Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

Filter by
Sorted by
Tagged with
0
votes
0answers
36 views

How can I create an encrypted container on a Raspberry Pi 4?

I'm looking for a tool similar to Veracrypt, Boxcryptor or Cryptomator which runs on the Raspberry Pi 4 (armv8). The above mentioned apps don't seem to support the arm architecture (or at least not v8)...
1
vote
1answer
280 views

How to port knock RealVnc?

I have been having some trouble with port knocking my VNC, as when I nmap my rpi, the vnc ports are still open, here is my config file (excuse the lame sequence, I haven't fully set it up yet) : [...
1
vote
1answer
143 views

secure a raspberry pi so it can only run one application

Given that only a touch screen is accessible, how can I lock down a raspberry pi so that only one application (a calculator program) will run?
0
votes
1answer
306 views

How do I protect a port that I need to open for my VPN server?

I used the program pivpn to build my vpn server on a raspberry pi 3. When the build was completed, I forwarded the correct port in my router to my raspberry pi. Now I used one of the web programs on ...
0
votes
3answers
553 views

Raspbian using outdated openssh

I have been setting up a simple server, and was worried about some security risks. I found that the Pi is running openssh 6.7, when the most up to date version is 7.5. Tenable Nessus says this leads ...
0
votes
2answers
225 views

Private/Secure port forwarded Apache server?

I'm trying to create a light automation system with my Raspberry Pi 2, PHP, Python and an Apache server. Unlike some people, I want to be able to access this server from anywhere in the world. The ...
0
votes
0answers
96 views

Ensure Pi Connects Only to Trusted WiFi Network Via Certificate

This bleeds into Information Security Exchange, however I am posting it here: Suppose I am extremely paranoid and want to ensure my Pis only connect to WiFi access points with a certificate signed by ...
0
votes
1answer
1k views

Deploy hybrid Intrusion detection on R-pi

I have R-pi 2 model B, can i deploy IDS (Snort/ Bro) on it? I am following this [1] methodology. Any thoughts to proceed with this. Also can I run any ML algo alongwith IDS? does my pi support all [1]...
0
votes
1answer
73 views

Can malware persist in the Pi outside of the OS/SD card?

Please let me know if this question is more appropriate for Security. What kinds of damage can an attacker with physical access to a Pi cause? In a desktop PC or laptop, an attacker with physical ...
0
votes
1answer
938 views

How to set up Wifi with EAP TTLS PAP + Proxy on Raspbian Jessie?

Sorry but I'm loosing my mind with the Wifi on Rapsbian Jessie. Here is the thing : At work we have a secure Wifi connection. We had instructions to get connect via ANDROID terminals, as following : ...
0
votes
0answers
25 views

Logwatch problem

I'm trying to send logs to my email. I'm doing this via SSH. I edited the file: /usr/share/logwatch/default.conf/logwatch.conf and edited these lines: Output = mail Format = html Encode = none ...
58
votes
3answers
18k views

Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?

There are two new serious security flaws discovered, Spectre and Meltdown. Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
1
vote
1answer
198 views

Why is OP-TEE for Raspberry Pi3 insecure?

The OP-TEE on Raspberry Pi 3 webpage says, This port of ARM Trusted Firmware and OP-TEE to Raspberry Pi3 IS NOT SECURE! Although the Raspberry Pi3 processor provides ARM TrustZone exception ...
1
vote
1answer
57 views

Bind sd card to a specific raspberry Pi

Is it possible to tie an SD card to a Raspberry Pi? I want it this way if you try the SD card in another Raspberry Pi that Linux does not start or that the SD card formats itself. Furthermore, it ...
1
vote
0answers
579 views

Protecting the on-board flash memory content on Raspberry Pi 3 SOM

I'm using the Raspberry Pi Compute Module 3 (CM3) in my latest hardware product for networking and user interface function, as it has small form factor and solid availability (until 2023 according to ...
3
votes
2answers
5k views

Presenting HTTP service securely with HTTPS

I've successfully configured a Motion webcam server for monitoring my puppy as he destroys the kitchen: The video is presented within an HTML page with allows for basic HTTP authentication, but is ...
0
votes
1answer
40 views

Would it be possible to set up a security system like the one in jurassic park? [closed]

Would it be possible to set up a security system like the one in jurassic park (the book) using raspberry pi's? If so, how much time would it take, and how much would it cost? Using python as the ...
1
vote
1answer
719 views

Where is Raspberry Pi “Logout after inactivity” configuration

I recently downloaded and installed a standard Raspbian OS environment on my Pi. On my Ubuntu Laptop, "Logout after inactivity" is a standard setting, which I like a lot. This is not active on my Pi, ...
3
votes
1answer
263 views

Is the Raspberry Pi 4 vulnerable to the Spectre exploits?

