Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

81
votes
4answers
91k views

What should be done to secure Raspberry Pi?

Having tens of thousands of Raspberry Pi's connected to the internet is eventually going to capture the interest of some people who would like to do unsavory things to the little computers especially ...
59
votes
3answers
19k views

How can I protect against intrusion and malware before connecting it to the internet (especially on a public IP address)?

With the large number of Raspberry Pis in the wild, and the fact that large groups of them are configured identically (when a newly-flashed SD card is installed with one of the few available images), ...
27
votes
5answers
25k views

How do I create a new user?

Are there any security implications for creating (or not creating) a new user? If need be, how do I create a new user or change the default user?
0
votes
1answer
915 views

How can I use scp/ssh in a cron script without entering a password?

I have a script that goes out to 5 other Rpi3 computers and collects data from them using scp and puts it all out on a flash drive. (Then later it gets picked up from the master Pi by a Windows Task ...
3
votes
1answer
2k views

Security issues in PHP executing PYTHON scrips

So I've got a PHP script thats capable of executing Python commands (to control GPIO), thanks to the users of StackExchange. My previous question here. Now I'm able to control the GPIO pins from a ...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
49
votes
5answers
85k views

Using the Raspberry Pi as a router?

Has anyone used their Raspberry Pi as a routing device? Mainly I want to use it to monitor my network, and it would be great if it had an input and output for Ethernet, but it doesn't, so I am ...
27
votes
1answer
35k views

How do I update OpenSSL on Raspbian

It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated ...
15
votes
4answers
9k views

Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?

I have an updated RPI Zero W running Stretch. The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out: For the oldstable ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.
5
votes
2answers
10k views

Entrusted Certificates installation

I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
3
votes
2answers
4k views

Boot to Login Screen Raspberry

Currently the raspbian os we installed is not booting up with a login screen. How can I boot it up to a login screen so that we can enter a username & password and so that it doesn't go directly ...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
1
vote
2answers
245 views

wpa_supplicant.conf in raspberry pi 3

In order to have my raspberry pi access using ssh (on wifi) i Created a wpa_supplicant.conf file with necessary details Created an empty file 'ssh' My question was around security. Is it secure to ...
1
vote
1answer
95 views

Users and permissions on a Raspi which is both a home and an owncloud server [closed]

I'm a long time Linux desktop user but a total newbie in servers and security. Now I want to set up a Raspi (running Raspbian) to act as a CUPS print server, an NFS file server and backup storage, an ...
0
votes
3answers
808 views

Locking a C++ binary to the RPi serial number

I see that each RPi has a serial number that is accessible by reading /proc/cpuinfo. How secure is it for me to tie such serial number to my C++ binary when I want to lock that binary to a single RPi ...