True Goodbye: ‘Using True Crypt Is Not Secure’
Summary: The anonymous developers of the free whole-disk encryption suite TrueCrypt shuttered truecrypt.org this week, redirecting visitors to a SourceForge page warning that "Using TrueCrypt is not secure as it may contain unfixed security issues" and stating development ended in 5/2014 after Microsoft terminated support for Windows XP. A review of the site's hosting, WHOIS and DNS records showed no substantive recent changes, and the last version uploaded May 27 was signed with the same key used in January 2014, leading Johns Hopkins cryptographer Matthew Green to conclude the team itself quit.
Key Takeaway: Green, who helped raise more than $70,000 for a professional TrueCrypt audit and still holds $30,000 committed to finishing it, said the team "set the whole thing on fire" - leaving users to migrate to BitLocker while the license's murky terms may block any volunteer takeover of the code.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026