Now the new Raspberry 4 has moved to ARM A72 cores, it's vulnerable to the spectre issues according to ARM. Processor Variant 1 Variant 2 Variant 3 Variant 3a Variant 4 Cortex-A72 Yes Yes**...
0
votes
0answers
55 views

How do you set up Squid Proxy behind DHCP router?

I installed Squid on my RPi-3 for use behind a DHCP router. However, the pi will not route traffic back and forth between my computer because my router's DHCP settings. I don't want to give my router ...
17
votes
3answers
23k views

Is there a way to perform a full system encryption of Raspbian?

My Question is: I'd like to use my Raspbian encrypted, just like it is standard on Debian, Ubuntu or other Linux-Distros. My Problem: Technically, you are not installing Raspbian on a Raspberry Pi or ...
1
vote
1answer
321 views

UFW Enabled, but not starting upon Pi reboot

I am running servers on several Pi's for VPN, OpenTTD, etc. I have installed ufw on all of them to try and keep them a little more secure. The server running the VPN is causing some issues as ufw ...
3
votes
1answer
296 views

Translation request for News re wpasupplicant during upgrade

During a routine upgrade (sudo apt-get upgrade), the following "news" appeared in my terminal window: apt-listchanges: News --------------------- wpasupplicant (2:2.6-19) unstable; urgency=medium ...
1
vote
1answer
57 views

Why is /boot/config.txt executable?

FYI, I installed the R-PI minimal image with dd myself onto an sd card I was messing with the boot config when I realized that this file was set as executable. Looking at the config, I don't see why ...
0
votes
1answer
51 views

Raspbian Password Security

I'm building a Raspberry pi Raspbian server and wanted to know how secure the passwords are, as I intend to forward the port. Is it possible to SSH into a machine without the password? Any input is ...
2
votes
1answer
689 views

What is the purpose of auto-login? Is it safe/secure?

Please excuse my ignorance. I have searched and I haven't found anything that addresses my question. What is the purpose of auto-login and is it safe to enable? I am using my Pi 3B to host a very ...
3
votes
8answers
31k views

Default login in Raspberry is not working, how to go back to config screen?

I disabled the auto-login on our Raspberry and on raspi-config changed it to boot to console instead of booting straight to desktop, now its asking us to login first before booting up to the desktop (...
1
vote
1answer
36 views

Only allow a specific peripheral to be connected to a USB port

I am turning my raspberry pi prototype device into a market product. The data and the program running on the pi must be protected. But we have a USB webcam attached to it (provided by us, hence we ...
3
votes
4answers
3k views

Encrypt specific directory on raspberry pi

After hard searching for a way to protect my python code on raspberry pi from strangers access, finally, I'm convinced with all answers I read "No Way to protect python code". But I still searching ...
1
vote
1answer
54 views

Can the GPIO pins be used to compromise a raspberry pi?

For example, would a touchscreen device that uses the below pins on a Raspberry Pi 3 be able to do something more than say, send touch and keyboard events? Anything hackish/nefarious? (edit: use case: ...
1
vote
0answers
25 views

Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs [closed]

I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com I have provided a method for installing LUKS full disk encryption seen at the following: https:/...
1
vote
2answers
391 views

wpa_supplicant.conf in raspberry pi 3

In order to have my raspberry pi access using ssh (on wifi) i Created a wpa_supplicant.conf file with necessary details Created an empty file 'ssh' My question was around security. Is it secure to ...
5
votes
2answers
13k views

Entrusted Certificates installation

I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
1
vote
2answers
265 views

Can a Raspberry Pi be firmware updated? Inquiring from a security perspective

Can a Raspberry Pi be firmware updated?...I have a feeling from the suggested questions I'm being offered, the answer is yes. I'm actually asking this from a security perspective, not because I ...
4
votes
1answer
1k views

Official “securing your pi” guide recommends blocking port 30 from 192.168.2.1 - why?

