Heads Up on Hushmail - Not secure

[Corax]

Pigeons.

 

[joustmaster]

Anyhoo, have you lot heard about the potentially dodgy bit of software lurking in Truecrypt?

Have they found anything? I know they were trying to get cash together to audit it..

 

[DrRingDing]

Have they found anything? I know they were trying to get cash together to audit it..

No, not yet. But it sounds reet dodgy.

 

[DrRingDing]

http://istruecryptauditedyet.com/

 

[joustmaster]

an audit is pretty standard. It doesn't mean they expect it to be dodgy.. Just that they want to prove it isn't

 

[DrRingDing]

an audit is pretty standard. It doesn't mean they expect it to be dodgy.. Just that they want to prove it isn't

There is a bit of specific code they are concerned about......

For one thing, researchers have been unable to prove that the downloadable Windows executable, built by the TrueCrypt team, can be constructed purely from the published source code, for reasons based on unusual decisions by the developers – as explained by cryptographer Matthew Green here. (In short, the Windows binary appears to save a block of unexplained bytes with the encrypted data. Some fear this is a key to a backdoor, which would allow people in-the-know to decrypt the data without the user's password.)

http://www.theregister.co.uk/2013/10/15/truecrypt_security_audit/