Microsoft has terminated an account associated with VeraCrypt, a popular and long-running piece of encryption software, throwing future Windows updates of the tool into doubt, VeraCrypt\u2019s developer told 404 Media.The move highlights the sometimes delicate supply chain involved in the publication of open source software, especially software that relies on big tech companies even tangentially.\u201cI didn’t receive any emails from Microsoft nor any prior warnings,\u201d Mounir Idrassi, VeraCrypt\u2019s developer, told 404 Media in an email.\ud83d\udca1Do you know anything else about this termination or others like it? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.VeraCrypt is an open-source tool for encrypting data at rest. Users can create encrypted partitions on their drives, or make individual encrypted volumes to store their files in. Like its predecessor TrueCrypt, which VeraCrypt is based on, it also lets users create a second, innocuous looking volume if they are compelled to hand over their credentials.\u00a0Last week, Idrassi took to the SourceForge forums to explain why he had been absent for a few months. The most serious challenge, he wrote, \u201cis that Microsoft terminated the account I have used for years to sign Windows drivers and the bootloader.\u201d\u201cRegarding VeraCrypt, I cannot publish Windows updates. Linux and macOS updates can still be done but Windows is the platform used by the majority of users and so the inability to deliver Windows releases is a major blow to the project,\u201d he continued. \u201cCurrently I’m out of options.\u201dIdrassi told 404 Media the termination happened in mid-January. \u201cI was surprised to discover that I could no longer use my account,\u201d he said.<\/p>\n
On the forum and in the email to 404 Media, Idrassi shared what he said was the only message he received connected to the account shutdown. \u201cBased on the information you have provided to date, we have determined that your organization does not currently meet the requirements to pass verification. There are no appeals available, we have closed your application,\u201d it reads.Idrassi told 404 Media the message is concerning his company IDRIX. \u201cAs you can read in their message, they say that the organization (IDRIX) doesn’t meet their requirements, but I don’t see which requirement IDRIX suddenly stopped meeting,\u201d he said.The message Idrassi said he received.Idrassi said he has tried contacting Microsoft support, but he received automated responses that he believes contained AI-generated text. \u201cThis is frustrating because they could at least explain what’s wrong,\u201d Idrassi said.\u201cThe lack of communication by Microsoft when they take such decisions adds uncertainty about the future, combined with automated AI feedback which gives an inhuman aspect to such decisions,\u201d Idrassi said.According to a post on Hacker News, the popular VPN client WireGuard is facing the same issue. \u201cNo warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended,\u201d Jason Donenfeld, the creator of WireGuard, wrote.Microsoft acknowledged a request for comment but did not provide a response in time for publication.<\/p>\n","protected":false},"excerpt":{"rendered":"