Slashdot Mirror
TrueCrypt Gets a New Life, New Name
storagedude writes: Amid ongoing security concerns, the popular open source encryption program TrueCrypt may have found new life under a new name. Under the terms of the TrueCrypt license — which was a homemade open source license written by the authors themselves rather than a standard one — a forking of the code is allowed if references to TrueCrypt are removed from the code and the resulting application is not called TrueCrypt. Thus, CipherShed will be released under a standard open source license, with long-term ambitions to become a completely new product.
Suddenly I think of banjos.
Here's hoping the audit is a success.
allow a fork to be released under a standard open source license?
Because I can take software with a standard open source license and put TrueCrypt's name back into it.
Not that I intend to do so, but it just seems off, somehow.
If you think I voted for Trump because of this post, you're wrong. I voted for Dr. Jill Stein of the Green Party. Again.
you mean like the place where cliche pedos rape kids in the movies? nothing good has ever happened in a shed.
Just curious. Is there some kind of unwritten rule that FOSS project names have to as crappy as possible? Is it just a translation thing, where maybe the name makes more sense or sounds better in the dev's native tongue? Has anyone been part of a FOSS project and was involved in the naming of it?
CipherShed, because the roof is made of straw and the foundation made of sand (gotcha!)
They don't use a terrible unfree (as in the actual definition) license like GPL.
How long before they get a FISA or PRISM notice?
Wonder if they will have a "Warrant Canary" posting.
They're obviously using my HorribleNameGenerator library. I'm proud to have contributed to so many FOSS projects.
Nothing inspires more confidence in a complex cryptographic system than a name like "CipherShed.'
Is the geek born with this impulse to shoot himself in the foot?
The name needs an improvement so I suggest C!pherShedz
They've already screwed the pooch.
They've published the source archive under the original TrueCrypt license. As a result, unless there's a legal entity (person or company) to which all contributors make an assignment of rights, or they keep the commit rights down to a "select group" that has agreed already to relicense the code, they will not be able to later release the code under an alternate license, since all contributions will be derivative works and subject to the TrueCrypt license (as the TrueCrypt license still in the source tree makes clear).
The way you do these things is: sanitize, relicense, THEN announce. Anyone who wants to contribute as a result of the announcement can't, without addressing the relicensing issue without having already picked a new license.
Like libreoffice and the other libre crap.
Veracrypt seems to be similar inconcept but has made several releases so far and added some fixes from the code audit. This one OTOH has yet to release a version. It'd be good to have someone emerge the "generally recognized best" successor.
. VeraCipher taken?
Stupid name, first screenshot on OSX.
Meh.
This news seriously made my day (an no I don't care about the name). I have TrueCrypt running on all my machines and couldn't live without it. It gives me great piece of mind should a computer be stolen or lost. TrueCrypt was a breathe to install and use and, while I have not looked into the code, is vastly superior to having no encryption at all or using a commercial product which is almost certainly back-doored. I hope this project gets off the ground.
Is really writing the code?
"If any question why we died, Tell them because our fathers lied."
They hope to rewrite and replace code until they have something new they can release under a standard OSI-approved license.
LAME was developed in the same way, by replacing pieces of the ISO's reference MP3 encoder until it was finished in May 2000. Is there a better name for this "ship of Theseus" method?
Is this actually popular or is this a Slashdot obsession?
Crappy ones: GIMP, Tahoe-LAFS, Ubuntu, Kdenlive, XFCE...
As a user of Xubuntu who brings out the GIMP at least twice a week, I'm interested in how you'd name them better.
For the sake of keeping these tools out of the greedy hands of corporations, I'd almost be okay with using GPL for this project. It's not a cool license for developers, but I'd almost consider the value for end-users more important in this case. Locking this technology up behind a paywall won't do anyone any good.
CipherShed indeed.
I am very small, utmostly microscopic.
Where has he shed?
Gartner says we should keep using it even though the makers said it was compromised and we should walk away from it.
It's reasons like that that I do not trust, nor recommend the Gartner Group for anything.
I like the doxbox project - it works with linux crypto containers as well. Its a fork of freeotfe that was always better than truecrypt because its easier to use and has a license that encourages people to contribute.
Their site says "proudly powered by wordpress". Err, "security", "wordpress", isn't that mutually exclusive?
no, I don't have a sig
This is great news and honestly, its the best news I've had today.
Although I suppose even Slartibartfast is better than DiskScramblr.
Microcrypt or Prismcrypt or NSAcrypt. Once truecrypt went bellyup who knows whats hidden deep in the code.
FalseCrypt!
Surely this should be LibreCrypt?
