Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

0
votes
0answers
16 views

How do you set up Squid Proxy behind DHCP router?

I installed Squid on my RPi-3 for use behind a DHCP router. However, the pi will not route traffic back and forth between my computer because my router's DHCP settings. I don't want to give my router ...
1
vote
1answer
257 views

How to port knock RealVnc?

I have been having some trouble with port knocking my VNC, as when I nmap my rpi, the vnc ports are still open, here is my config file (excuse the lame sequence, I haven't fully set it up yet) : [...
1
vote
1answer
134 views

secure a raspberry pi so it can only run one application

Given that only a touch screen is accessible, how can I lock down a raspberry pi so that only one application (a calculator program) will run?
0
votes
1answer
268 views

How do I protect a port that I need to open for my VPN server?

I used the program pivpn to build my vpn server on a raspberry pi 3. When the build was completed, I forwarded the correct port in my router to my raspberry pi. Now I used one of the web programs on ...
0
votes
3answers
457 views

Raspbian using outdated openssh

I have been setting up a simple server, and was worried about some security risks. I found that the Pi is running openssh 6.7, when the most up to date version is 7.5. Tenable Nessus says this leads ...
0
votes
2answers
218 views

Private/Secure port forwarded Apache server?

I'm trying to create a light automation system with my Raspberry Pi 2, PHP, Python and an Apache server. Unlike some people, I want to be able to access this server from anywhere in the world. The ...
15
votes
3answers
21k views

Is there a way to perform a full system encryption of Raspbian?

My Question is: I'd like to use my Raspbian encrypted, just like it is standard on Debian, Ubuntu or other Linux-Distros. My Problem: Technically, you are not installing Raspbian on a Raspberry Pi or ...
0
votes
1answer
846 views

Deploy hybrid Intrusion detection on R-pi

I have R-pi 2 model B, can i deploy IDS (Snort/ Bro) on it? I am following this [1] methodology. Any thoughts to proceed with this. Also can I run any ML algo alongwith IDS? does my pi support all [1]...
0
votes
1answer
801 views

How to set up Wifi with EAP TTLS PAP + Proxy on Raspbian Jessie?

Sorry but I'm loosing my mind with the Wifi on Rapsbian Jessie. Here is the thing : At work we have a secure Wifi connection. We had instructions to get connect via ANDROID terminals, as following : ...
1
vote
1answer
86 views

UFW Enabled, but not starting upon Pi reboot

I am running servers on several Pi's for VPN, OpenTTD, etc. I have installed ufw on all of them to try and keep them a little more secure. The server running the VPN is causing some issues as ufw ...
1
vote
1answer
126 views

Why is OP-TEE for Raspberry Pi3 insecure?

The OP-TEE on Raspberry Pi 3 webpage says, This port of ARM Trusted Firmware and OP-TEE to Raspberry Pi3 IS NOT SECURE! Although the Raspberry Pi3 processor provides ARM TrustZone exception ...
2
votes
1answer
211 views

Translation request for News re wpasupplicant during upgrade

During a routine upgrade (sudo apt-get upgrade), the following "news" appeared in my terminal window: apt-listchanges: News --------------------- wpasupplicant (2:2.6-19) unstable; urgency=medium ...
1
vote
1answer
49 views

Why is /boot/config.txt executable?

FYI, I installed the R-PI minimal image with dd myself onto an sd card I was messing with the boot config when I realized that this file was set as executable. Looking at the config, I don't see why ...
0
votes
1answer
44 views

Raspbian Password Security

I'm building a Raspberry pi Raspbian server and wanted to know how secure the passwords are, as I intend to forward the port. Is it possible to SSH into a machine without the password? Any input is ...
1
vote
1answer
431 views

Where is Raspberry Pi “Logout after inactivity” configuration

I recently downloaded and installed a standard Raspbian OS environment on my Pi. On my Ubuntu Laptop, "Logout after inactivity" is a standard setting, which I like a lot. This is not active on my Pi, ...
2
votes
1answer
646 views

What is the purpose of auto-login? Is it safe/secure?

