot point.

Re:How the CIA used Crypto AG encryption devices to spy on c... by ta999999171 on Tuesday February 11, 2020 @04:47PM (#22303262)
> tinfoil hat time

This trope needs to die already.

Re:How the CIA used Crypto AG encryption devices to spy on c... by pfundstein on Tuesday February 11, 2020 @06:35PM (#22304155)
What would you suggest instead? It's a good way to convey unfounded paranoia or to acknowledge that what you're saying sounds like a conspiracy theory.
Re:How the CIA used Crypto AG encryption devices to spy on c... by glitchdigger on Wednesday February 12, 2020 @12:47AM (#22306176)
> talking bout NSA

“Unfounded” paranoia

Re:How the CIA used Crypto AG encryption devices to spy on c... by ta999999171 on Wednesday February 12, 2020 @03:36AM (#22307037)
There's nothing wrong with conspiracy theory. They regularly turn into conspiracy fact.

That's not a dirty phrase either - regardless of what the media memo said back then.

That's what I'm suggesting.

Re:How the CIA used Crypto AG encryption devices to spy on c... by maqp on Tuesday February 11, 2020 @02:23PM (#22301688)
No the actual message is "Using TrueCrypt" -> UTC -> Coordinated Universal Time. The real culprit are the time thieves as explained in the book "Momo and the Time Thieves".

Your mind will see what it wants.

Re:How the CIA used Crypto AG encryption devices to spy on c... by Invictus0 on Tuesday February 11, 2020 @02:34PM (#22301822)
It's plausible to think that that message constitutes a warrant canary [0].

[0] https://en.wikipedia.org/wiki/Warrant_canary

Re:How the CIA used Crypto AG encryption devices to spy on c... by sethherr on Tuesday February 11, 2020 @03:42PM (#22302613)
Not mutually exclusive, it's possible the Momo and the time thieves and the NSA are working together - the UTC is NSA, is the combined message
Re:How the CIA used Crypto AG encryption devices to spy on c... by ta999999171 on Tuesday February 11, 2020 @04:48PM (#22303275)
Do you think you're making a point, or just being edgy with your humor?

For some people out there, this kinda shit keeps them safe/alive.

Re:How the CIA used Crypto AG encryption devices to spy on c... by maqp on Wednesday February 12, 2020 @02:44PM (#22312080)
There's nothing that shows TrueCrypt is backdoored. Read the audit by nccgroup: https://opencryptoaudit.org/reports/TrueCrypt_Phase_II_NCC_O...

There were vulnerabilities in the software, but nothing that allows the governments to break the encryption with. The Windows client had some privilege escalation attack but that doesn't allow decryption of data at rest. On Linux TrueCrypt is still fine to use, the only downside is, the password based key derivation function is starting to show it's age. However, provided your password is around 128 bits, that's not a problem.

Re:How the CIA used Crypto AG encryption devices to spy on c... by ta999999171 on Friday February 14, 2020 @10:30PM (#22333008)
Missing the point.
Re:How the CIA used Crypto AG encryption devices to spy on c... by paulryanrogers on Tuesday February 11, 2020 @01:49PM (#22301324)
Indeed, a great call out. Props also to the French company sponsoring the Veracrypt fork.
Re:How the CIA used Crypto AG encryption devices to spy on c... by jfk13 on Tuesday February 11, 2020 @05:58PM (#22303878)
Doesn't seem like awkward wording to me (as a native English speaker, fwiw); just a routine disclaimer.

I suppose the fact that it contains words that start with TIN (TrueCrypt is not) provides sufficient justification for your hat, anyhow.