Questions tagged [security]
Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).
145
questions
2
votes
1answer
21 views
How can I disable the [Run…] main menu item in Raspbian Buster
I'm creating a build to be used by others in a company as a very simple remote dial-in tool to be used in emergencies. I'm basing this on Pis Version 3 and above running on Buster.
The basic dial-in ...
3
votes
2answers
74 views
Raspberry Pi in client home and security
For a project, I got to put Raspberries in client's homes, by a lot of clients.
I also have to be able to ssh to them, so I can update them.
My solution for the ssh is to set up a VPN from a server ...
1
vote
1answer
30 views
Enabling Screen Sleep using RTSP stream
I have two IP cameras supporting RTSP, and I want to display their feeds on a monitor fed by a Raspberry Pi. My problem is that I do not want the monitor to be powered on 24/7, but only when a motion ...
0
votes
1answer
65 views
How to use Raspberry PI4 as a security device for the network?
How Can I use Raspberry Pi 4 as a antivirus or a security device in a Network?
I am trying to make the raspberry pi become a security device example below.
---(Internet)----(PI 4)-----(Local-PC)
...
0
votes
1answer
68 views
Motion security
I installed motion by apt and run as the default configuration. I open http://raspberrypi:8080 and I can see the camera's output. I will use it over the internet and I'm worried about the security of ...
2
votes
3answers
119 views
Raspberry Pi Security Issues: SSH ATTACK? Case Study
This might be a long post so please bear with me.
This is a scenario that took place a year back when I had very almost no knowledge of raspberry pi. Right now I am trying to learn some stuff about ...
2
votes
1answer
63 views
Does Raspberry Pi 4 supports pointer authentication?
I know that ARM Pointer Authentication feature is supported on all ARMv8.3-A processors, and this version was presented at 10/2016. RPi 4 Model B was released last year so there is a good chance the ...
2
votes
0answers
65 views
Pi cannot boot when encrypted USB SSD drive is attached
I have a Pi 4, running Raspbian 10 Buster. I have an attached SSD drive with LUKS encryption. When I restart the Pi, it wouldn't boot if the SSD is attached. Once I unplug it, it boots well and I can ...
0
votes
0answers
29 views
Bridge between Twilio API/phone line and closed circuit 20v intercom
Question about how to achieve the below using a Raspberry PI. What hardware would i need to buy and is the below possible?
I have a closed circuit intercom system in my house. This is a video ...
0
votes
1answer
489 views
Adding Debian Security Repository GPG key
I'm kinda new when it comes to working with adding GPG keys. I am trying to use the debian security repository to the sources.list to further add security to my Pi but I am getting this error below. I ...
0
votes
0answers
367 views
Does Raspberry Pi 4 processor support AES-NI instructions?
In the interest of minimizing timing attacks on my OpenVPN and similar connections, does Raspberry Pi 4 support AES-NI instructions?
Some reference to AES is made in the technical reference manual, ...
1
vote
0answers
49 views
How can I build and install openssh server (sshd) with compiler security features
I noticed my raspberry pi's sshd does not seem to have PIE and ASLR enabled. I determined that using the answer here: https://unix.stackexchange.com/a/435038
I'm using Raspbian, is there another OS I ...
2
votes
1answer
34 views
How to securely share linux devices from client to another linux server
I have 3 I2C devices connected to my raspberry pi 3 i2c bus 1.
I want to share this whole I2C bus 1 (/dev/i2c-1) to another linux server, which is running in the cloud, through a secure TLS, username ...
0
votes
0answers
198 views
How can I create an encrypted container on a Raspberry Pi 4?
I'm looking for a tool similar to Veracrypt, Boxcryptor or Cryptomator which runs on the Raspberry Pi 4 (armv8). The above mentioned apps don't seem to support the arm architecture (or at least not v8)...
0
votes
0answers
107 views
Ensure Pi Connects Only to Trusted WiFi Network Via Certificate
This bleeds into Information Security Exchange, however I am posting it here:
Suppose I am extremely paranoid and want to ensure my Pis only connect to WiFi access points with a certificate signed by ...
0
votes
1answer
94 views
Can malware persist in the Pi outside of the OS/SD card?
Please let me know if this question is more appropriate for Security.
What kinds of damage can an attacker with physical access to a Pi cause?
In a desktop PC or laptop, an attacker with physical ...
