Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

1
vote
1answer
2k views

always-on security camera, uploading to cloud, looping video recording/saving

I'm trying to get started on a raspberry pi security camera project. It would function akin to a dash camera, with the following features: Always recording and saving 3-5 minute files Once the folder ...
0
votes
1answer
119 views

Jessie standard users

I am trying to figure out if my raspi was meddled with and users where created. What is the list of users created by default on jessie? (Release date: 2017-01-11) Here is a list from my machine after ...
1
vote
1answer
190 views

Detached Raspberry for secure key generation

I need to generate secure encryption keys but don't want to spend a lot of money on a dedicated Hardware Security Module. Would an air-gapped Raspberry with Raspbian be good for the job? Does it ...
3
votes
2answers
4k views

Presenting HTTP service securely with HTTPS

I've successfully configured a Motion webcam server for monitoring my puppy as he destroys the kitchen: The video is presented within an HTML page with allows for basic HTTP authentication, but is ...
1
vote
1answer
19k views

No SSH (Connection refused) using raspbian with pixel [duplicate]

Recently I updated my Raspbian image from a very old image to new Raspbian with PIXEL. On old image I had a lot of trash so I just dd'd a new SD card and inserted it to the rpi- I use Raspberry Pi 3. ...
0
votes
1answer
84 views

Using many individual Raspberry Pi's as monitoring systems in a 'business' usage setting

I want to use a lot (3000+) Raspberry Pi's in a country-wide service. I have been googling around, but I haven't found a similar usage-scenario so far. It made me wonder what would be against this ...
-1
votes
1answer
582 views

Requirements to build a poisontap

I'm new to single board computing and to hardware. I've found PoisonTap to be an interesting project, tough I've got no idea where to start. What would be a list of concepts I'd need to know in order ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.
-3
votes
1answer
1k views

Kali+Ubuntu+Parrot Security Armhf Image's on same multiboot SD card howto?

Ive installed a bunch of Armhf linux distros to the PI 3 and with allot of success. However i cannot find a good tutorial on installing them all on one SD Card. Im not talking about the preloaded OS'...
1
vote
1answer
1k views

System Calls From C Code

after many searches and tries, finally I found a way to protect my python code on my raspberry pi (for sure there is no 100% security), but let's say I made it a little bit harder. This method still ...
3
votes
4answers
3k views

Encrypt specific directory on raspberry pi

After hard searching for a way to protect my python code on raspberry pi from strangers access, finally, I'm convinced with all answers I read "No Way to protect python code". But I still searching ...
0
votes
1answer
163 views

Prevent strangers from logging into Raspberry Pi

I'm connecting a button that user can click to restart the Raspberry Pi if he faced any problems, because of this I don't want the Raspberry Pi to ask for user name and password on every boot or ...
2
votes
1answer
853 views

Motion on_movie_end run a python script and bash script

I am using Motion to record videos. I have a Python script which sends the video to me when it ends (sendvideo.py). I have a bash script that clears the folder (clearmedia.sh) I have tried the ...
2
votes
2answers
122 views

Newer Raspbian package installed than made available by Debian (prev: How do Raspbian (openssl) relate to debian openssl packages)?

In relation to my quest to understand security (fixes) on deb/Raspbian I keep finding myself in dead ends! :( For example: Another example happened today.. The openssl package openssl contains two ...
0
votes
1answer
939 views

Securing the Pi for use as a server

I want to use the Raspberry Pi 3 (B) as a web server and need SSH/VNC access. I will use VNC only over SSH, forwarding only port 22. Should I be worried about SSH? I removed user pi and created a new ...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
0
votes
2answers
218 views

Private/Secure port forwarded Apache server?

I'm trying to create a light automation system with my Raspberry Pi 2, PHP, Python and an Apache server. Unlike some people, I want to be able to access this server from anywhere in the world. The ...
2
votes
1answer
3k views

SELinux on Raspberry Pi 3 running CentOS 7

Issue I'm running CentOS 7 on a Raspberry Pi 3 (image here: http://buildlogs.centos.org/centos/7/isos/armhfp/CentOS-Userland-7-armv7hl-Minimal-1602-RaspberryPi3.img.xz). I'm attempting to enable ...
0
votes
1answer
107 views

How to get sure that the Internet connection has been correctly transfered?

I'm currently working on a project of making an highly secured router with my RaspberryPi to navigate anonymously on the net. Yet, I'm not able to correctly transfer the Internet connection to the new ...
2
votes
1answer
166 views

Is the Raspberry Pi safe

I just partnered with a company that is conducting a Facebook ad study. They sent me this CanaKit to attach to my computer in order to observe advertising info on facebook. I am not a programmer or ...
0
votes
1answer
797 views

How to secure my offline Raspberry Pi LAMP server against manipulation and copying?

I have spent a lot of time on researching on this topic but I haven't found any working solution for my problem respectively I'm not clear about some points. My goal is to distribute a encrypted/copy-...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
-3
votes
1answer
309 views

Network Wide Security / Access Control Software [closed]

Is there a way to have a network wide, intrusion / attack detection system running on a Raspberry Pi? Kinda like fail2ban but for everything as well as access control to restrict certain devices from ...
3
votes
1answer
459 views

How to fix glibc vulnerability CVE-2015-7547

https://www.debian.org/security/2016/dsa-3481 Do we need to wait for a RASPBIAN upgrade to be available here? https://www.raspberrypi.org/downloads/raspbian/ I ran: sudo apt-get update && ...
0
votes
2answers
92 views

Accessing files on Pi over HTTPS

I've installed Baracuda drive on my Raspberry Pi in order to access files located on an attached USB drive from a browser. This works well in my local network and now I want to open a port on my ...
4
votes
2answers
793 views

auth.log sshd entries

I set up my Raspberry a few weeks ago. Currently I just use it as an SSH server until I find the time to do something more interesting with it. The Raspberry runs a sshd server and is connected to my ...
7
votes
1answer
545 views

Is it still safe to use pidora?

