[kwlug-disc] Is Truecrypt audited yet?

Fernando Duran liberosec at yahoo.ca
Thu Dec 5 08:46:11 EST 2013


Hello,

At least somebody has been able to compile the source code of TrueCrypt in Win32 and obtain the same binaries as the official ones http://seclists.org/fulldisclosure/2013/Oct/245

--------------------- 
Fernando Duran 
http://www.fduran.com



On Wednesday, December 4, 2013 1:25:15 PM, Paul Nijjar <paul_nijjar at yahoo.ca> wrote:


>I really should have posted this before the meeting, but it probably
>doesn't matter -- you likely know about it already. But in case you
>don't: 
>
>http://istruecryptauditedyet.com/
>
>So I use TrueCrypt and I mostly trust it (for no good reason). I think
>way more software should have eyeballs examining the code, because
>"given enough eyeballs, all bugs are shallow" only works if there are
>eyeballs, and in my opinion too many of us (including myself) are free
>riders. So if giving to some IndieGoGo campaign helps an important
>piece of software get audited, then I am all for it. 
>
>On the other hand, funding the original authors of software is
>important too, and it is a little squicky to think that the TrueCrypt
>authors may not have seen $45k in donations for their years of hard
>work. 
>
>- Paul
>
>-- 
>http://pnijjar.freeshell.org
>
>
>_______________________________________________
>kwlug-disc mailing list
>kwlug-disc at kwlug.org
>http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
>
>  




More information about the kwlug-disc mailing list