1
vote
1answer
94 views
Bind sd card to a specific raspberry Pi
Is it possible to tie an SD card to a Raspberry Pi? I want it this way if you try the SD card in another Raspberry Pi that Linux does not start or that the SD card formats itself.
Furthermore, it ...
0
votes
1answer
46 views
Would it be possible to set up a security system like the one in jurassic park? [closed]
Would it be possible to set up a security system like the one in jurassic park (the book) using raspberry pi's? If so, how much time would it take, and how much would it cost? Using python as the ...
3
votes
1answer
424 views
Is the Raspberry Pi 4 vulnerable to the Spectre exploits?
Now the new Raspberry 4 has moved to ARM A72 cores, it's vulnerable to the spectre issues according to ARM.
Processor Variant 1 Variant 2 Variant 3 Variant 3a Variant 4
Cortex-A72 Yes Yes**...
0
votes
0answers
113 views
How do you set up Squid Proxy behind DHCP router?
I installed Squid on my RPi-3 for use behind a DHCP router. However, the pi will not route traffic back and forth between my computer because my router's DHCP settings. I don't want to give my router ...
1
vote
1answer
763 views
UFW Enabled, but not starting upon Pi reboot
I am running servers on several Pi's for VPN, OpenTTD, etc. I have installed ufw on all of them to try and keep them a little more secure. The server running the VPN is causing some issues as ufw ...
3
votes
1answer
371 views
Translation request for News re wpasupplicant during upgrade
During a routine upgrade (sudo apt-get upgrade), the following "news" appeared in my terminal window:
apt-listchanges: News
---------------------
wpasupplicant (2:2.6-19) unstable; urgency=medium
...
1
vote
1answer
66 views
Why is /boot/config.txt executable?
FYI, I installed the R-PI minimal image with dd myself onto an sd card
I was messing with the boot config when I realized that this file was set as executable. Looking at the config, I don't see why ...
0
votes
1answer
73 views
Raspbian Password Security
I'm building a Raspberry pi Raspbian server and wanted to know how secure the passwords are, as I intend to forward the port. Is it possible to SSH into a machine without the password?
Any input is ...
2
votes
1answer
755 views
What is the purpose of auto-login? Is it safe/secure?
Please excuse my ignorance. I have searched and I haven't found anything that addresses my question.
What is the purpose of auto-login and is it safe to enable?
I am using my Pi 3B to host a very ...
1
vote
1answer
37 views
Only allow a specific peripheral to be connected to a USB port
I am turning my raspberry pi prototype device into a market product. The data and the program running on the pi must be protected. But we have a USB webcam attached to it (provided by us, hence we ...
1
vote
1answer
61 views
Can the GPIO pins be used to compromise a raspberry pi?
For example, would a touchscreen device that uses the below pins on a Raspberry Pi 3 be able to do something more than say, send touch and keyboard events? Anything hackish/nefarious? (edit: use case: ...
1
vote
0answers
32 views
Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs [closed]
I have an opensource airgapped raspberry pi project seen at the following link:
www.privatekeyvault.com
I have provided a method for installing LUKS full disk encryption seen at the following:
https:/...
1
vote
3answers
762 views
wpa_supplicant.conf in raspberry pi 3
In order to have my raspberry pi access using ssh (on wifi) i
Created a wpa_supplicant.conf file with necessary details
Created an empty file 'ssh'
My question was around security. Is it secure to ...
1
vote
2answers
404 views
Can a Raspberry Pi be firmware updated? Inquiring from a security perspective
Can a Raspberry Pi be firmware updated?...I have a feeling from the suggested questions I'm being offered, the answer is yes.
I'm actually asking this from a security perspective, not because I ...
4
votes
1answer
1k views
Official “securing your pi” guide recommends blocking port 30 from 192.168.2.1 - why?
The official "securing your pi" guide from the Raspberry Pi foundation recommends installing the "uncomplicated firewall" (ufw) and adding a rule to deny access to port 30 from 192.168.2.1:
sudo ufw ...
1
vote
1answer
139 views
PiCamera Motion Error
I am using the Raspberry Pi 3 B+ w/ Raspbian Stretch.
I am currently unable to view the video stream on port 8080 or 8081.
When I start the command: motion -s "test" recipientemailhere
This is what ...
