TrueCrypt is over ?

[Puppy]

http://arstechnica.com/security/2014/05 ... tly-warns/
http://krebsonsecurity.com/2014/05/true ... ot-secure/

[loyukfai]

In terms of development, it seems so.

Interesting that nobody (publicly speaking) seems to know who the developers are/were.

Cheers.

[Temetka]

I am surprised a lot people didn't see this coming. With built-in encryption, most users don't need 3rd party tools.

Sure the paranoid minded amongst us might, but joe the plumber will not.

[alfreddot440p]

Maybe someone will continue from a safe haven : www.truecrypt.ch

alfreddo

[jdrou]

I am surprised a lot people didn't see this coming. With built-in encryption, most users don't need 3rd party tools.

Sure the paranoid minded amongst us might, but joe the plumber will not.

Some major advantages TrueCrypt has over standard Windows tools:
cross-platform (you can read an encrypted volume from any OS that can read the filesystem)
EDIT: this includes ability to work on all versions of Windows, not just Pro/Enterprise/Ultimate editions
open-source (many people feel this is important)
potential for "plausible deniability" (can't prove that there is an encrypted volume; lots of caveats on this though)

So yes for most people it's not a huge problem but it would be unfortunate if no one continued development (starting with porting it to a more modern development environment).
[I've read a lot about this since the news broke.]

[Temetka]

Everything you just mention was targeted at users more advanced than your average citizen on the 'Net. Which is the group that I was referring to. The average facebooking mom has no use for encryption.

I always boil everything down to my Joe the Plumber argument. Lowest common denominator. What does Joe want.

Joe wants to view facebook. Joe wants to google things. Joe just wants things to work.

Joe does not need encryption to do social media, or google hot girls in his/her area.

A corporate manager might need encryption on his laptop. In which case IT will have a centralized solution in place, probably issue smart cards as well and it will be mostly transparent to Joe the Manager.

99% of the people on the Internet do not need local encryption. Period.

[jdrou]

Yes but you said

I am surprised a lot people didn't see this coming. With built-in encryption, most users don't need 3rd party tools.

Combined with your last comment about companies using centralized solutions it doesn't sound like anything has changed that would cause TrueCrypt to become any less relevant in the 10+ years it's been developed. Most people didn't "need" encryption then either and the built-in tools (when available) can't replace TrueCrypt. So I don't see why anyone would see this coming. I have the impression that the devs just lost interest in continuing.