TrueCrypt is Officially Dead!

[fairm010]

Would you mind sharing more about that? Could you share the script you use? Looks great.

[MordyT]

I want your script too. Extra points if it is usable for MDT as post install process.

 

We have all pro licenses so no bitlocker for me.

[Arthur]

Sources: www.grc.com/misc/truecrypt/truecrypt.htm and https://twitter.com/stevebarnhart/status/472192457145597952

 

 

@pcstru. What do you think to the above?

Edited May 30, 2014 by Arthur

[pcstru]

@pcstru. What do you think to the above?

I think I have more trust in TrueCrypt than Bitlocker simply because TrueCrypt is open source. "Nullius in Verba" and all that. I would also suspect Bitlockers integration within windows would give a greater attack surface[*1] - but as with all security, whether that is an issue depends on what you are trying to protect against.

 

I still don't really see how you can rely on the word of MS when the US government is using tactics which prevent even the disclosure that court orders preventing any disclosure (even of the fact that an order exists) are in play.

 

[*1] So it might even be that the bitlocker developers have no idea that their product is being deliberately compromised.

[Ephelyon]

@fairm010 and @MordyT, I posted this last year - it's here. It works alongside a number of other scripts we use to replicate some of the functionality of SCCM and/or MDT because I essentially couldn't be arsed with them. If you're not going to copy the entire setup exactly, it may well require heavy modification. I might be able to help via PM.

 

Back on topic, it's the very specific link to cessation of support for XP that I find a bit strange...

[LeMarchand]

Bottoms!

 

I wonder if TPTB are applying pressure to (or throwing cash at) free encryption peeps. Free OTFE disappeared a while back, too.

[Michael]

As my schools use win7 pro which doesn't have bitlocker how would I go about installing it? Is it just a licence key change to upgrade the machine to enterprise edition or would it involve a complete new install?

 

Every edition of Windows 7 has Bitlocker, but the service is only enabled by default on Windows 7 Enterprise. Using RSAT on a Windows 7 Pro workstation, you can enable the service to run on all workstations using a GPO.

 

The only gotcha with Windows 7 Pro is you can't change the password set on the flash drive (for example). For this you do need Windows 7 Enterprise. Windows 8 Pro however does have Bitlocker enabled by default, and does allow you to change the password.

 

The other improvement with Windows 8 is you can encrypt system volumes, but it'll just encrypt the actual data rather than the whole volume - which these days could be 2TB, yet you may only be using 300GB worth of space.

 

With regards to TrueCrypt stopping production as it were - I think ending Windows XP support is irrelevant. Encryption technologies will evolve, but it'll be more so cloud based encryption rather than flash drives, which will go the same route as floppy disks!

[sparkeh]

Every edition of Windows 7 has Bitlocker, but the service is only enabled by default on Windows 7 Enterprise. Using RSAT on a Windows 7 Pro workstation, you can enable the service to run on all workstations using a GPO.

Wait what?!

 

Why does MS say that Botlocker is only available in Ultimate and Enterprise?

From BitLocker Drive Encryption - Microsoft Windows

Improved for Windows 7 and available in the Ultimate and Enterprise editions, BitLocker helps keep everything from documents to passwords safer by encrypting the entire drive that Windows and your data reside on. Once BitLocker is turned on, any file you save on that drive is encrypted automatically.

[Michael]

Wait what?!

 

Why does MS say that Botlocker is only available in Ultimate and Enterprise?

 

Load up Windows 7 Pro, run services.msc and there it is, only in a disabled state

[sted]

Wait what?!

 

Why does MS say that Botlocker is only available in Ultimate and Enterprise?

 

afaik you can read and write to an encrypted flash drive with pro (and possibly be used to recover an encrypted fixed disk) but you cant encrypt your internal drives without enterprise/ultimate

[sparkeh]

Ok thanks guys.

 

Also I mistakenly called it 'Botlocker' *snigger*

[Michael]

Ok thanks guys.

 

Also I mistakenly called it 'Botlocker' *snigger*

 

Would be a great name for getting rid of 'bots' now wouldn't it