Questions tagged [security]
Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).
1
vote
1answer
28 views
Only allow a specific peripheral to be connected to a USB port
I am turning my raspberry pi prototype device into a market product. The data and the program running on the pi must be protected. But we have a USB webcam attached to it (provided by us, hence we ...
1
vote
1answer
38 views
Can the GPIO pins be used to compromise a raspberry pi?
For example, would a touchscreen device that uses the below pins on a Raspberry Pi 3 be able to do something more than say, send touch and keyboard events? Anything hackish/nefarious? (edit: use case: ...
1
vote
0answers
19 views
Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs [closed]
I have an opensource airgapped raspberry pi project seen at the following link:
www.privatekeyvault.com
I have provided a method for installing LUKS full disk encryption seen at the following:
https:/...
1
vote
2answers
58 views
wpa_supplicant.conf in raspberry pi 3
In order to have my raspberry pi access using ssh (on wifi) i
Created a wpa_supplicant.conf file with necessary details
Created an empty file 'ssh'
My question was around security. Is it secure to ...
0
votes
1answer
51 views
Trying to connect IP security camera to Raspberry Pi 3 using only a Ethernet cord
I have an IP camera outside of my Garage, I have little to no internet out there so I cant connect using wifi. so I am wondering if I can connect my Camera using a ethernet cord to the Raspberry PI ...
1
vote
2answers
80 views
Can a Raspberry Pi be firmware updated? Inquiring from a security perspective
Can a Raspberry Pi be firmware updated?...I have a feeling from the suggested questions I'm being offered, the answer is yes.
I'm actually asking this from a security perspective, not because I ...
3
votes
1answer
647 views
Official “securing your pi” guide recommends blocking port 30 from 192.168.2.1 - why?
The official "securing your pi" guide from the Raspberry Pi foundation recommends installing the "uncomplicated firewall" (ufw) and adding a rule to deny access to port 30 from 192.168.2.1:
sudo ufw ...
0
votes
0answers
24 views
How can I use a Raspberry Pi to verify a phone/tablet without contact?
Let's say I have a phone and the Raspberry Pi is 'expecting' it. How can I confirm the phone is a verified device? The easier it is for the phone owner the better. I have come up with a few ...
0
votes
0answers
49 views
Encrypt raspberry SD card and input password without input devices
I would like to encrypt a raspberry pi zero SD or at least a partition of it. This specific raspberry pi zero is used to charge and backup an iphone once it is connected. Hence, the problem of keeping ...
1
vote
1answer
50 views
PiCamera Motion Error
I am using the Raspberry Pi 3 B+ w/ Raspbian Stretch.
I am currently unable to view the video stream on port 8080 or 8081.
When I start the command: motion -s "test" recipientemailhere
This is what ...
0
votes
2answers
111 views
Making a IoT Motion Sensor w/ Security Camera
I'm trying to find the easiest and most efficient way to create one. I have the below already, is there anything else that I would need? Where can I find some code for me to copy. I don't necessarily ...
1
vote
0answers
91 views
Securing Raspberry Pi 3B+ Web Server with NAS [closed]
I have been researching about the security threats to a web server. It makes me want to secure my own on my Raspbian OS system. What are the list of things that are recommended or optional to install ...
0
votes
1answer
136 views
What encryption to choose for secure directory on USB Storage? [closed]
I need to choose encryption tool to secure my USB stored files, and I'm stuck with tools like VeraCrypt, ecryptfs or dm-crypt. The task is to encrypt folder or virtual disk that could be mounted as ...
2
votes
2answers
54 views
how to make sure that some code is working on a rpi?
Is it possible to use some (signing) service from the rpi itself that would allow us to make sure of 2 things?
Code is running on a raspberry
Code is running on a certain raspberry box and not ...
1
vote
0answers
74 views
Why is OP-TEE for Raspberry Pi3 insecure?
The OP-TEE on Raspberry Pi 3 webpage says,
This port of ARM Trusted Firmware and OP-TEE to Raspberry Pi3 IS NOT SECURE!
Although the Raspberry Pi3 processor provides ARM TrustZone exception
...
3
votes
1answer
1k views
Security of using Raspberry Pi for online banking
I would like to use Raspberry Pi 3 as a dedicated machine for online banking, but I am not sure if it can be made secure enough.
