EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

10.18.13

Truecrypt Cannot be Audited Because It’s Proprietary Software

Posted in Free/Libre Software, Security at 8:37 am by Dr. Roy Schestowitz

Truecrypt

Summary: Why nobody should trust Truecrypt (or any other piece of proprietary software for that matter), even if it claims to have been “audited”

THE other day we alluded to Truecrypt in this post, not quite mentioning the holes in the argument that Truecrypt can be “audited” [1-3]. Unless everyone can view the code and compile it independently (or rely on others to do so independently), we must assume that Truecrypt is not secure and that it might contain back doors (either unidentified or deliberately planted). This whole Internet ‘debate’ about Truecrypt “audit” should remind us that Free software is vital for dodging surveillance.

The NSA has used corporations to facilitate snooping and it may not be alone [4]. This is happening at many levels [5-7] based on new leaks and revelations, so rather than look for evidence of insecurity (e.g. back door) we should pursue real assurance of security. You know what the spies like to tell us: if you have nothing to fear, you have nothing to hide, right? So come on, Truecrypt, share your source code. What have you got to hide?

Related/contextual items from the news:

  1. Should Truecrypt be audited?

    Truecrypt is a cross-platform, free disk encryption software for Windows and Unix-like operating systems. It is generally considered a good disk encryption software, and not too long ago, I wrote a tutorial that showed how to encrypt the Windows installation of a Windows-Linux dual-boot setup (see Dual-boot Fedora 18 and Windows 7, with full disk encryption configured on both OSs).

  2. New effort to fully audit TrueCrypt raises $16,000+ in a few short weeks
  3. Can you trust ‘NSA-proof’ TrueCrypt? Cough up some dough and find out

    The source code for the Windows, Linux and Mac OS X utility is publicly available for people to inspect and verify, but this has not been enough to convince every cryptography guru that it’s entirely secure.

  4. After Snowden’s leaks, China’s Huawei calls for more transparency in the tech industry

    With all of the recent revelations about the US National Security Agency’s surveillance programs, it must be hard for the Chinese telecom equipment manufacturer Huawei not to gloat a little bit.

    After all, the leaks from former contractor Edward Snowden showed that the NSA enlisted US technology companies to enable its snooping on global telecommunications networks—which is exactly what US intelligence officials have accused Huawei of doing on behalf of the Chinese government.

  5. Europe Moves to Shield Citizens’ Data

    Lawmakers here have introduced a measure in the European Parliament that could require American companies like Google and Yahoo to seek clearance from European officials before complying with United States warrants seeking private data.

  6. Dutch Telcos Used Customer Metadata, Retained To Fight Terrorism, For Everyday Marketing Purposes

    One of the ironies of European outrage over the global surveillance conducted by the NSA and GCHQ is that in the EU, communications metadata must be kept by law anyway, although not many people there realize it.

  7. NSA Harvesting Contact Lists

    A new Snowden document shows that the NSA is harvesting contact lists — e-mail address books, IM buddy lists, etc. — from Google, Yahoo, Microsoft, Facebook, and others.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Short Report From Today's EPO Protest in Munich

    A few noteworthy points about the staff protest which coincided with the Administrative Council's meeting earlier today in Munich



  2. Growing Consensus Even Among Patent Professionals That UPC is Dying Everywhere If Not Just in the UK

    The UPC continues to sink as more and more people come to grips with the complexity of the current situation, irrespective of what countries other than the UK do next



  3. Battistelli Attacks Not Only His Staff But Also Patents Themselves (Their Quality) and the Legal Legitimacy Surrounding the EPO

    Battistelli's EPO is having not only reputation problems but also staff retention problems, patent quality problems and problems pertaining to perception of fair trials or justice regarding patents



  4. Battistelli is Creating an Atmosphere of Terror at the EPO While Exploiting Terror Attacks to Garner Sympathy

    "As if Laurent were a terrorist, the Office has imposed a house arrest and has forbidden him to enter the EPO premises," according to SUEPO, writing about one of its members at The Hague who is "maliciously accused via a fabricated procedure"



  5. Rumours That EPO President Battistelli Got Sacked to be Replaced by Christoph Ernst Appear to be Baseless

    Dr. Christoph Ernst is claimed to be the successor (interim or permanent) of the notorious Battistelli, but these claims have little or no evidence to support them



  6. Links 29/6/2016: SteamOS 2.83 Beta, Alpine Linux 3.4.1

    Links for the day



  7. The EPO Has Become Battistelli's Circus and the Administrative Council Has Been Reduced to (Illegal) Circus Animals Controlled With 'Treats'

    Battistelli's attack on justice and on the rule of law is debated among insiders who have grown increasingly impatient with the Administrative Council's tolerance of Battistelli and sometimes even Kongstad's amazing complicity



  8. The Latest Lies About the Unitary Patent (UPC) Would Have Us Believe That It's Alive and Well

    How patents-centric sites (some of which are in bed with the EPO) have responded to the 'Brexit' vote and why they're not telling us the truth about the Unitary Patent scam (often created and promoted by the same people who run and/or fund such sites)



  9. EPO Management Bunker: “The Bailiff Who Came to Deliver the Subpoena was Escorted off the Property by Five Security Guards.”

