Full Disclosure mailing list archives
Re: Full disk encryption for OS X alternative to TrueCrypt
From: Mateusz Lenik <mlen () mlen pl>
Date: Fri, 30 May 2014 10:58:07 +0200
On Thu, May 29, 2014 at 02:45:12PM -0700, CIURANA EUGENE (pr3d4t0r - Full Disclosure) wrote:
FileVault is suspect -- we have no guarantee, one way or another, that Apple doesn't have some kind of back door into it. That's why I believe we need an alternative for OS X users who rely on TrueCrypt and want better security than what is provided by Apple. Note: I love Apple products, but given Prism and other disclosures, I don't trust their software to be safe. That's why OTR, TrueCrypt, and GPG/PGP are in my arsenal for secure storage and communications.
When you don't trust FileVault, because Apple may have put a backdoor in, then you shouldn't trust the whole platform, as Apple may have put another backdoor that allows remote access to your machine. There is Back to My Mac, that allows you to connect to your machine from everywhere. What's the guarantee that some three letter agencies won't use it, or something else we're not aware of, to access your machine behind you back? If they can access your machine, then no encryption whatsoever will solve the problem, as GPG, OTR and disk encryption keys are stored unencrypted in memory when you use them. Cheers! mlen
Attachment:
_bin
Description:
_______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- Full disk encryption for OS X alternative to TrueCrypt CIURANA EUGENE (pr3d4t0r - Full Disclosure) (May 29)
- Message not available
- Re: Full disk encryption for OS X alternative to TrueCrypt CIURANA EUGENE (pr3d4t0r - Full Disclosure) (May 29)
- Re: Full disk encryption for OS X alternative to TrueCrypt Mateusz Lenik (May 30)
- Re: Full disk encryption for OS X alternative to TrueCrypt CIURANA EUGENE (pr3d4t0r - Full Disclosure) (May 29)
- Message not available
- Re: Full disk encryption for OS X alternative to TrueCrypt Mike Cramer (May 29)
- Re: Full disk encryption for OS X alternative to TrueCrypt CIURANA EUGENE (pr3d4t0r - Full Disclosure) (May 29)
- Re: Full disk encryption for OS X alternative to TrueCrypt James Lay (May 29)
- Re: Full disk encryption for OS X alternative to TrueCrypt Jeffrey Walton (May 30)
- Message not available
- Re: Full disk encryption for OS X alternative to TrueCrypt CIURANA EUGENE (pr3d4t0r - Full Disclosure) (May 29)