TrueCrypt suggesting migration to BitLocker?

Re:TrueCrypt suggesting migration to BitLocker? by bothuman on Wednesday May 28, 2014 @11:34PM (#7814550)

>- The version there works and does not seem to have a trojan, so probably not a regular hacker.

Incorrect, all the guy did was compare diffs of the source. He did not compile the source to make sure the binaries matched.

[ Parent | on HN ]

Re:TrueCrypt suggesting migration to BitLocker? by BoppreH on Wednesday May 28, 2014 @11:45PM (#7814593)

Are you sure? He does say "binaries when run make no unexpected...".

And matching binaries is not a trivial task because of OS, compiler and SDK versions. The last time someone did this for Truecrypt it made the news: https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binarie...

[ Parent | on HN ]

Re:TrueCrypt suggesting migration to BitLocker? by wielebny on Thursday May 29, 2014 @12:12AM (#7814684)

Binaries could have code that will activate in future.

[ Parent | on HN ]

Re:TrueCrypt suggesting migration to BitLocker? by smellf on Thursday May 29, 2014 @12:52AM (#7814808)

If you have a copy of the source that you've vetted, and you can compile it in such a way that the resulting binary is a bit-for-bit match of the developer released binary, then you know that either there is no future-activation code or you missed it in your review or your compiler was itself compiled maliciously with the intent of inserting malicious code into that exact version of truecrypt every time it was compiled. Or there is no future activation code.

[ Parent | on HN ]

Re:TrueCrypt suggesting migration to BitLocker? by nobotty on Thursday May 29, 2014 @01:58AM (#7814959)

which is a fucking pain in the ass as stated such that it is a newsworthy feat?

[ Parent | on HN ]