Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

Filter by
Sorted by
Tagged with
82
votes
4answers
92k views

What should be done to secure Raspberry Pi?

Having tens of thousands of Raspberry Pi's connected to the internet is eventually going to capture the interest of some people who would like to do unsavory things to the little computers especially ...
60
votes
3answers
19k views

How can I protect against intrusion and malware before connecting it to the internet (especially on a public IP address)?

With the large number of Raspberry Pis in the wild, and the fact that large groups of them are configured identically (when a newly-flashed SD card is installed with one of the few available images), ...
28
votes
5answers
25k views

How do I create a new user?

Are there any security implications for creating (or not creating) a new user? If need be, how do I create a new user or change the default user?
0
votes
1answer
1k views

How can I use scp/ssh in a cron script without entering a password?

I have a script that goes out to 5 other Rpi3 computers and collects data from them using scp and puts it all out on a flash drive. (Then later it gets picked up from the master Pi by a Windows Task ...
3
votes
1answer
2k views

Security issues in PHP executing PYTHON scrips

So I've got a PHP script thats capable of executing Python commands (to control GPIO), thanks to the users of StackExchange. My previous question here. Now I'm able to control the GPIO pins from a ...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
50
votes
5answers
85k views

Using the Raspberry Pi as a router?

Has anyone used their Raspberry Pi as a routing device? Mainly I want to use it to monitor my network, and it would be great if it had an input and output for Ethernet, but it doesn't, so I am ...
29
votes
1answer
36k views

How do I update OpenSSL on Raspbian

It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated ...
15
votes
4answers
10k views

Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?

I have an updated RPI Zero W running Stretch. The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out: For the oldstable ...
7
votes
2answers
2k views

Strange grep /etc/shadow command appearing in my logwatch

I'm seeing this entry in my daily logwatch output, sudo section: /bin/grep -E ^pi: /etc/shadow Should I be concerned? I certainly didn't run this command myself.
5
votes
2answers
13k views

Entrusted Certificates installation

I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine ...
4
votes
2answers
5k views

Boot to Login Screen Raspberry

Currently the raspbian os we installed is not booting up with a login screen. How can I boot it up to a login screen so that we can enter a username & password and so that it doesn't go directly ...
3
votes
1answer
265 views

Is the Raspberry Pi 4 vulnerable to the Spectre exploits?

Now the new Raspberry 4 has moved to ARM A72 cores, it's vulnerable to the spectre issues according to ARM. Processor Variant 1 Variant 2 Variant 3 Variant 3a Variant 4 Cortex-A72 Yes Yes**...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
1
vote
1answer
97 views

Users and permissions on a Raspi which is both a home and an owncloud server [closed]

I'm a long time Linux desktop user but a total newbie in servers and security. Now I want to set up a Raspi (running Raspbian) to act as a CUPS print server, an NFS file server and backup storage, an ...
0
votes
3answers
859 views

Locking a C++ binary to the RPi serial number

I see that each RPi has a serial number that is accessible by reading /proc/cpuinfo. How secure is it for me to tie such serial number to my C++ binary when I want to lock that binary to a single RPi ...