TrueCrypt NOT Secure (or) Truecrypt.org Hacked...

[RUEHL]

Weird stuff going on at truecrypt.org, I've been using it over the past decade to protect all my files including all my Bitcoins.

“TrueCrypt is not secure,” official SourceForge page abruptly warns

[audereyy]

Lol, it's NSA nubs trying to catch their 'fish', they think that someone who they are watching, will read this and install bitlocker and they will decrypt his data.
Because they tired of waiting until they can crack TrueCrypt and started to feel powerless, since TrueCrypt isn't really crackable.

NSA = 
TC users = 

[ShameOnYou]

This is the third time I've seen mention of this, but to be honest, I'm not sure what the situation is exactly. Could someone explain it to me in layman's terms?

[RUEHL]

This is the third time I've seen mention of this, but to be honest, I'm not sure what the situation is exactly. Could someone explain it to me in layman's terms?

TrueCrypt has been the de facto standard for open source drive encryption. 

Other paid solutions, it's probable that the vendor or NSA has some backdoor into the encryption.

So all this time, we thought we were safe but perhaps not?

[Singlebyte]

This is definitely weird.  I googled it to find out more info and this is what PC World had to say:

http://www.pcworld.com/article/2241300/truecrypt-now-encouraging-users-to-use-microsofts-bitlocker.html

[sippsnapp]

Twitter goes bonkers on #truecrypt.

No statement from any dev as of yet.

Snowden allegedly used truecrypt and its very well known as nr1 encryption for bitcoiners too.

And then theres this, https://firstlook.org/theintercept/article/2014/03/20/inside-nsa-secret-efforts-hunt-hack-system-administrators/

One blog to watch, eventually https://www.schneier.com/about.html

Very strange to say the least.

[Singlebyte]

Google news is starting to light up with articles now about it.  This one is sorta interesting:

http://nakedsecurity.sophos.com/2014/05/28/true-mystery-of-the-disappearing-truecrypt-disk-encryption-software/

[eXch]

Don't listen to rumors spreaded by the NSA
I am quite sure that TrueCrypt developer was paid OR silently arrested by the NSA then they had modified the official site.
TrueCrypt is using a proven open techniques, nobody can crack Serpent+Aes combinations, so stopping using TC just because they "had stopped a developing" would be stupid, as well as because TC hadn't any official releases during a long time period, because it's secure and stable!

Also, look at this: http://en.wikipedia.org/wiki/Special:Contributions/Truecrypt-end
Who would be trying to modify the official wiki page so steadily and stressfully (3 times) ? Suddenly... And in a so dirty way...
... Only a hacker or the government!!!

[lilfiend]

Had to double check my truecrypt version to be sure... 7.1a

PHEW!

[bluefirecorp]

Sitting in #truecrypt on freenode. Topic is: Unofficial TrueCrypt channel | Site is potentially compromised so please excercise due diligence before downloading and installing | For now, we don't know any more than you do.

[validium]

I wouldn't trust this sort of news till i see a post by Bruce schneier on the matter. Now why would the devs tell us to switch to bitlocker which is not open source? Doesn't make sense.

[MiningBuddy]

Some interesting theories on reddit right now about this: http://www.reddit.com/r/netsec/comments/26pz9b/truecrypt_development_has_ended_052814/

[bitbouillion]

Where can I downlaod the 7.2 sources and diff them to 7.1?

[Singlebyte]

Why do we have two threads?  Maybe a mod can merge or close one?

[lyth0s]

I think by them saying to switch to Microsofts bitlocker (LOL) is a red flag for all of us. Truecrypt's devs would never say that. I think this is somewhat of a Warrent Canary to let us know that either the NSA has seized control of the project and to not trust any new updates, or that the developer has been arrested or ordered to implement a backdoor. I would continue to use Truecrypt 7.1a or earlier and NOT use 7.2 or any new version. And DONT use bitlocker, Microsoft has partnered with the NSA many times and I'd bet $$ that there is a NSA backdoor in there for sure.

[PrivacyIsImportant]

Where can I downlaod the 7.2 sources and diff them to 7.1?

http://cyberside.net.ee/truecrypt/ - sources + release mirror

There is also an official github channel, but there is a risk of it being sliced and source code modified as well as official pages.
https://github.com/DrWhax/truecrypt-archive

So, better use old mirrors above, not located in the U.S.

[drrussellshane]

7.2 was just recently added in the wake of all this so that users could decrypt, but not encrypt files.

I would stay the hell away from it though.

If you didn't download 7.2 within the past day or so, then you don't have it.

7.1a has been around since before the Snowden leaks went public.

[InwardContour]

freaky. people have depended on truecrypt for so many years now -- unbelievable if unsecure.

[PrivacyIsImportant]

unbelievable is how people who have depended on TC simply believe in that and get tricked

[Remember remember the 5th of November]

If people depended on it for so many years, how come I only recently heard of it?