Hacker News Reader

TrueCrypt is software you download, it's not a cloud service that you have to implicitly trust to use. The source for TrueCrypt is viewable by anyone and it is being audited. What would the NSA gain by controlling software with public audited source other than esteem from the general community for helping us to secure our files.

View on HN

Many different entities use TrueCrypt to secure their files and if we assume that TrueCrypt has been compromised it would give NSA access to these files.

The code base is huge and introducing small bugs which they knew how to exploit can easily slip through from individual code review.

It's true that there is on going proper audit of the code, but it's a slow process and if the infiltration was done good while back they might have not been aware that audit was ever going to happen after all TrueCrypt is fairly old software.

It would not give the NSA access to those files because those encrypted files are probably stored on a computer they don't have access to. And seriously, if the NSA wanted access to something they probably can get it anyway. They don't need a truecrypt backdoor, they'll just install monitoring software and wait for you to open it.

Reply on news.ycombinator.com