I think about using Raspberry Pi with raspbian. It would be connected ...
0
votes
1answer
78 views
Which Distro provides Timely Security Updates and have the longest support cycle for Raspberry Pi 1,2 & 3? [closed]
I am looking for a Linux Distro that provides timely security updates for all Raspberry Pi variants. Please indicate if the update life-cycle is released based (preferred) or rolling/continuous. ...
0
votes
0answers
198 views
How to setup a traffic mirroring device using a raspberry pi (Raspberry pi will work as a wifi access point to connect IoT devices in a smart home)
Here's a network setup that i am going to build.IoT devices are connected to a seperate access point which is a raspberry pi. My question is how can I mirror the traffic flowing through the Raspberry ...
0
votes
1answer
812 views
Raspbian Stretch Strict chromium strict kiosk mode
I have setup raspberry pi to autostart chrome in kiosk mode when it boots up and open a locally hosted web application successfully. The web application will require keyboard and mouse for the user to ...
1
vote
0answers
217 views
Where is Raspberry Pi “Logout after inactivity” configuration
I recently downloaded and installed a standard Raspbian OS environment on my Pi. On my Ubuntu Laptop, "Logout after inactivity" is a standard setting, which I like a lot.
This is not active on my Pi, ...
0
votes
0answers
108 views
Is a Owncloud-Server safe?
I'm new here in the forum.
My question is already in the headline but I would like to explain it...
So I have an Owncloud (version 10) server running on a Raspberry Pi at home.
I have also released ...
7
votes
3answers
1k views
Disable ALL video outputs and USB Ports. Only remote access
I don't know if this is possible.
I'm hosting a web farm on raspberry pi (for fun).
And one of them is at friend's house. I can access the pi remotely using VNC.
How can i prevent my friend from ...
0
votes
1answer
817 views
Security implications of running my website on my raspberry pi [duplicate]
What are the security implications if I try to run my website from my home from a raspberry pi as a total noob?
Is it fine if I just follow one of the more common tutorials or should I better pay a ...
1
vote
1answer
511 views
Setting up a local server on raspberry pi, security concerns?
I would like to set up a local Apache server with PHP and MySQL on a raspberry pi for learning purposes.
To my understanding, the server is only accessible by devices connected to my home network.
...
57
votes
3answers
18k views
Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?
There are two new serious security flaws discovered, Spectre and Meltdown.
Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
0
votes
2answers
78 views
I secured my raspberrypi, should I also secure apache?
I am pretty sure this may come across as a pretty dumb question but I will ask it anyways. I took some measures to secure my raspberrypi (for example creating a new user and deleting pi, changing the ...
5
votes
2answers
6k views
Entrusted Certificates installation
I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
0
votes
0answers
46 views
How to configure RPi security camera to be active when our cell phones aren't on the wifi network?
I've seen quite a few security camera examples and many have options for a duty schedule that activates the camera during certain specified days/hours to set up a routine. However I have fairly ...
1
vote
1answer
199 views
How to port knock RealVnc?
I have been having some trouble with port knocking my VNC, as when I nmap my rpi, the vnc ports are still open, here is my config file (excuse the lame sequence, I haven't fully set it up yet) :
[...
15
votes
4answers
9k views
Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?
I have an updated RPI Zero W running Stretch.
The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out:
For the oldstable ...
1
vote
1answer
493 views
Hashing password longer than 14 characters in wpa_supplicant.conf
My college has a WPA2 Enterprise network, which I can connect to on my Pi after adding the network in wpa_supplicant.conf.
I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
0
votes
1answer
575 views
How to set up Wifi with EAP TTLS PAP + Proxy on Raspbian Jessie?
Sorry but I'm loosing my mind with the Wifi on Rapsbian Jessie.
Here is the thing : At work we have a secure Wifi connection. We had instructions to get connect via ANDROID terminals, as following :
...
0
votes
1answer
591 views
Deploy hybrid Intrusion detection on R-pi
I have R-pi 2 model B, can i deploy IDS (Snort/ Bro) on it? I am following this [1] methodology. Any thoughts to proceed with this. Also can I run any ML algo alongwith IDS? does my pi support all
[1]...
0
votes
2answers
333 views
Raspbian using outdated openssh
I have been setting up a simple server, and was worried about some security risks. I found that the Pi is running openssh 6.7, when the most up to date version is 7.5. Tenable Nessus says this leads ...
