Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

81
votes
4answers
91k views

What should be done to secure Raspberry Pi?

Having tens of thousands of Raspberry Pi's connected to the internet is eventually going to capture the interest of some people who would like to do unsavory things to the little computers especially ...
59
votes
3answers
19k views

How can I protect against intrusion and malware before connecting it to the internet (especially on a public IP address)?

With the large number of Raspberry Pis in the wild, and the fact that large groups of them are configured identically (when a newly-flashed SD card is installed with one of the few available images), ...
57
votes
3answers
18k views

Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?

There are two new serious security flaws discovered, Spectre and Meltdown. Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
49
votes
5answers
85k views

Using the Raspberry Pi as a router?

Has anyone used their Raspberry Pi as a routing device? Mainly I want to use it to monitor my network, and it would be great if it had an input and output for Ethernet, but it doesn't, so I am ...
27
votes
5answers
25k views

How do I create a new user?

Are there any security implications for creating (or not creating) a new user? If need be, how do I create a new user or change the default user?
27
votes
1answer
36k views

How do I update OpenSSL on Raspbian

It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated ...
23
votes
2answers
25k views

How do I encrypt my Raspberry?

The Raspberry is all well and nice and can run pretty quick. But how can I protect my SD card from offline data attacks. SSH can be protected with a good password or a SSH key but if somebody gets ...
15
votes
4answers
9k views

Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?

I have an updated RPI Zero W running Stretch. The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out: For the oldstable ...
15
votes
3answers
21k views

Is there a way to perform a full system encryption of Raspbian?

My Question is: I'd like to use my Raspbian encrypted, just like it is standard on Debian, Ubuntu or other Linux-Distros. My Problem: Technically, you are not installing Raspbian on a Raspberry Pi or ...
13
votes
1answer
14k views

Raspberry Pi as a Linux firewall?

Can I use the Raspberry Pi as a Linux firewall? Can anyone tell me the best way of doing this? Including network connection details and hardware I may need.
10
votes
1answer
2k views

Self destruct: self erase all data on SD card using shred, dd or some other method

I will be using a Raspberry Pi as an air-gapped computer to make secure encrypted transactions on the Ethereum BlockChain. Once in awhile I will want to update the software I am using which will ...
9
votes
8answers
3k views

Copy Protection, Intellectual Protection and Deployment Issues

After a time with the Raspberry Pi 2 Model B v1.1., i have the following concerns? I know it is focused to enhance vulnerable educational sectors, but it is possible to sell a product, based on the ...
9
votes
2answers
15k views

Are there any issues changing default username in Raspbian or Raspbmc?

I know that security by obscurity is not real security, however, why make it easy by keeping a well known username such as "pi". Therefore, what are the implications to changing the username of "pi" ...
7
votes
3answers
2k views

Disable ALL video outputs and USB Ports. Only remote access

I don't know if this is possible. I'm hosting a web farm on raspberry pi (for fun). And one of them is at friend's house. I can access the pi remotely using VNC. How can i prevent my friend from ...
7
votes
4answers
8k views

Locking down Raspbian to only allow limited features

In a public environment a computer can get a lot of abuse, leading to system failures, viruses, compromised security, etc. In many schools, the computers are setup to only allow basic features to be ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.
7
votes
1answer
545 views

Is it still safe to use pidora?

Pidora is Fedora 20 based, Fedora 20 is in EOL (End Of Life). yum does not update anymore Is it still safe to use Pidora for hosting a webserver or fileserver?
5
votes
2answers
10k views

Entrusted Certificates installation

I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
5
votes
1answer
2k views

Security issue on raspberry pi: too many open connections?

I have just run netstat on my raspberry pi and found out there more than 100 (!) open connections. Is this something I should be worried about? How do I stop my rasp pi from opening so many ...
4
votes
2answers
793 views

auth.log sshd entries

I set up my Raspberry a few weeks ago. Currently I just use it as an SSH server until I find the time to do something more interesting with it. The Raspberry runs a sshd server and is connected to my ...
4
votes
1answer
1k views

Official “securing your pi” guide recommends blocking port 30 from 192.168.2.1 - why?

The official "securing your pi" guide from the Raspberry Pi foundation recommends installing the "uncomplicated firewall" (ufw) and adding a rule to deny access to port 30 from 192.168.2.1: sudo ufw ...
4
votes
2answers
6k views

How best to extend the PI with hardware decryption/encryption, TPM/HSM?

I am looking for a way to perform symmetric and/or asymmetric encryption on a separate chip (HSM) which can securely store encryption keys (write them to secure memory, perform encryption/decryption ...
4
votes
1answer
354 views

When I connect to the SSH for the first time

Whenever I connect for the first time to my raspberry pi, a message appears telling me to trust that 'fingerprint'. How do I know that that is my raspberry pi's fingerprint? When I search the web, I ...
4
votes
3answers
3k views

peerguardian / moblock installation on raspbmc

Since I'm thinking of using my pi to do some downloads, i would like to setup a peerblock/peerguardian equivalent. I searched the internet, and I've found this. i'm using latest raspbmc, cat /...
4
votes
1answer
3k views

Simple TOR gateway

I've got some problems with a simple TOR project I'm actually working on. My goal is to have TOR running on my Pi, so I can browse the web anonymously from another computer (on the same ethernet LAN) ...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
3
votes
1answer
2k views

Security issues in PHP executing PYTHON scrips

So I've got a PHP script thats capable of executing Python commands (to control GPIO), thanks to the users of StackExchange. My previous question here. Now I'm able to control the GPIO pins from a ...
3
votes
1answer
459 views

How to fix glibc vulnerability CVE-2015-7547

https://www.debian.org/security/2016/dsa-3481 Do we need to wait for a RASPBIAN upgrade to be available here? https://www.raspberrypi.org/downloads/raspbian/ I ran: sudo apt-get update && ...
3
votes
3answers
2k views

Strange IP connected to ssh?

