> [...]TrueCrypt cannot actually properly protect data on a running system.

This I understand : as long as you store the encryption key in RAM somebody that can access your system can get it.

> If such protection is desired, one cannot get around solutions that use smartcards or other hardware-based key storage such that the encryption key can be better kept a secret.

Can someone expands a bit on this please ?