Please excuse my ignorance. I have searched and I haven't found anything that addresses my question. What is the purpose of auto-login and is it safe to enable? I am using my Pi 3B to host a very ...
3
votes
8answers
28k views

Default login in Raspberry is not working, how to go back to config screen?

I disabled the auto-login on our Raspberry and on raspi-config changed it to boot to console instead of booting straight to desktop, now its asking us to login first before booting up to the desktop (...
1
vote
1answer
33 views

Only allow a specific peripheral to be connected to a USB port

I am turning my raspberry pi prototype device into a market product. The data and the program running on the pi must be protected. But we have a USB webcam attached to it (provided by us, hence we ...
3
votes
4answers
2k views

Encrypt specific directory on raspberry pi

After hard searching for a way to protect my python code on raspberry pi from strangers access, finally, I'm convinced with all answers I read "No Way to protect python code". But I still searching ...
1
vote
1answer
47 views

Can the GPIO pins be used to compromise a raspberry pi?

For example, would a touchscreen device that uses the below pins on a Raspberry Pi 3 be able to do something more than say, send touch and keyboard events? Anything hackish/nefarious? (edit: use case: ...
1
vote
0answers
24 views

Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs [closed]

I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com I have provided a method for installing LUKS full disk encryption seen at the following: https:/...
1
vote
2answers
241 views

wpa_supplicant.conf in raspberry pi 3

In order to have my raspberry pi access using ssh (on wifi) i Created a wpa_supplicant.conf file with necessary details Created an empty file 'ssh' My question was around security. Is it secure to ...
5
votes
2answers
10k views

Entrusted Certificates installation

I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
1
vote
2answers
154 views

Can a Raspberry Pi be firmware updated? Inquiring from a security perspective

Can a Raspberry Pi be firmware updated?...I have a feeling from the suggested questions I'm being offered, the answer is yes. I'm actually asking this from a security perspective, not because I ...
4
votes
1answer
1k views

Official “securing your pi” guide recommends blocking port 30 from 192.168.2.1 - why?

The official "securing your pi" guide from the Raspberry Pi foundation recommends installing the "uncomplicated firewall" (ufw) and adding a rule to deny access to port 30 from 192.168.2.1: sudo ufw ...
1
vote
1answer
89 views

PiCamera Motion Error

I am using the Raspberry Pi 3 B+ w/ Raspbian Stretch. I am currently unable to view the video stream on port 8080 or 8081. When I start the command: motion -s "test" recipientemailhere This is what ...
0
votes
1answer
531 views

Password Changes Not Persisting After Shutdown or Logoff

If I change the password of user pi (rpi 3b, NOOBS, Raspbian Jessie), it takes affect only until shutting down or logging off. After shutting down or logging off, the new password is no longer current....
1
vote
0answers
119 views

Securing Raspberry Pi 3B+ Web Server with NAS [closed]

I have been researching about the security threats to a web server. It makes me want to secure my own on my Raspbian OS system. What are the list of things that are recommended or optional to install ...
1
vote
1answer
367 views

What encryption to choose for secure directory on USB Storage? [closed]

I need to choose encryption tool to secure my USB stored files, and I'm stuck with tools like VeraCrypt, ecryptfs or dm-crypt. The task is to encrypt folder or virtual disk that could be mounted as ...
2
votes
2answers
56 views

how to make sure that some code is working on a rpi?

