Full Disclosure mailing list archives

Re: Who still trust filevault? Finally TrueCrypt for Mac OS X!


From: "Joey Mengele" <joey.mengele () hushmail com>
Date: Tue, 09 Oct 2007 17:48:27 -0400


LOLOLOLOL MACOSX KERNEL IS AS INSECURE AS LINUX WITH 
SUCKIT,GRSEC,ADORE, ETC. INSTALLED. IF YOU WANT REAL CRYPTO AND 
SECURITY USE NSA LINUX OR WINDOWS.

J

On Tue, 09 Oct 2007 17:20:00 -0400 Fabio Pietrosanti 
<lists () infosecurity ch> wrote:
Dear guys,

****************************************************************
We are looking for funding for the porting, in full opensource, of
Truecrypt encrypted volume software to Mac OS X operating system.
                     http://www.osxcrypt.org
                       Now read the story.
****************************************************************

all of you own a fucking good macbook machine to do all your 
hacking
stuff, when you started using Mac OS X you implicitly decided to 
lower
your privacy strenght in terms of your personal data protection.

Why?

Because you started trusting the very usable and easy to use 
filevault
user home directory. One password and that's all. It's encrypted.

Still, in whatever best practice you feel your privacy protection 
(and
paranoia) religion oriented, the user logon password to your 
computer
and the password required to unlock your private data is 
different.

Oh, yes yes, with filevault you can create yourself other DMG AES
encrypted image. But what? But are all fucking stuff somehow 
integrated
in your keychain tool.
So you start trusting your keychain tool.

And now?

If someone compromises your keychain tool you are fucked up!

Not only this! Remember that in fancy countries like england you 
are, by
law, now required to surrender your password or face up to five 
years of
jail [1] .

Must i remember you that the only effective tool that by now 
handle
hidden volumes is TrueCrypt [2] ?


So, truecrypt it's a fantastic opensource tool that work on 
windows and
linux platform and manage encrypted volumes with very advanced
functionalities.

One of those functionality is the "hidden volumes". Hidden volumes 
and
volumes hidden insider other encrypted volume.
Those hidden volumes can contain whatever your prefer (porn, mp3, 
divx,
fake hacklog, your family photo, etc).

When some bad guy comes to you, armed with his authority enforced 
by law
or by a gun on your head like a russian roulette game, and ask for 
your
password what do you do?

Do you provide him the super secret archive volumes password that
contains the proof of kennedy 's murdering and THAT fake warner 
bros
lunar landing film
OR
you would prefer to give them a password, save your ass, and give 
them
full access to all your very selected collection of japanese scat 
porn
hentai videos ?

Sincerly, i would prefer the second one, i mean, saving my ass, 
not the
japanase scat porn hentai videos (well but it depends on the 
cartoons...).

So, how all the fucking hackers that are now using this fancy unix
operating system named Mac OS X, can get a chance of getting in 
this
wonderful realm of ass-saviors?

To achieve this we need someone who develop the porting of 
Truecrypt to
Mac OS X.

We found the guy, a good guy that came from the ReactOS 
environment of
strong windows ninja coders, that would be able to provide his 
effort to
achieve our goal.

Getting truecrypt to work on Mac OS X .

We tried very hard to move that stoney Easter island faces of the
truecrypt project leaders, even alluding to some sort of bribery.

But no, nothing to do. They preferred to stand still to look the 
ocean!

So, now, we, the hackers community need to react (OS?) !

We are looking for funding for the porting, in full opensource, of
Truecrypt encrypted volume software to Mac OS X operating system.

We will fork the original project, we break the rule!

We need to collect 1.500 USD to have our voluntary very expert 
coder to
the job and make the porting (along with the Mac OS X Truecrypt
community website and project, mailing lists and stuff).

Please donate something in order to get the new truecrypt for Mac 
OS X
to your really protect your mac machine.

The funding website is at http://www.osxcrypt.org .
When funding will be completed we will move the website with all 
the
sources, updates on the porting, the wiki page.

[1] http://blogs.techrepublic.com.com/tech-news/?p=1281
and
http://arstechnica.com/news.ars/post/20071001-uk-can-now-demand-
data-decryption-on-penalty-of-jail-time.html

[2] http://www.truecrypt.org

--
Save hundreds on a Study Abroad Program - Click here.
http://tagline.hushmail.com/fc/Ioyw6h4dFGAO6MIRmh3944vv9YGVP4QoLJpL9KFIE1T33ENTcvA82k/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: