Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.comp.freeware > #244605

Re: Newly found TrueCrypt flaw allows full system compromise

From Shadow <Sh@dow.br>
Newsgroups alt.comp.freeware
Subject Re: Newly found TrueCrypt flaw allows full system compromise
Date 2015-10-04 10:59 -0300
Organization A noiseless patient Shadow
Message-ID <cpb21btqd8mf87srcbf04e4v56kpvqqncl@4ax.com> (permalink)
References <mum4cu$r7l$1@news.mixmin.net> <32211btrna4ek9srvt752j5nvom49q80lk@4ax.com>

Show all headers | View raw


On Sat, 03 Oct 2015 21:01:35 -0500, cal@invalid.com wrote:

>On Fri, 02 Oct 2015 09:29:52 -0500, "The Sorceress of Qar"
><sorceress@qar.qanar.com> wrote:
>More on the subject is here:
>
>https://duckduckgo.com/?q=TrueCrypt+flaw

//TrueCrypt vulnerabilities would not directly allow an attacker to
decrypt drive data. Instead, successful exploitation allows malware
installation on the victim’s machine, which would be enough to figure
out TrueCrypt’s Decryption Key and other sensitive data.//

	Wow, sounds really serious. You mean if I have a keylogger on
the PC (put there by any one of hundreds of available exploits) it can
discover my passwords ?
	Notice the sites advising ou to switch to the M$ encryptor
(either the commercial BitLocker or the "open-source" VeraCrypt.)
	There is NO way TrueCrypt can be exploited on an isolated
(local) computer. If it's on the net, well ....... I'm sure the latest
browser exploit would allow that.
	[]'s
-- 
Don't be evil - Google 2004
We have a new policy  - Google 2012

Back to alt.comp.freeware | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Newly found TrueCrypt flaw allows full system compromise "The Sorceress of Qar" <sorceress@qar.qanar.com> - 2015-10-02 09:29 -0500
  Re: Newly found TrueCrypt flaw allows full system compromise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2015-10-02 22:32 +0800
  Re: Newly found TrueCrypt flaw allows full system compromise Shadow <Sh@dow.br> - 2015-10-02 11:59 -0300
    Re: Newly found TrueCrypt flaw allows full system compromise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2015-10-02 23:07 +0800
      Re: Newly found TrueCrypt flaw allows full system compromise Shadow <Sh@dow.br> - 2015-10-02 12:34 -0300
        Re: Newly found TrueCrypt flaw allows full system compromise none <none@none.invalid> - 2015-10-02 09:44 -0700
          Re: Newly found TrueCrypt flaw allows full system compromise Shadow <Sh@dow.br> - 2015-10-02 14:20 -0300
            Re: Newly found TrueCrypt flaw allows full system compromise none <none@none.invalid> - 2015-10-02 12:44 -0700
            Re: Newly found TrueCrypt flaw allows full system compromise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2015-10-03 14:49 +0800
    Re: Newly found TrueCrypt flaw allows full system compromise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2015-10-02 23:08 +0800
  Re: Newly found TrueCrypt flaw allows full system compromise cal@invalid.com - 2015-10-03 21:01 -0500
    Re: Newly found TrueCrypt flaw allows full system compromise Shadow <Sh@dow.br> - 2015-10-04 10:59 -0300
      Re: Newly found TrueCrypt flaw allows full system compromise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2015-10-04 23:31 +0800

csiph-web