Is it possible to use some (signing) service from the rpi itself that would allow us to make sure of 2 things? Code is running on a raspberry Code is running on a certain raspberry box and not ...
3
votes
2answers
4k views

Presenting HTTP service securely with HTTPS

I've successfully configured a Motion webcam server for monitoring my puppy as he destroys the kitchen: The video is presented within an HTML page with allows for basic HTTP authentication, but is ...
1
vote
3answers
959 views

Securing the PI against an attacker with physical access

I want to use the PI for a commercial data logging device that reports the data back to a cloud based server via the internet. There will potentially be thousands of PI's that are physically installed ...
1
vote
0answers
535 views

Protecting the on-board flash memory content on Raspberry Pi 3 SOM

I'm using the Raspberry Pi Compute Module 3 (CM3) in my latest hardware product for networking and user interface function, as it has small form factor and solid availability (until 2023 according to ...
9
votes
8answers
3k views

Copy Protection, Intellectual Protection and Deployment Issues

After a time with the Raspberry Pi 2 Model B v1.1., i have the following concerns? I know it is focused to enhance vulnerable educational sectors, but it is possible to sell a product, based on the ...
3
votes
1answer
2k views

Security of using Raspberry Pi for online banking

I would like to use Raspberry Pi 3 as a dedicated machine for online banking, but I am not sure if it can be made secure enough. I think about using Raspberry Pi with raspbian. It would be connected ...
0
votes
1answer
96 views

Which Distro provides Timely Security Updates and have the longest support cycle for Raspberry Pi 1,2 & 3? [closed]

I am looking for a Linux Distro that provides timely security updates for all Raspberry Pi variants. Please indicate if the update life-cycle is released based (preferred) or rolling/continuous. ...
0
votes
1answer
1k views

Raspbian Stretch Strict chromium strict kiosk mode

I have setup raspberry pi to autostart chrome in kiosk mode when it boots up and open a locally hosted web application successfully. The web application will require keyboard and mouse for the user to ...
7
votes
3answers
2k views

Disable ALL video outputs and USB Ports. Only remote access

I don't know if this is possible. I'm hosting a web farm on raspberry pi (for fun). And one of them is at friend's house. I can access the pi remotely using VNC. How can i prevent my friend from ...
0
votes
1answer
1k views

Security implications of running my website on my raspberry pi [duplicate]

What are the security implications if I try to run my website from my home from a raspberry pi as a total noob? Is it fine if I just follow one of the more common tutorials or should I better pay a ...
1
vote
1answer
600 views

Setting up a local server on raspberry pi, security concerns?

I would like to set up a local Apache server with PHP and MySQL on a raspberry pi for learning purposes. To my understanding, the server is only accessible by devices connected to my home network. ...
57
votes
3answers
18k views

Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?

There are two new serious security flaws discovered, Spectre and Meltdown. Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
0
votes
2answers
99 views

I secured my raspberrypi, should I also secure apache?

I am pretty sure this may come across as a pretty dumb question but I will ask it anyways. I took some measures to secure my raspberrypi (for example creating a new user and deleting pi, changing the ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.
15
votes
4answers
9k views

Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?

I have an updated RPI Zero W running Stretch. The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out: For the oldstable ...
2
votes
2answers
122 views

Newer Raspbian package installed than made available by Debian (prev: How do Raspbian (openssl) relate to debian openssl packages)?

In relation to my quest to understand security (fixes) on deb/Raspbian I keep finding myself in dead ends! :( For example: Another example happened today.. The openssl package openssl contains two ...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
1
vote
1answer
681 views

Hashing password longer than 14 characters in wpa_supplicant.conf

My college has a WPA2 Enterprise network, which I can connect to on my Pi after adding the network in wpa_supplicant.conf. I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
3
votes
1answer
6k views

RaspberryPi as a passive Man in the Middle

I think about using a Pi to sniff LAN traffic in an fixed environment. Main problem is that the Pi should not have an IP adress nor being "visible" in the network. I got an second lan interface (USB) ...
0
votes
1answer
215 views

Can you use google's Chrome on Raspberry 3 with Raspbian (not Chromium)? [duplicate]

I would like to know: can one use Google Chrome (not Chromium) on a Raspberry 3 running Raspbian or is it too heavy for the Pi 3? The reason is that I would like to get the more frequent and ...
1
vote
1answer
918 views

How to run program that accesses GPIO as remote application in Eclipse?

Cross-compilation with remote launch from Eclipse is very useful approach to develop RaspberryPi applications. There is a serious security problem however. One who need access to GPIO (ex, using ...