Advertisements
Scheduled Server Downtime – June Fri 18th…
30 Nov

Scheduled Server Downtime – June Fri 18th…

Preamble

Regular users of NxFifteen will be aware I tend to give little or no warning about service downtime. In most cases this is because the setup I use is working the way it should and needs no messing with, but things go wrong and I scrabble to get everything back up and running. This time is different.

On Friday the 18th of July i am predicting an extended service outage. At the moment I can’t predict how long this will last, all I can do is assure you I will be working over the weekend to restore service and reduce the unavailability as much as I can.

Why is this happening

My upstream host, Bytemark, will be physically moving my server from Leeds to York. This is to allow them to continue providing the best service available.

That said, it was still my choice to allow them to do this and i set the date of my move.

What will be affected

Everything. The physical machine is being moved so it will be turned off and any service running on it will be unavailable.

This includes: emails, websites, jabber chat, nx15.at shortened links and the OpenPGP Key server.

How long will this last

I don’t know. Expect everything to be back online by the end of the weekend, but at this time i can offer no guarantee.

My priorities are email then websites and after that everything else.

I can’t keep you update from here, but i will post to Twitter, Google+ and Facebook as service returns of delays continue.

TrueCrypt
29 Nov

TrueCrypt

TrueCrypt is dead, long live TrueCrypt. In a move that shocked everyone on the internet TrueCrypt was taken down on May 28th 2014 and the official TrueCrypt website, truecrypt.org, began redirecting users to a page warning the software contained unfixed security issues.

This announcement caused a great amount of panic and speculation about one of the most popular cross platform encryption tools available. As the dust settled it’s become clear there are no known security problems with TrueCrypt but all development by the original authors has ceased and it is their opinion that to use unmaintained software would pose a security risk.

Don’t Panic

In part they might be right. If down the line a flaw in TrueCrypt is found they will not be fixing it, but as yet there is no such flaw and a full security audit is under-way. The audit is being carried out by iSECpartners and crowed funded by TrueCrypt users. While still in its infancy it has already completed work on the TrueCrypt boot loader and found nothing of concern. For those who don’t want to read the full report Steve Gibson of GRC.com did a fantastic breakdown for Security Now Episode 458.

Verifying the TrueCrypt v7.1a Files

Across this site I have used my OpenGPG key to digitally sign my downloads as a way of authenticating them. In this case I didnt want to sign the work of someone else and it would only have verified that the download was the one I intended for you to get.

Since paranoia is nothing to be ashamed of I’ve taken a leaf out of GRC’s book and provided SHA256, SHA1 and MD5 hashes for all my downloads which I have then digitally signed to prevent tampering.

Now, since I do not have another site I can host an independant copy of these hashes on I can only point you to the same place as GRC does. Taylor Hornby (aka FireXware) of Defuse Security is hosting a copy of the same files offered by GRC at https://defuse.ca/truecrypt-7.1a-hashes.htm. The best validation I can offer is the hashes of my files match exactly what is offered by GRC and serveral other independent archives.

TrueCrypt 7.1a Archive Repository

File Name Operating System
truecrypt-7.1a-linux-x64.tar.gz Linux/Unix [Download not found]
truecrypt-7.1a-linux-x86.tar.gz Linux/Unix [Download not found]
TrueCrypt 7.1a Mac OS X.dmg Mac OS X [Download not found]
TrueCrypt Setup 7.1a.exe Microsoft Windows [Download not found]
TrueCrypt User Guide.pdf N/A [Download not found]
truecrypt-7.1a-linux-console-x64.tar.gz Linux/Unix [Download not found]
truecrypt-7.1a-linux-console-x86.tar.gz Linux/Unix [Download not found]
TrueCrypt 7.1a Source.tar.gz N/A [Download not found]
TrueCrypt 7.1a Source.zip N/A [Download not found]

OpenPGP Signed Download Hashes