Pidora is Fedora 20 based, Fedora 20 is in EOL (End Of Life). yum does not update anymore Is it still safe to use Pidora for hosting a webserver or fileserver?
1
vote
1answer
199 views

Strange things in my logs

So, I actually have set up my Raspberry Pi as a public web server. I have the port forwarding set up and my FTP and SSH can be accessed by me remotely. Now I was looking around in my logs yesterday ...
2
votes
1answer
277 views

What factor might have affected SSH host authentication?

Recently when connecting with SSH to my Raspberry Pi, I got a host authenticity warning. I am aware of the way SSH authenticates host and what this message means, however I have no clue what might ...
4
votes
2answers
6k views

How best to extend the PI with hardware decryption/encryption, TPM/HSM?

I am looking for a way to perform symmetric and/or asymmetric encryption on a separate chip (HSM) which can securely store encryption keys (write them to secure memory, perform encryption/decryption ...
2
votes
1answer
759 views

Linking a Home Alarm Siren to Raspi

I want to hook my home security system's alarm into my Raspi, so whenever the alarm is triggered, my Raspi sends me a text message. The gentleman who installed the system said whenever the siren goes ...
0
votes
3answers
809 views

Locking a C++ binary to the RPi serial number

I see that each RPi has a serial number that is accessible by reading /proc/cpuinfo. How secure is it for me to tie such serial number to my C++ binary when I want to lock that binary to a single RPi ...
0
votes
1answer
269 views

Lock down pi UI

I want my raspberry pi to boot to a UI (so I can RDP / VNC into it remotely) but I don't necessarily want people nearby to start poking around. How can I require a password upon login for the pi? I've ...
1
vote
2answers
784 views

sudo without password: More of an issue on Apple?

I asked this question over on the Raspberry Pi forums in an attempt to keep it low key, but I can't seem to find it now, so I'll ask it here. It is on-topic and definitely specific to the Raspberry Pi....
1
vote
3answers
965 views

Securing the PI against an attacker with physical access

I want to use the PI for a commercial data logging device that reports the data back to a cloud based server via the internet. There will potentially be thousands of PI's that are physically installed ...
0
votes
1answer
175 views

Multiple Raspberrys for different services

I'm currently running a Raspberry Pi 2 which hosts a mailserver environment (postfix, dovecot) a webserver (apache2, owncloud, roundcube) a VPN service (openVPN) and a backup service (rsnapshot). A ...
0
votes
2answers
4k views

Raspberry Pi passwordless SSH - refusing key

I'm following this tutorial: Raspberry Pi - SSH Public Key Authentication, but I'm generating the keys directly on my Raspberry. So this is exactly what I did: start a fresh Raspbian image ssh-...
3
votes
1answer
628 views

On-the-fly / mounted volume encryption for RPi

I have a Raspberry Pi B+, and I want a unitary, encrypted archive which I can read and write from/to at will. I want a single file on the RPi (or attached storage), which contains an entire directory ...
3
votes
3answers
2k views

Strange IP connected to ssh?

Just typed netstat and found this: Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 304 raspberrypi.home:ssh ...
4
votes
1answer
354 views

When I connect to the SSH for the first time

Whenever I connect for the first time to my raspberry pi, a message appears telling me to trust that 'fingerprint'. How do I know that that is my raspberry pi's fingerprint? When I search the web, I ...
9
votes
8answers
3k views

Copy Protection, Intellectual Protection and Deployment Issues

After a time with the Raspberry Pi 2 Model B v1.1., i have the following concerns? I know it is focused to enhance vulnerable educational sectors, but it is possible to sell a product, based on the ...
1
vote
1answer
95 views

Users and permissions on a Raspi which is both a home and an owncloud server [closed]

I'm a long time Linux desktop user but a total newbie in servers and security. Now I want to set up a Raspi (running Raspbian) to act as a CUPS print server, an NFS file server and backup storage, an ...
2
votes
2answers
152 views

Is it safe to post entire syslog to the net?

Is it safe to post the entire syslog from my PI to the web? Could someone use the data to hack into my pi? Could it make my network more vulnerable to attack?
2
votes
1answer
657 views

Can I use auditd on a Raspberry Pi?

auditd is a kernel demon that can snoop on users using your server. Can it be used on a Raspberry Pi?
3
votes
8answers
28k views

Default login in Raspberry is not working, how to go back to config screen?

I disabled the auto-login on our Raspberry and on raspi-config changed it to boot to console instead of booting straight to desktop, now its asking us to login first before booting up to the desktop (...
3
votes
2answers
4k views

Boot to Login Screen Raspberry

Currently the raspbian os we installed is not booting up with a login screen. How can I boot it up to a login screen so that we can enter a username & password and so that it doesn't go directly ...
1
vote
1answer
828 views

Manufacturer wanted: Raspberry Pi case without SD card slot / protected SD card slot

Is there any Raspberry Pi enclosure (beside self-made cases) that does not provide access to the SD card from outside or does cover the SD card so that the card cannot be directly accesed? Background:...
27
votes
1answer
36k views

How do I update OpenSSL on Raspbian

It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated ...
2
votes
2answers
1k views

How can you use face recognition on raspberry pi as a login to the pi?

I have created an owncloud server using RPI, Now I was wondering how to implement the face recognition as a login for the pi. I know I have to use the OpenCV.
3
votes
1answer
125 views

Raspberry pi memory

When you use a Raspberry Pi, the OS runs off of an SD card. Is anything being saved on the actual raspberry pi hardware when you remove the card? Said differently, say I create a password on a my RP ...