The developer behind the widely-used file encryption software, VeraCrypt, Mounir Idrassi, has announced that Microsoft has blocked access to his account, which he relied on for issuing updates to Windows users. This escalation poses a potential threat to users who have encrypted their systems with VeraCrypt, as they may encounter difficulties accessing their computers in the near future.
Idrassi reported on March 30 that Microsoft had terminated his long-standing account used to sign Windows drivers and bootloaders, leaving him without any explanation or recourse. Based in Japan, he attempted to contact Microsoft for clarification but was unable to reach anyone. He expressed concern that many devices running VeraCrypt may soon become unable to boot because Microsoft requires developer accounts to verify the security of their software periodically.
The account termination highlights the power that tech companies wield over app distribution on their platforms, exposing users to risks associated with relying on third-party accounts that can be revoked under changing policies. While Idrassi can still provide updates for macOS and Linux users without issue, Windows users currently lack access to new updates.
For now, there are no immediate steps that users need to take, as VeraCrypt remains functional and no security vulnerabilities have been found. However, Idrassi cautioned that users employing system encryption—essentially locking their operating system from booting without a password—may begin facing boot issues around late June when Microsoft is expected to revoke the certificate authority that allows him to digitally sign the VeraCrypt software. This would severely impact the software’s functionality, hindering the boot process.
Without the ability to update and apply the necessary software signatures, Idrassi stated that it might spell the end for VeraCrypt, calling the situation a potential “death sentence” for the application. His grievances resonate with a broader trend observed this year, with developers facing sudden account terminations, such as the case of Paris Buttfield-Addison, who was locked out of their Apple account over a disputed gift card transaction.
As VeraCrypt users await further developments, the situation serves as a stark reminder of the precarious nature of software reliance on corporate ecosystems and the implications for user security and access.
Fanpage: TechArena.au
Watch more about AI – Artificial Intelligence
