TrueCrypt discontinued?

[dualstow]

I guess this is old news but I don't notice until today when I revisited their site after reading about encryption and the iPhone 6. Apparently discontinued in May of this year.

[dualstow]

Thanks, Chief. I've been using OS X's built-in encrypted file maker for a while. Nothing to encrypt, really, besides a password file.

[dragoncar]

I highly recommend the free lastpass as an alternative to your current process.
https://lastpass.com/

Yikes.  That's like recommending GLD as an alternative to holding your own physical.

[dragoncar]

Not sure why you say that; the program is highly regarded, works seamlessly with all major browsers and is a huge time saver, especially if you work across multiple devices. All info is encrypted in the cloud and can not be recovered if you lose your master password.

State Street is also highly regarded

[Jan Van]

Lastpass is very handy. I've been using it for a few years now. very handy if you use more than one device. Unless you want to rely on Chrome saving passwords. Most my passwords i wouldn't know, because they look like sU@B31t06k@JD9DC&cHN*L or yC5Bka$K@4!SL9EJow!OaK. Combined with two factor authentication (for which I use Authy) it makes me feel pretty safe :-)

[dualstow]

Authy looks good. Thanks, Jan! Worth starting this thread.

[Lonestar]

Not discontinued; no longer supported and no new versions.

I have been using DiskCryptor for the last several months even though TrueCrypt is probably still safe [there was talk of vulnerability, but that seems to have gone away]. It is definitely lacking some of the advanced features of TrueCrypt, but is overall a reasonable free substitute for many people. If you have Windows Ultimate there is a built-in encryption program.

In this case what does "no longer supported" really mean.  If one is just using the basic file encryption of TrueCrypt is this going to mean that it will be more vulnerable in the future?  TC really meets my needs.

[Xan]

The folks behind TrueCrypt one day out of the blue basically said "we're finished, and everyone should quit using our stuff".  Whether that's a result of fundamental flaws in their product, or some three-letter-agency's interference, fatigue, was and is unknown.  Very weird deal.

The community seems to be coalescing around https://truecrypt.ch/, where a fork of TrueCrypt might be maintained in the future.

Here are some articles and discussion on TrueCrypt:
http://it.slashdot.org/story/14/05/28/2 ... -bitlocker
http://it.slashdot.org/story/14/06/10/1 ... -truecrypt
http://it.slashdot.org/story/14/06/19/1 ... impossible

[Libertarian666]

The folks behind TrueCrypt one day out of the blue basically said "we're finished, and everyone should quit using our stuff".  Whether that's a result of fundamental flaws in their product, or some three-letter-agency's interference, fatigue, was and is unknown.  Very weird deal.

The community seems to be coalescing around https://truecrypt.ch/, where a fork of TrueCrypt might be maintained in the future.

Here are some articles and discussion on TrueCrypt:
http://it.slashdot.org/story/14/05/28/2 ... -bitlocker
http://it.slashdot.org/story/14/06/10/1 ... -truecrypt
http://it.slashdot.org/story/14/06/19/1 ... impossible

Interesting discussion at the first link. I especially like the "Office Space" reference to PMITA federal prison. 

[dualstow]

When I first saw the news of the "discontinuation", or whatever you want to call it. I borrowed the term from wikipedia -- my first thought was fatigue as a result of harassment. Interesting, Xan.

Naive question for Jan- If you and Xan form a company, will it be called Xan-Jan?

No, my question is, what happens if someone tries to delete the Auth app? I guess there's 2fa for that, too, right?

[dualstow]

hmm, my only cell # at the moment is a google voice #. It worked for authenticating Authy itself, but I could run into trouble using it for any of google's products for obvious reasons. 

[Jan Van]

Y

No, my question is, what happens if someone tries to delete the Auth app? I guess there's 2fa for that, too, right?

Do you mean, delete from your phone? It does keep a backup in the cloud you could then retrieve after reinstalling.
Same problem would happen with Google Authenticator though, no backups for that though...

[dualstow]

Thanks, Jan. Now that I think about it, it's a silly question. If someone steals the phone, they don't need to delete Authy. :-)

[dualstow]

Old thread resumed here.

Has anyone used this? - https://encipher.it/

[LazyInvestor]

VeraCrypt is continued development of TrueCrypt with lots of fixes https://veracrypt.codeplex.com/

[dualstow]

Thanks!