The official "securing your pi" guide from the Raspberry Pi foundation recommends installing the "uncomplicated firewall" (ufw) and adding a rule to deny access to port 30 from 192.168.2.1: sudo ufw ...
1
vote
1answer
110 views

PiCamera Motion Error

I am using the Raspberry Pi 3 B+ w/ Raspbian Stretch. I am currently unable to view the video stream on port 8080 or 8081. When I start the command: motion -s "test" recipientemailhere This is what ...
0
votes
1answer
577 views

Password Changes Not Persisting After Shutdown or Logoff

If I change the password of user pi (rpi 3b, NOOBS, Raspbian Jessie), it takes affect only until shutting down or logging off. After shutting down or logging off, the new password is no longer current....
1
vote
0answers
129 views

Securing Raspberry Pi 3B+ Web Server with NAS [closed]

I have been researching about the security threats to a web server. It makes me want to secure my own on my Raspbian OS system. What are the list of things that are recommended or optional to install ...
1
vote
1answer
477 views

What encryption to choose for secure directory on USB Storage? [closed]

I need to choose encryption tool to secure my USB stored files, and I'm stuck with tools like VeraCrypt, ecryptfs or dm-crypt. The task is to encrypt folder or virtual disk that could be mounted as ...
3
votes
2answers
58 views

how to make sure that some code is working on a rpi?

Is it possible to use some (signing) service from the rpi itself that would allow us to make sure of 2 things? Code is running on a raspberry Code is running on a certain raspberry box and not ...
1
vote
3answers
1k views

Securing the PI against an attacker with physical access

I want to use the PI for a commercial data logging device that reports the data back to a cloud based server via the internet. There will potentially be thousands of PI's that are physically installed ...
10
votes
8answers
3k views

Copy Protection, Intellectual Protection and Deployment Issues

After a time with the Raspberry Pi 2 Model B v1.1., i have the following concerns? I know it is focused to enhance vulnerable educational sectors, but it is possible to sell a product, based on the ...
3
votes
1answer
2k views

Security of using Raspberry Pi for online banking

I would like to use Raspberry Pi 3 as a dedicated machine for online banking, but I am not sure if it can be made secure enough. I think about using Raspberry Pi with raspbian. It would be connected ...
0
votes
1answer
107 views

Which Distro provides Timely Security Updates and have the longest support cycle for Raspberry Pi 1,2 & 3? [closed]

I am looking for a Linux Distro that provides timely security updates for all Raspberry Pi variants. Please indicate if the update life-cycle is released based (preferred) or rolling/continuous. ...
0
votes
1answer
1k views

Raspbian Stretch Strict chromium strict kiosk mode

I have setup raspberry pi to autostart chrome in kiosk mode when it boots up and open a locally hosted web application successfully. The web application will require keyboard and mouse for the user to ...
6
votes
3answers
2k views

Disable ALL video outputs and USB Ports. Only remote access

I don't know if this is possible. I'm hosting a web farm on raspberry pi (for fun). And one of them is at friend's house. I can access the pi remotely using VNC. How can i prevent my friend from ...
0
votes
1answer
1k views

Security implications of running my website on my raspberry pi [duplicate]

What are the security implications if I try to run my website from my home from a raspberry pi as a total noob? Is it fine if I just follow one of the more common tutorials or should I better pay a ...
1
vote
1answer
659 views

Setting up a local server on raspberry pi, security concerns?

I would like to set up a local Apache server with PHP and MySQL on a raspberry pi for learning purposes. To my understanding, the server is only accessible by devices connected to my home network. ...
0
votes
2answers
109 views

I secured my raspberrypi, should I also secure apache?

I am pretty sure this may come across as a pretty dumb question but I will ask it anyways. I took some measures to secure my raspberrypi (for example creating a new user and deleting pi, changing the ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.