0
votes
0answers
35 views
Basic security for a kiosk? [duplicate]
I am very new to Raspberry Pi anything, and have just set up a kiosk. What do I need to know about security?
Our network (I'm a public librarian) has a firewall and the usual security, but is there ...
0
votes
1answer
449 views
Password Changes Not Persisting After Shutdown or Logoff
If I change the password of user pi (rpi 3b, NOOBS, Raspbian Jessie), it takes affect only until shutting down or logging off. After shutting down or logging off, the new password is no longer current....
0
votes
0answers
2k views
How to update Samba to the latest release branch
I configured a network share using the guidance found here:
http://raspberrypihq.com/how-to-share-a-folder-with-a-windows-computer-from-a-raspberry-pi/
But after everything was successfully ...
0
votes
1answer
202 views
How do I protect a port that I need to open for my VPN server?
I used the program pivpn to build my vpn server on a raspberry pi 3. When the build was completed, I forwarded the correct port in my router to my raspberry pi. Now I used one of the web programs on ...
10
votes
1answer
2k views
Self destruct: self erase all data on SD card using shred, dd or some other method
I will be using a Raspberry Pi as an air-gapped computer to make secure encrypted transactions on the Ethereum BlockChain.
Once in awhile I will want to update the software I am using which will ...
0
votes
2answers
1k views
what did sudo passwd do
I was trying to change the default password for my raspberry pi and I used sudo passwd instead of just passwd. What did I change when I used sudo passwd?
It didn't even ask me to enter the current ...
3
votes
1answer
85 views
Running a small HTLM5 website on a RPi3B when it has no fixed IP [closed]
I'm planning on making my first web-server. My plan is to use a RPi3B (or RPi3A if it comes without wifi and bluetooth, but with ethernet) for it.
But because I'm new to web-servers I've a couple of ...
1
vote
1answer
440 views
Download from apt-get through HTTPS only?
Today during a sudo apt-get dist-upgrade I noticed that at the beginning of the process it lists a series of lines starting as:
Get: 1 http:/mirrordirector.raspberrypi.org ...
Get: 2 http:/archive....
-1
votes
2answers
153 views
I made a lamp webserver. Does any one know how to maintain a “secure webserver”? [closed]
I am using RPi3. I flashed Raspian on to SD from Raspberry pi.org so its the newest version of Jessie. I am new at all of this so I want to know where or what are vulnerable points of a lamp server ...
0
votes
1answer
193 views
Can you use google's Chrome on Raspberry 3 with Raspbian (not Chromium)? [duplicate]
I would like to know: can one use Google Chrome (not Chromium) on a Raspberry 3 running Raspbian or is it too heavy for the Pi 3?
The reason is that I would like to get the more frequent and ...
0
votes
1answer
761 views
How can I use scp/ssh in a cron script without entering a password?
I have a script that goes out to 5 other Rpi3 computers and collects data from them using scp and puts it all out on a flash drive. (Then later it gets picked up from the master Pi by a Windows Task ...
1
vote
1answer
7k views
Network firewall and intrusion prevention using Raspberry Pi?
Is it possible to use a single board like the raspberry pi as a firewall and / or an intrusion prevention system ?
Or even use a dedicated OS like clearOS ?
I know the Ethernet speed is a restriction ...
1
vote
1answer
1k views
Unable to setup RKHunter (“Invalid SCRIPTWHITELIST configuration option”)
I installed RKHunter (rootkit hunter) on Raspbian Jessie using "apt-get install". Before that I performed apt-get update and upgrade as well as autoclean.
When setting up RKHunter, the first few ...
1
vote
1answer
123 views
secure a raspberry pi so it can only run one application
Given that only a touch screen is accessible, how can I lock down a raspberry pi so that only one application (a calculator program) will run?
1
vote
0answers
456 views
Protecting the on-board flash memory content on Raspberry Pi 3 SOM
I'm using the Raspberry Pi Compute Module 3 (CM3) in my latest hardware product for networking and user interface function, as it has small form factor and solid availability (until 2023 according to ...
0
votes
0answers
2k views
Upgrade OpenSSH to V7+
I'm using my raspberry pi as a home web server and, whilst I know it's never going to offer up enterprise level security, I would like to make it as secure as possible.
scanmyserver.com has indicated ...
