I'm not saying its impossible, but Occam usually wins these arguments. To believe it we have to assume that after 10+ years of anonymity at least 1 dev was identified, lived in a country where a court order from the NSA was valid, and was able to escape the NSA's wrath at publicly destroying the program once compromised. Did they forget that they still had prior versions and (more importantly) prior code distributed beyond their control? For a team that had been working on a project for 10 years, this whole thing just (surprisingly) reeks of almost novice behavior. After working on a project for 10 years, I'm sure they do know the code pretty well, but to think that they couldn't hand it off to another team of developers because they wouldn't be able to understand the code as well as them is just plain hubris.Īlso, who in their right mind tries to basically sabotage/neuter their own open source project as if they could just take it back and nobody would ever use it anymore? It's not like they can just take their ball and go home when the 'ball' is source code that is publicly available. I'm disappointed by the decision they made about either forking or handing off the project, but can't say I'm completely surprised either. Unless of course those email responses and tweet were ruses, which I'm sure someone will claim.Heh, 'abrupt' is putting it mildly. Not sure why that would have a bearing on anything. I do find it a little odd they aren't keen on a fork though because 'they' are familiar with the code. Although after the initial shock I did start to re-read what was posted and started to think they were only referring to TrueCrypt as not being safe in the future due to no more development, meaning no bug fixes, etc. It's still seems abrupt the way which they did it. Interesting it would appear the suspicion that the devs just wanted to stop developing it seems to be the true theory. Steve Gibson has some information about it along with the install files for 7.1a if anyone is interested.

It looks like the TrueCrypt developers finally spoke out.

Truecrypt 7.2 is it secure