    Battistelli has essentially turned the European Patent Office (EPO) into a barracks, where he continues to enjoy immunity from the rule of law and discourages those who wish to challenge this immunity



  10. Keeping the Guard and Securing Society From Software Patents

    The policies over which Indians and Europeans have kept guard are being 'stolen' by vested interests



  11. Benoît Battistelli Further Weaponises His EPO 'Stasi' With CA/52/16

    A glimpse at what Benoît Battistelli will shortly attempt to do to the EPO, in order to cement his power in the face of growing opposition from many directions



  12. EPO Caricature: Administrative Council Control of Benoît Battistelli

    Another new caricature regarding the President of the European Patent Office (EPO) and lack of effective oversight from the Administrative Council (European Patent Organisation)



  13. EPO Caricature: Firing Benoît Battistelli

    The latest caricature regarding the President of the European Patent Office (EPO)



  14. Links 28/6/2016: Red Hat Summit 2016, Hadoop Events

    Links for the day



  15. Today's Media Coverage Says Microsoft Loves Linux, But Today Microsoft Extorted Linux Using Software Patents Again

    Luna Mobile has just been extorted by Microsoft (using dubious software patents, as usual) for using Android/Linux, but Microsoft-influenced media carries on spreading the lie that "Microsoft loves Linux"



  16. New Efforts to Work Around Barriers to UPC in Light of 'Brexit'; Behind These Efforts Are Self-Serving Patent Profiteers

    look at who's trying to work around the latest barriers to the widely-unwanted (by the public) Unitary Patent regime and what is being planned behind the scenes, or behind closed doors (by and for those who stand to profit from the Unitary Patent regime)



  17. Injunction Against Battistelli's Investigative Unit (Known Internally as 'Gestapo') Amid Serious Injustices and Bogus 'Trials'

    SUEPO, the EPO's staff union, steps up its spiel in a case against the "European Patent Organization" as defendant and "SUEPO/VEOB" (Trade Union of the European Patent Office) as claimants



  18. [ES] Con la UPC Muerta por el Resto del Termino de Battistelli, No Hay Razón para que la EPO o el Consejo Administrativo Sigan Manteniéndolo Más

    Pensamientos acerca de lo que pasará al líderazgo de la EPO después de ‘Brexit’ (salida Británica de la EU), lo que sevéramente socava el proyecto más grande de Battistelli el que usaba habituálmente para justificar sus increíbles abusos



  19. [ES] El Caradura Benoît Battistelli Debería Renunciar a Luz de la Filtrada Nueva Decisión en Su Vendeta en Contra de un Juez que se Atrevió a Decir la Verdad (Actualizado)

    Benoît Battistelli continúa quebrando las propias reglas de la EPO, no sólo las leyes naciónales, como una nueva decisión ayuda a revelar



  20. [ES] Cada Vez Más Parece Que Battistelli está Escondiéndo ‘Evidencia’ Falsa y/o Ilegalmente Obtenda de la Unidad Investigativa de la EPO

    El porqué creemos que Benoît Battistelli está cada vez mas desesperado de esconder operaciónes ilícitas de reunir ´evidencia´ lo que eventuálment lo puso a él mismo — no al acusado — en una situación catastrófica situacion que lo puede forzar (esperamos) a us renuncia



  21. Links 28/6/2016: Vista 10 Updategate, OpenMandriva 3.0 Beta 2

    Links for the day



  22. Links 27/6/2016: Linux 4.7 RC 5, OpenMandriva Lx 3.0 Beta 2

    Links for the day



  23. From Alleged Organised Crime to Vice-President of the European Patent Office (EPO)

    Željko Topić's situation in Croatia illuminated by means of recent documents from the authorities



  24. Battistelli May Still be on the Way Out as Pressure Grows in Germany, UPC in Shambles

    Pressure on Battistelli is growing even from within circles that are traditionally protective of him and a long letter is sent to Dr. Christoph Ernst, who some believe will replace Battistelli



  25. Caricature: European Patent Office (EPO) Under Battistelli

    The latest caricature about the state of the European Patent Office (EPO)



  26. Techrights (Almost) at 10: From Software Patents to Novell and to Present Focus on EPO

    A short story about how and why we ended up writing so much about the European Patent Office (EPO) and the impact beyond Europe



  27. Patents Roundup: Bad Quality (USPTO), Bad Analysis (India), Bad Microsoft, Bad Actors (Trolls), Bad Scope (Software Patents), and the Ugly

    A mishmash of news about patents, mostly regarding the United States, and what can be deduced at the moment



  28. Links 26/6/2016: IceCat 38.8.0, Wine 1.9.13

    Links for the day



  29. With UPC Dead for Battistelli's Entire Remaining Term, No Reason for the EPO or the Administrative Council to Keep Battistelli Around

    Thoughts about what happens to the EPO's leadership after 'Brexit' (British exit from the EU), which severely undermines Battistelli's biggest project that he habitually used to justify his incredible abuses



  30. Links 24/6/2016: Xen Project 4.7, Cinnamon 3.0.6

    Links for the day


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts