Yves-Alexis Perez writes a bit about Debian and crypto-containers, comparing cryptsetup and encfs. The comparison is decent enough, except that it’s fairly trivial to get cryptsetup to integrate into the whole gnome-volume-manager stack and have a dialogue pop up when you insert an encrypted USB stick or similar. Sure, it’s mounted by a root process, but I wouldn’t claim it’s any kind of insecure because of that.
What did really catch my eye was the line near the end:
[…] but this is a bruteforce attack against master password (1024 bits RSA key), not against 128bits aes key of the container.
Well, according to conventional research, a 1024 bit RSA key is about as strong as an 80 bit symmetric key. A semi-recent RSA paper confirms this too. And to the best of my knowledge, there has not been found weaknesses in AES which lower the effective key size.