Who's going to enforce the license the code is under? The project was abandoned by its anonymous authors so why is it not a free for all?
It's not as if their excellent communication skills or competitiveness with professional programs has anything to do with it. They even got a reference in a Tarantino movie which I am sure was to honor their excellent contact with the graphics design professionals.
I was promised a flying car. Where is my flying car?
But then he sold one.
CryptKeeper, owned by HBO?
Blue because we are sad truecrypt is gone/?
Well we only had one Beer story today, so I nominate BeerCrypt. Because we all love beer and crypto. It's a no brainer and the quicker you bring Cipher-Shed behind the wood shed the better. Let Mcafee have Endpoint and Microsoft have BitLocker. Nice catchy names to make the most hard assed CEO blush and gush. BeerCrypt. You know you want it.
You're a goddamn fool to believe any of your encryption actually works.
I'm posting AC because these wimpy ass mods don't want to hear the truth.
Why worry about squatters, if ironcrypt.org is taken just use ironcrypt.foo. My favorite open-source transparent crypto product uses doxbox.eu; doxbox.org is something else - who cares?
That's easy to pronounce, and since part of the intent of the encryption software is to present a disk with no evidence of there being an encrypted file, the 'invisibility' part may make sense to the nontechies.
I was going to suggest Data-B-Gone but that's probably trademarked by QVC :-)
https://app.box.com/WitthoftResume Code: https://github.com/cellocgw
Because less is more
Thanks for posting this. I am the maintainer of DoxBox. If you have any questions or want to flame me about the name, go ahead.
Moderated Usenet
There are two reasons for this fork to not getting any success:
1. TERRIBLE name.
2. There are 5 dudes and two of them are already "directors". One of them being "director of marketing", and marketing means sales. Dudes simply want to cash in on someone else's product.
I guess they dream about the success story of PGP Corp, but since I have no idea who they are and whether their product will be as secure as TrueCrypt, I am going to use the TrueCrypt 7.1a till it works, and then see for alternatives, with that CounterStrike not being one of them. Sorry, Cipe... Cipher Shed. Whatever.
OneCrypt. One = true zero = false.
How about TildeCrypt, a pun on until decrypt-ed, for those who have had to wait hours to decrypt hp notebook hard disks before installing a bios and utility partition update before re-encrypting.
Apparently any new code they write can co-exist with a different license. So they intend to slowly replace it all.
With what, code under a license that doesn't allow that? Yes, because then it's more free, isn't it? ...especially if you redefine "free" to mean whatever you want.
AFAICT, the only reason everyone believes TrueCrypt's license is so unacceptable is because it isn't GPL compatible. Meanwhile, it appears to be compatible with any other open source license, as the GPL is the only open source license that requires that the entire program be under a single license. This is why everyone says it's a viral license. You can't contribute BSD-licensed code to a GPL project, and you can't contribute GPL-licensed code to a BSD project, because in both cases the GPL requires that the entire project be GPL-licensed. The BSD license, on the other hand, would be just fine with dual licensing.
I can only guess that their plan here is to use a BSD license as a stepping stone until they remove all of the original TrueCrypt code, then they'll relicense it under the GPL. Which would be just fitting, as it seems a lot of GPL code comes from BSD code that is merely relicensed.
How ridiculous. You got the code, it's under an open source license, use your time to improve it rather than to rewrite it just to further promote that damn viral license. Just make your changes BSD licensed or anything other than GPL if you don't like TrueCrypt's license.
VeriKrypt would be a translation into mixed Latin & Greek.
I know it's not super original, but how about DarkVault?
Another catchy one that is easy to remember that most people could identify with would be "FortKnox"... a very secure environment for your valuables... Then again, maybe it is taken or trademarked or something.
or perhaps CipherIndexedArray?
I can't think of one for FBI. :)
Wayward, thanks for working on CipherShed.
I don't much care what you call it (as long as it's not NSFW), and I expect a lot of other folks don't care, either.
I actually like "shed," as it is a nice visual metaphor for the container-based encryption model of TrueCrypt. It's easy to imagine the phrase "container" dropping away from casual usage. "Yeah, I had all my files in a ciphershed, so whoever stole my laptop won't get anything."
The word "shed" is also amusingly modest, much like "pretty good privacy," so more credit for that. By contrast, "vault" sounds stuffy & self-important, which might be good for corporate adoption.
CipherSecureInformationSystem
and
CryptSecureEasyCipher
Stream of consciousness naming.
CryptTrue->
CryptTwo->
CryptToo->
CryptYou
Basically, nothing with sheds(or other outhouse-like names), something with Crypt in it.
Is that the NSA I smell?