You forgot about their lack of public source code repository. Talk about significant problems for an "open source" project! Go try and download the old 6.2 or 6.1 versions. If you feel bold, go ask for a copy in their forum, or better yet, offer old TrueCrypt source code for download. They scare the hell out of me. They do now advertise a US address next to some Air Force base in Nevada. No I'm not paranoid, I speak only truth.
Edit: This is all common knowledge and has been for a few years. Wikipedia has all the details. The Czech Republic connection with the Trademark, the anonymous/unnamed developers, etc. The new (as of this year) mailing address in the US, the fake domain name registration, etc.
One last edit: TrueCrypt is probably fine protection against common thieves, but enough bits may have been knocked off of it to make it "acceptable" for export. If I was a Russian Spy, I would not touch it with a ten foot pole.
They do now advertise a US address next to some Air Force base in Nevada.
The address listed on their website appears to be an office in a pretty mundane Vegas suburb, surrounded by restaurants and small businesses. Am I missing something?
I've never noticed that their address is only given as a picture, it's not searchable. See for yourself: google.com/search?q=site:truecrypt.org+Henderson, NV.
I'm trying to figure out how you mean. Are you saying this could be foreign countries building it for a way in to US data or the US building it as an easy way in to foreign companies data?
* Assuming the people behind it's development are doing so with a sketchy purpose...
djb wrote the code that won the EngineYard SHA1 challenge. His code was processing 800 million sha1 hashes per second. He wrote CUDA and C implementations. His sha1 implementation was 12 times faster than OpenSSL.
Edit: This is all common knowledge and has been for a few years. Wikipedia has all the details. The Czech Republic connection with the Trademark, the anonymous/unnamed developers, etc. The new (as of this year) mailing address in the US, the fake domain name registration, etc.
One last edit: TrueCrypt is probably fine protection against common thieves, but enough bits may have been knocked off of it to make it "acceptable" for export. If I was a Russian Spy, I would not touch it with a ten foot pole.