![]() ![]() to be honest I'd want to see the core engineer's resumes. (I'm specifically thinking of LastPass and related: ) I see on their website a lot of young faces. Of course startups sometimes disappear, or change their terms, and even groups or companies that were well regarded regularly make horrible mistakes, cryptography and infosec is hard hard stuff to do without making mistakes. )Īt least it's a proper startup and a proper subsiduary of people who have been involved in infosec in some way. ![]() ( Veracrypt has benefited from the original Truecrypt audit, hence the trust placed in it. Note that it is aimed at cloud synchronization or any type of "rsync" like synchronization scenario, which means you give up a little bit of information in return, specifically someone can see the rough file sizes and directory structure.Īlso just because something is open source doesn't mean it's solid - cryptography is really hard stuff, I'd want to know a lot more about the people wrote it, and I'd want to see some independent reviews/audits by external experts. ![]() Where did you get that veracrypt is closed source? ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |