Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

Filter by
Sorted by
Tagged with
2 votes
1 answer
10 views

What to set PICOHTTPS_CA_ROOT_CERT in picohttps example in RPi Pico C - SDK

I'm trying to make a request to an ip using RPi pico w, using the picohttps example provided in here. Now for that we have 3 needed parameters in picohttps.h file - SSID, SSID_Password, ...
SOUHARDHYA PAUL's user avatar
0 votes
2 answers
574 views

For the Pi Pico W, is there a recommended (secure?) way to store WiFi username and password using micro/circuit python?

I am following wonderful tutorials on how to connect a RPi Pico W to my home AP. Everything works flawlessly. However, I had a question on how the wifi SSID and password are stored(securely?) on the ...
Scavenger5519's user avatar
-2 votes
1 answer
174 views

Does Raspberry PI 4 support Secure boot

Just wanted to know if Raspberry PI 4 supports secure boot ? Thanks, Swapnil
Swapnil's user avatar
3 votes
1 answer
800 views

How to protect wifi credentials on RP Pico W?

I'm trying out home automation using a Raspberry Pi Pico with Wifi. To connect to wifi I have to send SSID and password. Since the controller has no external interface other than the Wifi, how would ...
Andreas's user avatar
  • 163
0 votes
1 answer
42 views

What should I do to insulate other computers on the network from my Raspberry Pi?

I am going to host a small server for small text-based webservice on a RPI as I dont have funds for a remote server. Someone might pehaps try to hack it someday, and as I am only a hobbyist, I assume ...
Clone's user avatar
  • 215
0 votes
0 answers
54 views

Is it possible to only detect motion on only specific regions (motion)?

I have a rudimentary motion detector but trees waving in the wind (and especially their shadows on the roof) are causing more false positives than I'm willing to accept. I would like the motion ...
Derek Fulton's user avatar
1 vote
1 answer
546 views

RaspberryPi security, Bios settings, ubuntu secure boot. 2fa u2fa hacking

Do I have to enter operatingsystem in order to access BIOS settings on a raspberry pi? I am thinking about installing ubuntu on a raspberrypi and I see that linux has equvalent to windows 10 safemode. ...
GabeNewel's user avatar
0 votes
0 answers
287 views

Vulnerability Scanner for IoT Devices using raspberry Pi

It's my final year project to develop a Vulnerability Scanner for IoT Devices, Here is the proposal of that project "The goal of this project is to put a vulnerability scanner on a Raspberry Pi ...
MubashirKhan's user avatar
0 votes
1 answer
153 views

Rpi 3B+ Clam Antivirus hanging

Whenever I launch "Clam Antivirus" in my Raspberry pi 3B+ , it starts hanging when I click any button . How to scan files without hanging ?
Ishaan Prince's user avatar
1 vote
1 answer
836 views

What read protection method is available in RP2040?

I went through the data sheet but could not find any specific details about read protection. If anyone has worked on that specific area in RP2040, then can you please give your inputs about it?
user8737703's user avatar
0 votes
1 answer
157 views

raspberry pi zéro 2

I wanted to ask a question. Is there a security system to shutdown the Raspberry Pi Zero 2 in the event of overheating? A hardware solution in the Raspberry Pi(a form of security) and not a software ...
user143437's user avatar
1 vote
0 answers
30 views

Have pi 4b 8GB cannot hookup to wi-fi, lists all signals

Have new pi 4b 8GB, can not connect to Wi-Fi, will list all available signals including when I hot-spot my phone. Even with the right security codes will try but never connect. Have tried the latest ...
boltspinner's user avatar
-1 votes
1 answer
69 views

Can my Raspberry Pi Zero W python program be duplicated and resold?

I have a Raspberry Pi Zero W that runs a program under the main username, Pi. I'm going to give this Pi to someone for their own use, however I expect them to use the Pi for their application without ...
NLed's user avatar
  • 115
1 vote
0 answers
20 views

No mouse or keyboard until password entered [closed]

I'm trying to secure a Pi, and one of the things I'm keen on implementing - if possible - is that whatever input that comes in via the USB ports goes nowhere unless it's a 6-digit password (or longer) ...
Richard's user avatar
  • 11
0 votes
0 answers
33 views

How do I restrict SSID logon info on a user basis?