Just typed netstat and found this: Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 304 raspberrypi.home:ssh ...
3
votes
1answer
125 views

Raspberry pi memory

When you use a Raspberry Pi, the OS runs off of an SD card. Is anything being saved on the actual raspberry pi hardware when you remove the card? Said differently, say I create a password on a my RP ...
3
votes
1answer
6k views

RaspberryPi as a passive Man in the Middle

I think about using a Pi to sniff LAN traffic in an fixed environment. Main problem is that the Pi should not have an IP adress nor being "visible" in the network. I got an second lan interface (USB) ...
3
votes
1answer
2k views

Security of using Raspberry Pi for online banking

I would like to use Raspberry Pi 3 as a dedicated machine for online banking, but I am not sure if it can be made secure enough. I think about using Raspberry Pi with raspbian. It would be connected ...
3
votes
8answers
28k views

Default login in Raspberry is not working, how to go back to config screen?

I disabled the auto-login on our Raspberry and on raspi-config changed it to boot to console instead of booting straight to desktop, now its asking us to login first before booting up to the desktop (...
3
votes
4answers
3k views

Encrypt specific directory on raspberry pi

After hard searching for a way to protect my python code on raspberry pi from strangers access, finally, I'm convinced with all answers I read "No Way to protect python code". But I still searching ...
3
votes
1answer
628 views

On-the-fly / mounted volume encryption for RPi

I have a Raspberry Pi B+, and I want a unitary, encrypted archive which I can read and write from/to at will. I want a single file on the RPi (or attached storage), which contains an entire directory ...
3
votes
2answers
4k views

Boot to Login Screen Raspberry

Currently the raspbian os we installed is not booting up with a login screen. How can I boot it up to a login screen so that we can enter a username & password and so that it doesn't go directly ...
3
votes
1answer
88 views

Running a small HTLM5 website on a RPi3B when it has no fixed IP [closed]

I'm planning on making my first web-server. My plan is to use a RPi3B (or RPi3A if it comes without wifi and bluetooth, but with ethernet) for it. But because I'm new to web-servers I've a couple of ...
3
votes
2answers
4k views

Presenting HTTP service securely with HTTPS

I've successfully configured a Motion webcam server for monitoring my puppy as he destroys the kitchen: The video is presented within an HTML page with allows for basic HTTP authentication, but is ...
2
votes
1answer
649 views

What is the purpose of auto-login? Is it safe/secure?

Please excuse my ignorance. I have searched and I haven't found anything that addresses my question. What is the purpose of auto-login and is it safe to enable? I am using my Pi 3B to host a very ...
2
votes
4answers
3k views

Restrict remote access to Pi from ONE computer

Disclaimer: I am not sure if this is a question for the Pi StackExchange site, but I am posting it here anyway. If it should be moved elsewhere, please do not hesitate to suggest where it should be ...
2
votes
4answers
11k views

Network Security Toolkit on a Raspberry Pi

I am planning on putting either the NST (http://www.networksecuritytoolkit.org/nst/index.html) on my Pi or just downloading a lot of similar tools and then using my Pi as a security device to monitor ...
2
votes
2answers
152 views

Is it safe to post entire syslog to the net?

Is it safe to post the entire syslog from my PI to the web? Could someone use the data to hack into my pi? Could it make my network more vulnerable to attack?
2
votes
1answer
166 views

Is the Raspberry Pi safe

I just partnered with a company that is conducting a Facebook ad study. They sent me this CanaKit to attach to my computer in order to observe advertising info on facebook. I am not a programmer or ...
2
votes
2answers
926 views

Raspberry Pi Air gap

can i Use a Raspberry Pi as a air gap set up? I have heard that some people will use a separate computer for decrypting messages. When they revive a message they will put it on a thumb drive and then ...
2
votes
2answers
1k views

How can you use face recognition on raspberry pi as a login to the pi?

I have created an owncloud server using RPI, Now I was wondering how to implement the face recognition as a login for the pi. I know I have to use the OpenCV.
2
votes
3answers
910 views

How to play my music on my RPI outside my local network

I have ripped all my CDs to a hard drive. The hard drive is connected to my RPI at home, and I use it to play my music on my stereo and control it with my mobile using WIFI. Currently I'm using ...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
2
votes
1answer
218 views

Translation request for News re wpasupplicant during upgrade

During a routine upgrade (sudo apt-get upgrade), the following "news" appeared in my terminal window: apt-listchanges: News --------------------- wpasupplicant (2:2.6-19) unstable; urgency=medium ...
2
votes
2answers
122 views

Newer Raspbian package installed than made available by Debian (prev: How do Raspbian (openssl) relate to debian openssl packages)?

In relation to my quest to understand security (fixes) on deb/Raspbian I keep finding myself in dead ends! :( For example: Another example happened today.. The openssl package openssl contains two ...
2
votes
1answer
3k views

SELinux on Raspberry Pi 3 running CentOS 7

Issue I'm running CentOS 7 on a Raspberry Pi 3 (image here: http://buildlogs.centos.org/centos/7/isos/armhfp/CentOS-Userland-7-armv7hl-Minimal-1602-RaspberryPi3.img.xz). I'm attempting to enable ...