for a repo of 7.1a (which apparently hasn't been touched for a year).

(Strange because having one branch with all the files alongside in zips is an unusual use of Github. It would be useful to unzip these files into a conventional git repo. I could do this, but…

Also on Slashdot.
Seems that the industry consensus is coalescing around two theories:
1) The site and/or project got pwned.
2) The project got served with a National Security Letter and went all Lavabit on the feds rather than complying.

Honestly, who knows!

Good discussion on ArsTechnica

I heard they were hacked and that message may be bogus.

If not, the source code is available, so I imagine others will take up development and patching.

Apart from any suspicion of closed source crypto, the built in encryption on Windows/OSX is awkward to use and doesn't have…

That's annoying. The problem is less that the USA can break both of those, as that the techniques they use might be accessible to others. There doesn't seem to be a similar cross-platform FOSS solution just yet but I'm…

__WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

This page exists only to help migrate existing data encrypted by TrueCrypt.…

No, but I'm in complete control of the organization of the virtual sectors within the system.

Aside from that, with your design, if there…

I beg to differ. It refers specifically to the fact that pages of the pad were burned after one use. Not put in the bin, or scribbled on, or copied out a…

It is generally accepted that it is sufficient to keep secret the fact that something is…

But how it's practical to encrypt a stash of documents is very questionable. You need a key as big as your document set – where are you going to keep it? If you bury a memory stick…

Yes. but for people whom you have met, it's a not unreasonable system these days, considering how compactly we can store a huge…

And also assuming Keith's assumptions....

In this case, that the Police can get a search warrant and seize your computers and your devices, and upon discovery of an encrypted hard drive, can compel you to give up the password. It’s a VERY…

The problem with OTPs is that their use requires an initial secure distribution channel, which really limits their use for communications between people who have never met. The intelligence services make use of diplomatic conventions and spycraft, but most…

Assuming that the government is interested in you, if you upload the file from your home network, they probably know exactly where you stored the file. If you upload it from an internet cafe using a laptop that you use…

See David Miranda.

...a file stored in an anonymous internet storage area, etc.

See Lavabit.

Did you never play hide and seek as a child?

The logic behind a search warrant, for example, is that it is much easier to find stuff once…

I don’t think it works like that. If it doesn’t get the password of the hidden volume, it doesn’t know…

Yes, but if it's…

No, but it's the least you can do. It's of no further use, and can only damage the security of the system.

A OTP has certain requirements one of which is that it must…

Which works until the adversary finds out that is how the OTP is generated and starts to record the same data and match the ciphertext against it.

Not really.

The scenario is that you've provided…

Pretty much what Michael said. Your biggest risks are from accidental loss/opportunistic theft. Encrypting your hard drive (especially on your laptop) and USB drives is something you should definitely do.…

One of Clancy's novels (IIRC it's The Sum of All Fears) has an OTP system where the keying is based on transcription of atmospheric noise. Unless the SETI project has missed something, an OTP on that basis is…

Because eventually a journalist publishes an article. Once this happens the fact that there might be additional (unpublished) information…

Yeah, and as they are not "normal" cookies you cannot flush them like you do others. You can get rid of them, but its not an easy or intuitive thing to do.

A big issue for…

And this addresses Duane's concern from one of the opening comments. The outer truecrypt volume is…

I have a question.

What does all this mean for someone who:
(a) Is not a journalist or a journalist's source; but
(b) Has non-disclosure agreements with clients and wants to keep data secure, but is highly unlikely to…

The problem is that we have a Buckley's bill of rights that is free to be ignored…

If they hack your email password alone, then almost all of those other passwords can just be reset.

Why not? You can hide a memory stick somewhere, same as anyone else. Or put it "somewhere on the internet". You can have private conversations with people that do not involve electronic records.…

Fair enough – even the header information itself is encrypted and may not exist. Which does not mean you couldn’t be compelled to give that password and be in violation of law if the existence of the drive comes to light later.

One of several reasons governments of recent years have…

Me too – whenever I think of voting for them I remember the long list of things from Zaoui onwards they did when in office (and have largely not repudiated), and stick to the Greens.

What the cops do then is say that your actions are evidence that you were up to no good, probably something criminal, and therefore they should be able to confiscate all your stuff…

Keypass2 generates all my passwords, they are strings of random digits up to 20 characters or so in length.

I use keypass2 to autotype them when I need them – I couldn't reproduce any of them even if I wanted to.

My keypass2…

You're right. I was trying to illustrate the point of a straight-to-ram OS, but I overstated the safety of…

No. From http://www.truecrypt.org/docs/hidden-volume#Y0:

Even when the outer volume is mounted, it should be impossible to prove whether there is a hidden volume within it or not, **because free space…

This has all been aimed at journalists and their sources. For journalists, obscurity…

(Speculation:) I imagine that encrypted files are reasonably distinct, and that a forensic analysis tool should be able to find them, regardless of size.

But yeah,…

When it comes to that stage, your adversary probably already believes (rightly or wrongly) you have information of interest somewhere. Your options then are to convince them that they are wrong (ha!), produce…

Not really, not in the sense to which you were originally referring, safe from the future hacker who has processing power with any limit you care to name, and all of the data…

That's not an OTP. The OT being the part by which you can tell. When you use a segment of the OTP's key, you…

well hand me that one time pad .... it's just a really big key .... BTW the music industry already runs a world wide OTP distribution system – let's both buy the same CD and use the LSBs of the waveforms