Currently, when a user logs on, the network last used is connected. Do not want this to happen when the "guest" user logs on if the previous user was on the primary network. Also, logon ...
spyder's user avatar
  • 1
0 votes
2 answers
194 views

SSL certificate for multiple dock containers running on RPI 4

Hi guys I have a question regarding docker containers and ssl certificates. I want to install more than one docker containers like pi hole , Bitwarden and motioneye . To access them I have to type ...
user133742's user avatar
1 vote
0 answers
349 views

Can't bind systemd-networkd DHCP server to a specific interface

I have setup a Raspberry Pi Zero W as both Wifi Client and Wifi AP using @Ingo's guide. Everything is working fine. The Pi is running mosquitto MQTT broker, Node-Red, lighttpd. I'm currently in the ...
Barbudor's user avatar
0 votes
3 answers
3k views

How to get access via ssh as root - with public/private key

I don't understand why I get no access for root on my Raspberry Pi 4 while trying to use key-based authentification via ssh. So far I generated a public/private rsa keypair using PuTTYgen: I saved ...
Mister X's user avatar
0 votes
1 answer
302 views

Hardening RPi4 for persistent 24/7 connection to public wifi [closed]

Edited: Based on private feedback to improve Q specificity. The public wifi is typical of that provided by libraries, airports and other public spaces that re-directs a browser to sign up or login via ...
Brybeck's user avatar
  • 103
0 votes
0 answers
1k views

Security / Antivirus software for Pi OS - Raspberry Pi 4

I want to use a Pi 4 for internet banking. Now that hackers are specifically targetting Linux with new exploits i want a good security product. I have contacted Linux security software vendors such as ...
Heafod's user avatar
  • 1
2 votes
1 answer
454 views

Access Denied when scanning for BLE (Bluetooth Low Energy) devices

I'm running an up to date version of Buster on a Pi 3B+ (v1.3) and my Python program dies with txdbus.error.remoteerror: org.freedesktop.DBus.Error.AccessDenied: Rejected send message errors unless I ...
user avatar
0 votes
0 answers
448 views

Is there a Raspberry Pi "hardware-based security key"?

I am reading through a recent StackOverflow blog post entitled "Security considerations for OTA software updates for IOT gateway devices" and it got me thinking about applications for the ...
Kryten's user avatar
  • 131
0 votes
1 answer
1k views

Setting up a raspberry pi as a gateway firewall for security purposes?

so I have a Minetest server and I want to deploy it on the internet through my raspberry pi, so de RBPI acts as a firewall and IDS and all the traffic goes through it. The Minetest server is on my ...
raldu's user avatar
  • 1
0 votes
1 answer
201 views

Rasperry Pi wireguard configuration and user access

I'm trying to setup Wireguard on my Raspberry Pi, which kind of succeed, but now I have problems with additional configuration of it. Is there a way to allow some users to see other computers in local ...
Adam Radomski's user avatar
0 votes
1 answer
114 views

Can any model of Raspberry-Pi hold malware outside the SD?

Suppose I acquire a second hand unit, or maybe I lend mine to a friend. Can I be reasonably sure the unit hasn't been malwared? Consider the nightmare scenario. My friend borrows my Raspberry Pi but I ...
billpg's user avatar
  • 111
1 vote
2 answers
389 views

Disable Single User Mode

If I forget my password to my Raspberry Pi, I can gain access again by using single user mode (here is an alternative link). The upside is that if I don't know my password, I can gain access. The ...
Insert name here's user avatar
-1 votes
1 answer
106 views

How to handle two networks (one for Smart devices and another to access internet) in a home automation setup?

I want to use my Raspberry Pi 4 as a secure home automation server that can handle two networks: one for accessing smart devices (over WiFi) and another for accessing the internet. This setup should ...
glamis's user avatar
  • 13
1 vote
2 answers
374 views

Passwordless git server ssh keys not working unless password is enabled?

I am trying to have a git server on my raspberry pi that is passwordless with only ssh key authetication. Sshing in with ssh key works fine, although when I try to push to a repository this is the ...
Brain Bytes's user avatar
1 vote
0 answers
59 views

Raspberry pi locking mechanism is insecure by default

I've followed a tutorial that lets me lock my Raspberry pi. Though I do not know which one it was I assume it was this one. However when I lock it I could just press Crtl+Alt+F7 to get right back into ...
Prolight's user avatar
  • 121
5 votes
1 answer
617 views

Does Raspbian keep a security log file, and what is its location?

I set up an OpenVPN server on my Raspberry Pi running Raspbian and am wondering if there is a log file of security events that I can look at. I'm curious because I want to know if there are login ...
ErikS's user avatar
  • 53
2 votes
0 answers
177 views

CPU side channel mitigations on Pi 4 running Ubuntu 20.04?

I want to run a jumphost on Ubuntu 20.04 64 bit and Pi 4, as secure as possible. If I check lscpu of the vanilla install after running a dist-upgrade, I see this: Architecture: ...
Pete's user avatar
  • 21
3 votes
1 answer
184 views

Is older Raspberry Pi safe? When is the end of software support for them?

I am not asking about the discontinuation of manufacturing or selling of the hardware; I am talking about only the software. There are famous old Android devices that the manufactures have abandoned a ...
Damn Vegetables's user avatar
0 votes
0 answers
62 views

day / night motion alarm

I am going camping in a few months and I want to build a motion sensor alarm for my tent entrance for while I am asleep. Chances are nothing will set off the alarm, but if a bear or coyote comes ...
porker7's user avatar
0 votes
1 answer
2k views

How to disable services on DietPi (debian linux) and harden the security?

