Encrypt all the things!

very strange, seems like something was compromised at some stage.
http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

bitlocker is proprietary encryption from Microsoft, and if you're not running your own domain they will hold a set of "recovery" keys for you.

Meaning it's extremely likely the NSA has all your data.

The weird thing in this is that TrueCrypt passed it's audit. It is secure.

There are alternatives, but none have a UI with the same ease of use as TC.

I'll probably use tc-play or dm-crypt directly https://tails.boum.org/blueprint/replace_truecrypt/ as those can use the TrueCrypt format (in part proving the standard cryptography of TC).

But for most people I'd just say, "Don't panic, wait for these guys http://truecrypt.ch/ to take it over, and you can get the binaries from there".

TrueCrypt remains secure, the software won't break today, but it just isn't going to be there in the future (they never overcame UEFI and full disk encryption for secure boot).

It will be interesting to see what the Truecrypt code audit turns up though. That is apparently still going to continue.

They already made an interim announcement in light of the past few days. They've found nothing significant that compromises TrueCrypt at all, and the only thing they had planned to announce was that they are going to offer to audit other cryptographic software too.

The license in the code changed as part of the 'new' version. Previously it didn't allow any forks without explicit mention to TrueCrypt, apparently the new version does. Not sure if it is retroactive though - as all the code that actually encrypts is gone.

Andy Greenberg (a_greenberg): On July 1, 2013, NSA said all Snowden emails were exempt from disclosure: https://www.muckrock.com/foi/united-states-of-america-10/edward-snowden-employeecontractor-reviewsagreements-5971/ Now posts on Tumblr http://icontherecord.tumblr.com/post/87218708448/edward-j-snowden-email-inquiry-to-the-nsa-office http://twitter.com/a_greenberg/status/472101650241695746 retweet of @MuckRock tweet

hmm Herrliberg... never been there, but right next to Zurich. Lovely place in the world

http://mobile.nytimes.com/2014/06/01/us/nsa-collecting-millions-of-faces-from-web-images.html

http://www.theregister.co.uk/2014/06/03/revealed_beyond_top_secret_british_intelligence_middleeast_internet_spy_base/

http://arstechnica.com/security/2014/06/google-released-chrome-extension-allows-easy-in-browser-webmail-encryption/

Browser plugin that uses OpenPGP for webmail.

Tried it ?

Oh it's proper Alpha..

Not sure if this is the right place to ask, or if it's been discussed already, but which companies are people using/recommending for VPNs?

I'm happy to pay around a tenner a month.

I've just seen Velocio recommending IVPN on page 11.

Does anybody have any first hand recommendations?

private internet access. Easy to use. good reviews.

yeah PIA is pretty awesome, and has some of the best speeds around.
It's the only VPN I found that I can connect to London from SF and actually use iPlayer etc...

encryption mail service account frozen

yeah it's back, they got their money and not touching Paypal again.

I'm on the waiting list for an account there, looks good

https://www.eff.org/deeplinks/2014/07/7-things-you-should-know-about-tor

http://arstechnica.com/security/2014/06/exclusive-a-review-of-the-blackphone-the-android-for-the-paranoid/

Blackphone review

yeah it's back, they got their money and not touching Paypal again.

I'm on the waiting list for an account there, looks good

Yeah same here. Cheers for the heads up ^^

http://www.wired.com/2014/07/morgan-marquis-boire-first-look-media/

Small world, Morgan was a housemate of a girl I dated.

who was friends with someone who knew someone else

keep it secret silly!

Funny that he should now be 'respectable' though, they were right horrible goths with a coffin for a coffee table