1
vote
0answers
143 views
Securing Raspberry Pi 3B+ Web Server with NAS [closed]
I have been researching about the security threats to a web server. It makes me want to secure my own on my Raspbian OS system. What are the list of things that are recommended or optional to install ...
1
vote
1answer
660 views
What encryption to choose for secure directory on USB Storage? [closed]
I need to choose encryption tool to secure my USB stored files, and I'm stuck with tools like VeraCrypt, ecryptfs or dm-crypt. The task is to encrypt folder or virtual disk that could be mounted as ...
3
votes
2answers
59 views
how to make sure that some code is working on a rpi?
Is it possible to use some (signing) service from the rpi itself that would allow us to make sure of 2 things?
Code is running on a raspberry
Code is running on a certain raspberry box and not ...
1
vote
1answer
298 views
Why is OP-TEE for Raspberry Pi3 insecure?
The OP-TEE on Raspberry Pi 3 webpage says,
This port of ARM Trusted Firmware and OP-TEE to Raspberry Pi3 IS NOT SECURE!
Although the Raspberry Pi3 processor provides ARM TrustZone exception
...
3
votes
1answer
2k views
Security of using Raspberry Pi for online banking
I would like to use Raspberry Pi 3 as a dedicated machine for online banking, but I am not sure if it can be made secure enough.
I think about using Raspberry Pi with raspbian. It would be connected ...
1
vote
1answer
132 views
Which Distro provides Timely Security Updates and have the longest support cycle for Raspberry Pi 1,2 & 3? [closed]
I am looking for a Linux Distro that provides timely security updates for all Raspberry Pi variants. Please indicate if the update life-cycle is released based (preferred) or rolling/continuous. ...
0
votes
1answer
2k views
Raspbian Stretch Strict chromium strict kiosk mode
I have setup raspberry pi to autostart chrome in kiosk mode when it boots up and open a locally hosted web application successfully. The web application will require keyboard and mouse for the user to ...
2
votes
2answers
2k views
Where is Raspberry Pi “Logout after inactivity” configuration
I recently downloaded and installed a standard Raspbian OS environment on my Pi. On my Ubuntu Laptop, "Logout after inactivity" is a standard setting, which I like a lot.
This is not active on my Pi, ...
6
votes
3answers
2k views
Disable ALL video outputs and USB Ports. Only remote access
I don't know if this is possible.
I'm hosting a web farm on raspberry pi (for fun).
And one of them is at friend's house. I can access the pi remotely using VNC.
How can i prevent my friend from ...
0
votes
1answer
2k views
Security implications of running my website on my raspberry pi [duplicate]
What are the security implications if I try to run my website from my home from a raspberry pi as a total noob?
Is it fine if I just follow one of the more common tutorials or should I better pay a ...
1
vote
1answer
722 views
Setting up a local server on raspberry pi, security concerns?
I would like to set up a local Apache server with PHP and MySQL on a raspberry pi for learning purposes.
To my understanding, the server is only accessible by devices connected to my home network.
...
58
votes
3answers
18k views
Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?
There are two new serious security flaws discovered, Spectre and Meltdown.
Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
0
votes
2answers
137 views
I secured my raspberrypi, should I also secure apache?
I am pretty sure this may come across as a pretty dumb question but I will ask it anyways. I took some measures to secure my raspberrypi (for example creating a new user and deleting pi, changing the ...
5
votes
2answers
19k views
Entrusted Certificates installation
I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
2
votes
1answer
315 views
How to port knock RealVnc?
I have been having some trouble with port knocking my VNC, as when I nmap my rpi, the vnc ports are still open, here is my config file (excuse the lame sequence, I haven't fully set it up yet) :
[...
15
votes
4answers
10k views
Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?
I have an updated RPI Zero W running Stretch.
The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out:
For the oldstable ...
1
vote
1answer
1k views
Hashing password longer than 14 characters in wpa_supplicant.conf
My college has a WPA2 Enterprise network, which I can connect to on my Pi after adding the network in wpa_supplicant.conf.
I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
0
votes
1answer
1k views
How to set up Wifi with EAP TTLS PAP + Proxy on Raspbian Jessie?
Sorry but I'm loosing my mind with the Wifi on Rapsbian Jessie.
Here is the thing : At work we have a secure Wifi connection. We had instructions to get connect via ANDROID terminals, as following :
...