Fresh DietPi install has bitcoin client and all sorts of unnecessary services installed. Which ones can I remove and how? The goal is to have a simple system can displays a website (needs to be able ...
Robotica's user avatar
2 votes
1 answer
171 views

How many parallel server applications are too much?

I am curious what general recommendations are. I would like to set up the following application, ideally on one device (RPi4, 4GB): InfluxDB and Grafana PiHole PiVPN and SSH nginx (simple) ...
Markus's user avatar
  • 199
2 votes
1 answer
2k views

How to disable password

I was getting ready to upgrade from a raspberry pi 3b+ to a pi 4 for retro pi gaming. I updated my SD card to prepare it for the new board, but I got a little "surprise". After the card was updated it ...
UNKNOWN's user avatar
  • 79
4 votes
2 answers
7k views

Any parental control tools for the Raspberry Pi 4?

Kids in my local elementary school are more reliant on online learning during worldwide coronavirus stay-at-home lockdown. Almost all of their schoolwork can be done within just a browser. Does the ...
DeepSpace101's user avatar
2 votes
1 answer
302 views

How can I disable the [Run...] main menu item in Raspbian Buster

I'm creating a build to be used by others in a company as a very simple remote dial-in tool to be used in emergencies. I'm basing this on Pis Version 3 and above running on Buster. The basic dial-in ...
enricosuarve's user avatar
3 votes
2 answers
159 views

Raspberry Pi in client home and security

For a project, I got to put Raspberries in client's homes, by a lot of clients. I also have to be able to ssh to them, so I can update them. My solution for the ssh is to set up a VPN from a server ...
Spoutnik16's user avatar
1 vote
1 answer
286 views

Enabling Screen Sleep using RTSP stream

I have two IP cameras supporting RTSP, and I want to display their feeds on a monitor fed by a Raspberry Pi. My problem is that I do not want the monitor to be powered on 24/7, but only when a motion ...
sv3ndev's user avatar
  • 13
0 votes
1 answer
3k views

How to use Raspberry PI4 as a security device for the network?

How Can I use Raspberry Pi 4 as a antivirus or a security device in a Network? I am trying to make the raspberry pi become a security device example below. ---(Internet)----(PI 4)-----(Local-PC) ...
Dhruvadeep's user avatar
0 votes
1 answer
2k views

Motion security

I installed motion by apt and run as the default configuration. I open http://raspberrypi:8080 and I can see the camera's output. I will use it over the internet and I'm worried about the security of ...
Portrique's user avatar
2 votes
3 answers
273 views

Raspberry Pi Security Issues: SSH ATTACK? Case Study

This might be a long post so please bear with me. This is a scenario that took place a year back when I had very almost no knowledge of raspberry pi. Right now I am trying to learn some stuff about ...
Crypton99's user avatar
3 votes
2 answers
419 views

Does Raspberry Pi 4 supports pointer authentication?

I know that ARM Pointer Authentication feature is supported on all ARMv8.3-A processors, and this version was presented at 10/2016. RPi 4 Model B was released last year so there is a good chance the ...
Z E Nir's user avatar
  • 133
2 votes
0 answers
155 views

Pi cannot boot when encrypted USB SSD drive is attached

I have a Pi 4, running Raspbian 10 Buster. I have an attached SSD drive with LUKS encryption. When I restart the Pi, it wouldn't boot if the SSD is attached. Once I unplug it, it boots well and I can ...
Ryan's user avatar
  • 21
0 votes
1 answer
15k views

Adding Debian Security Repository GPG key

I'm kinda new when it comes to working with adding GPG keys. I am trying to use the debian security repository to the sources.list to further add security to my Pi but I am getting this error below. I ...
LtMuffin's user avatar
  • 211
6 votes
1 answer
9k views

Does Raspberry Pi 4 processor support AES-NI instructions?

In the interest of minimizing timing attacks on my OpenVPN and similar connections, does Raspberry Pi 4 support AES-NI instructions? Some reference to AES is made in the technical reference manual, ...
The Quantum Physicist's user avatar
1 vote
0 answers
212 views

How can I build and install openssh server (sshd) with compiler security features

I noticed my raspberry pi's sshd does not seem to have PIE and ASLR enabled. I determined that using the answer here: https://unix.stackexchange.com/a/435038 I'm using Raspbian, is there another OS I ...
Eric's user avatar
  • 11
2 votes
1 answer
68 views

How to securely share linux devices from client to another linux server

I have 3 I2C devices connected to my raspberry pi 3 i2c bus 1. I want to share this whole I2C bus 1 (/dev/i2c-1) to another linux server, which is running in the cloud, through a secure TLS, username ...
Farukh's user avatar
  • 121
3 votes
2 answers
1k views

How can I create an encrypted container on a Raspberry Pi 4?

I'm looking for a tool similar to Veracrypt, Boxcryptor or Cryptomator which runs on the Raspberry Pi 4 (armv8). The above mentioned apps don't seem to support the arm architecture (or at least not v8)...
Picard's user avatar
  • 143