There's an open-source successor to TrueCrypt called VeraCrypt. For that matter, as far as I know, one can still download the last version of TrueCrypt. It hasn't been disappeared.

It's true that the TrueCrypt developers retired and said that commercial packages like BitLocker were finally good enough and available enough that they didn't feel compelled to maintain TrueCrypt. I remember that. I think it's plausible that Microsoft has (or has provided to someone) back-door access to BitLocker, but I don't remember any hint that the TrueCrypt developers had been coerced; have you got something you can link to?

Only thing I find annoying with full volume LUKS encryption is that it makes it difficult to resize partitions, it's a whole thing, but it's a minor hassle and not something I'd do every day anyway.

And they tell us to worry about China. :)

What's unfortunate is a significant number of people don't like hearing this and instead choose to project onto other countries. Most of our governments aren't our friends, regardless if you're American or not.

I was pumped to finally get decent Internet in the US, until I saw my ISP's router appears as a device on the LAN. Luckily I'm savvy enough to put the whole local network behind a firewall on a different subnet, since there's no other way of fixing this.

I remember the day I saw the "Intel! Inside" commercial and the logo, and I thought, I don't fucking trust this company.

Yeah no shit Intel inside, you've got every fucking three letter agency inside.

I knew it was over the day they introduced UEFI and TPM.

Isn’t this the blue hammer guy?

Kinda funny that they’re targeting Microsoft and yet using GitHub to share the PoCs.

This is the part I don't get either. Although - maybe it is because it protects other platforms from legal action by microSLOP? Also, it adds to the Streisand effect should microSLOP remove the proof of concept from its own platform.

ig "Proprietary software is often malware" is kinda not a exaggeration.

I'm left puzzed as to how this works ...like.. the data on the disk should be encrypted sector by sector...it takes forever to encrypt or decrypt a disk which is consistent with that understanding.

When you boot into PE, I don't understand how that OS can read anything off the disk, yellowkey or not, without knowing the encryption key..so how does it get that key. Is the vulnerability here that the key is stored in the TPM and win PE can be convinced to retrieve it without the proper credentials being provided ?

If that's the case, and the TPM can just provide the key on request...then... where is the security here ?

That is true. When people have saved them to their Microsoft account, then Microsoft has access to them.

Yeah, the NSA proved that when their exploits leaked. Eternal blue and I'm sure they have a much more stuff we can only guess at.

It really isn’t. The encryption itself still hasn’t been defeated. The implementation is the problem. Microsoft just can’t get out of their own way. If they ignored all the business majors, nobody would be able to stop them.

Okay, but what's the downside

Dunno... Somehow that seems like a feature to me 😉