News for hackers. Stuff that matters.
Re:Veracrypt Project Update by abcd_f on Wednesday April 08, 2026 @07:02AM (#47688494)
It's more or less commonly accepted that its creator got jailed for being an arms dealer.

https://en.wikipedia.org/wiki/Paul_Le_Roux

Re:Veracrypt Project Update by Topfi on Wednesday April 08, 2026 @07:12AM (#47688590)
I knew the speculation on him being involved in some capacity, but as the wiki page states, this was never confirmed in any substantial way.

More importantly, if development seized with no public comment, that would be one thing and may strengthen the "he got arrested" theory. However, there was some final communication, specific recommendations to rely on Bitlocker of all things, a new version of Truecrypt was released solely for decrypting existing disks and then the web page was removed, including a flag set on robots.txt to ensure it wouldn't appear on archive.org. All this concurrent to a crowd funded source code audit that, in the end, did not find any server issues or backdoors (I recall some speculation back in the day, that either known code quality issues or an intentional backdoor could have caused the exodus).

That all makes it hard to link this to an arrest of the main developer, though I dislike speculation without any hard evidence and if there is no new information, I'll keep this filed under "there is no answer".

Re:Veracrypt Project Update by Izmaki on Wednesday April 08, 2026 @11:26AM (#47691546)
I always believed that rather than publicly stating that they were about to be arrested or worse, which may alert regular, non-tech-savy people, he sent a hidden message in the arguably horrendous recommendation of replacing his tool with BitLocker.

I think he was trying to scream “Run!” without actually screaming “run”.

Re:Veracrypt Project Update by _boffin_ on Wednesday April 08, 2026 @02:47PM (#47694514)
Wasn’t there something with 7.1A and that the canary was gone after that version too?
Re:Veracrypt Project Update by ProllyInfamous on Friday April 10, 2026 @12:57PM (#47720879)
Developer also recommended (tongue-in-cheek) to use Microsoft's built-in encryption services (easily defeated) in his outgoing blogpost — perhaps because he was barred from explaining the real reason for project's cancelation.
Re:Veracrypt Project Update by diath on Wednesday April 08, 2026 @09:22AM (#47689889)
Makes you wonder what kind of leverage/information you have to have to only get 25 years for admitting to being involved in 7 murders.
Re:Veracrypt Project Update by pnw on Wednesday April 08, 2026 @03:04PM (#47694748)
According to Wikipedia, the DEA gave him immunity on additional charges in return for pleading guilty and running a sting against his associates, but before the DEA knew about the murders.
Re:Veracrypt Project Update by account42 on Thursday April 09, 2026 @06:47AM (#47701931)
Seems weird that the DEA can even give him immunity unknown crimes, especially ones that might not be directly related to the case and even weirder that they would offer that. Makes you wonder what kind of leverage/information you have to have to get that kind of plea deal.
Re:Veracrypt Project Update by Jerrrrrrrry on Wednesday April 08, 2026 @11:01AM (#47691194)
One of the greatest men of our times.
Re:Veracrypt Project Update by badocr on Wednesday April 08, 2026 @11:08AM (#47691282)
My theory is that Le Roux was just financing the (two?) TrueCrypt developers.
Re:Veracrypt Project Update by JoshGlazebrook on Wednesday April 08, 2026 @02:50PM (#47694571)
> He subsequently admitted to arranging or participating in seven murders, carried out as part of an extensive illegal business empire.

Yikes