Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #3736

Re: Truecrypt infiltrated by NSA, as suspected

Cross-posted to 2 groups.

Show key headers only | View raw

On 18/06/2014 6:24 AM, VanguardLH wrote:
> Sylvia Else wrote:
>
>> On 17/06/2014 9:13 PM, RS Wood wrote:
>>> Interesting post on SoylentNews today.  There were rumors and suspicion
>>> the project was so hastily abandoned because developers realized they
>>> had been infiltrated by the NSA.  Now it looks like that was true:
>>>
>>> http://soylentnews.org/article.pl?sid=14/06/17/0511216
>>>
>>> TrueCrypt Site Encodes Warning about NSA Infiltration
>>>    posted by  LaminatorX on Tuesday June 17, @10:30AM
>>> from the Paging-Dan-Brown dept.
>>>
>>> Jeremiah Cornelius writes:
>>>
>>> In an update to the speculation that TrueCrypt development was
>>> officially discontinued as a response to efforts by US intelligence
>>> agencies to compromise the project, the TrueCrypt web site seems to
>>> contain a secret message warning potential users of NSA interference in
>>> the integrity of the software. The apparent message, "Don't use
>>> TrueCrypt because it is under the control of the NSA" is read as an
>>> acrostic in Latin, contained in the message announcing developer
>>> cessation of the project on SouceForge. Two independent analytical
>>> exercises, conducted independently, arrive at the same conclusion. User
>>> "Badon" at the Live Business Chat message board has a detailed exegesis
>>> including screenshots and footnotes.
>>>
>>> [EDITOR'S NOTE: I have cross checked this on some Latin specific sites,
>>> and the consensus seems to be that it is nonsensical from a perspective
>>> of proper Latin grammar and syntax. However, Google Translation does
>>> reproduce these results. I can certainly believe that a warning might
>>> have been composed using G.T. rather than by consulting a classicist.
>>> --ED]
>>>
>>
>> While it would not surprise me if the NSA were to try to put backdoors
>> into Truecrypt, I can't see why those in control of the project wouldn't
>> just come right out and say it, together with whatever evidence they have.
>>
>> It's not as if it could be covered by a security letter.
>
> If they get a secret subpoena (your reference to a "[national] security
> letter")from the FBI, administered by the Dept of Justice, yes, they are
> barred by a gag order to not say ANYTHING about the subpoena, its scope,
> its demands, or any of its effects.

But it's a subpoena, not a court order. It can only seek information, 
and indeed, there's a significant limit on the information that can be 
sought. The gag order relates to subpoena, and prevents the recipient 
from disclosing its existence, or content, but it does not, and cannot, 
impose a wider restriction the recipient.

In particular, it could not require someone to refrain from revealing 
that some party, government, or otherwise, had compromised Truecrypt.
>
> You might want to see what happened to Lavabit after getting served a
> secret subpoena (e.g., en.wikipedia.org/wiki/Lavabit).  Read
> http://threatpost.com/of-truecrypt-and-warrant-canaries/106355 on how
> Apple applied a warrant canary.

Yes, but that was a different situation entirely.

Sylvia.

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Truecrypt infiltrated by NSA, as suspected RS Wood <rsw@therandymon.com> - 2014-06-17 11:13 +0000
  Re: Truecrypt infiltrated by NSA, as suspected Sylvia Else <sylvia@not.at.this.address> - 2014-06-17 23:09 +1000
    Re: Truecrypt infiltrated by NSA, as suspected Shadow <Sh@dow.br> - 2014-06-17 11:13 -0300
      Re: Truecrypt infiltrated by NSA, as suspected Sylvia Else <sylvia@not.at.this.address> - 2014-06-18 11:07 +1000
    Re: Truecrypt infiltrated by NSA, as suspected VanguardLH <V@nguard.LH> - 2014-06-17 15:24 -0500
      Re: Truecrypt infiltrated by NSA, as suspected Sylvia Else <sylvia@not.at.this.address> - 2014-06-18 14:19 +1000
        Re: Truecrypt infiltrated by NSA, as suspected VanguardLH <V@nguard.LH> - 2014-06-18 01:25 -0500
          Re: Truecrypt infiltrated by NSA, as suspected Sylvia Else <sylvia@not.at.this.address> - 2014-06-18 16:40 +1000
    Re: Truecrypt infiltrated by NSA, as suspected Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-06-17 13:59 -0700
    Re: Truecrypt infiltrated by NSA, as suspected Mark Harvard <mark.harvard.909we3@gmail-.com> - 2014-06-17 14:03 -0700
      Re: Truecrypt infiltrated by NSA, as suspected Sylvia Else <sylvia@not.at.this.address> - 2014-06-18 14:28 +1000
  Re: Truecrypt infiltrated by NSA, as suspected Anonymous <anonymous@foto.nl1.torservers.net> - 2014-06-17 13:15 -0400
  Re: Truecrypt infiltrated by NSA, as suspected VanguardLH <V@nguard.LH> - 2014-06-17 15:50 -0500
    Re: Truecrypt infiltrated by NSA, as suspected Marko Rauhamaa <marko@pacujo.net> - 2014-06-18 00:22 +0300
  Re: Truecrypt infiltrated by NSA, as suspected Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-06-17 14:01 -0700
  Re: Truecrypt infiltrated by NSA, as suspected scott@alfter.diespammersdie.us (Scott Alfter) - 2014-06-17 21:38 +0000
    Re: Truecrypt infiltrated by NSA, as suspected RS Wood <rsw@therandymon.com> - 2014-06-17 21:50 +0000
  Re: Truecrypt infiltrated by NSA, as suspected "tdk" <forum.tdk@squte.com> - 2014-06-18 10:52 -0500

csiph-web