Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

Filter by
Sorted by
Tagged with
15
votes
4answers
10k views

Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?

I have an updated RPI Zero W running Stretch. The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out: For the oldstable ...
2
votes
2answers
126 views

Newer Raspbian package installed than made available by Debian (prev: How do Raspbian (openssl) relate to debian openssl packages)?

In relation to my quest to understand security (fixes) on deb/Raspbian I keep finding myself in dead ends! :( For example: Another example happened today.. The openssl package openssl contains two ...
3
votes
3answers
1k views

Air-gapping the Raspberry Pi 3

One thing I love about my Raspberry Pi 2 is that I can use them as tiny air-gapped devices (I know I could use the Zero too: but they're not as powerful and kinda hard to find). I'm using one to run ...
1
vote
1answer
762 views

Hashing password longer than 14 characters in wpa_supplicant.conf

My college has a WPA2 Enterprise network, which I can connect to on my Pi after adding the network in wpa_supplicant.conf. I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
3
votes
1answer
6k views

RaspberryPi as a passive Man in the Middle

I think about using a Pi to sniff LAN traffic in an fixed environment. Main problem is that the Pi should not have an IP adress nor being "visible" in the network. I got an second lan interface (USB) ...
0
votes
1answer
224 views

Can you use google's Chrome on Raspberry 3 with Raspbian (not Chromium)? [duplicate]

I would like to know: can one use Google Chrome (not Chromium) on a Raspberry 3 running Raspbian or is it too heavy for the Pi 3? The reason is that I would like to get the more frequent and ...
1
vote
1answer
928 views

How to run program that accesses GPIO as remote application in Eclipse?

Cross-compilation with remote launch from Eclipse is very useful approach to develop RaspberryPi applications. There is a serious security problem however. One who need access to GPIO (ex, using ...
0
votes
0answers
81 views

Basic security for a kiosk? [duplicate]

I am very new to Raspberry Pi anything, and have just set up a kiosk. What do I need to know about security? Our network (I'm a public librarian) has a firewall and the usual security, but is there ...
59
votes
3answers
19k views

How can I protect against intrusion and malware before connecting it to the internet (especially on a public IP address)?

With the large number of Raspberry Pis in the wild, and the fact that large groups of them are configured identically (when a newly-flashed SD card is installed with one of the few available images), ...
0
votes
0answers
2k views

How to update Samba to the latest release branch

I configured a network share using the guidance found here: http://raspberrypihq.com/how-to-share-a-folder-with-a-windows-computer-from-a-raspberry-pi/ But after everything was successfully ...
4
votes
2answers
6k views

How best to extend the PI with hardware decryption/encryption, TPM/HSM?

I am looking for a way to perform symmetric and/or asymmetric encryption on a separate chip (HSM) which can securely store encryption keys (write them to secure memory, perform encryption/decryption ...
11
votes
1answer
3k views

Self destruct: self erase all data on SD card using shred, dd or some other method

I will be using a Raspberry Pi as an air-gapped computer to make secure encrypted transactions on the Ethereum BlockChain. Once in awhile I will want to update the software I am using which will ...
0
votes
2answers
2k views

what did sudo passwd do

I was trying to change the default password for my raspberry pi and I used sudo passwd instead of just passwd. What did I change when I used sudo passwd? It didn't even ask me to enter the current ...
1
vote
1answer
592 views

Download from apt-get through HTTPS only?

Today during a sudo apt-get dist-upgrade I noticed that at the beginning of the process it lists a series of lines starting as: Get: 1 http:/mirrordirector.raspberrypi.org ... Get: 2 http:/archive....
3
votes
1answer
90 views

Running a small HTLM5 website on a RPi3B when it has no fixed IP [closed]

I'm planning on making my first web-server. My plan is to use a RPi3B (or RPi3A if it comes without wifi and bluetooth, but with ethernet) for it. But because I'm new to web-servers I've a couple of ...
-1
votes
2answers
166 views

I made a lamp webserver. Does any one know how to maintain a “secure webserver”? [closed]

I am using RPi3. I flashed Raspian on to SD from Raspberry pi.org so its the newest version of Jessie. I am new at all of this so I want to know where or what are vulnerable points of a lamp server ...
1
vote
1answer
2k views

Unable to setup RKHunter (“Invalid SCRIPTWHITELIST configuration option”)

I installed RKHunter (rootkit hunter) on Raspbian Jessie using "apt-get install". Before that I performed apt-get update and upgrade as well as autoclean. When setting up RKHunter, the first few ...
0
votes
1answer
995 views

How can I use scp/ssh in a cron script without entering a password?

I have a script that goes out to 5 other Rpi3 computers and collects data from them using scp and puts it all out on a flash drive. (Then later it gets picked up from the master Pi by a Windows Task ...
1
vote
1answer
9k views

Network firewall and intrusion prevention using Raspberry Pi?

Is it possible to use a single board like the raspberry pi as a firewall and / or an intrusion prevention system ? Or even use a dedicated OS like clearOS ? I know the Ethernet speed is a restriction ...
0
votes
0answers
2k views

Upgrade OpenSSH to V7+

I'm using my raspberry pi as a home web server and, whilst I know it's never going to offer up enterprise level security, I would like to make it as secure as possible. scanmyserver.com has indicated ...
1
vote
1answer
2k views

always-on security camera, uploading to cloud, looping video recording/saving

I'm trying to get started on a raspberry pi security camera project. It would function akin to a dash camera, with the following features: Always recording and saving 3-5 minute files Once the folder ...
0
votes
0answers
51 views

Steps required to protect home network from Raspberry PI infected with malware or hacked? [duplicate]

I'm not to savvy with network security so I hope someone can help me. My question is reformulated here to be more precise, something that was requested by other members in the previous question. I ...
0
votes
1answer
121 views

Jessie standard users

I am trying to figure out if my raspi was meddled with and users where created. What is the list of users created by default on jessie? (Release date: 2017-01-11) Here is a list from my machine after ...
13
votes
1answer
14k views

Raspberry Pi as a Linux firewall?

Can I use the Raspberry Pi as a Linux firewall? Can anyone tell me the best way of doing this? Including network connection details and hardware I may need.
1
vote
1answer
200 views

Detached Raspberry for secure key generation

I need to generate secure encryption keys but don't want to spend a lot of money on a dedicated Hardware Security Module. Would an air-gapped Raspberry with Raspbian be good for the job? Does it ...
0
votes
1answer
168 views

Prevent strangers from logging into Raspberry Pi

I'm connecting a button that user can click to restart the Raspberry Pi if he faced any problems, because of this I don't want the Raspberry Pi to ask for user name and password on every boot or ...
1
vote
1answer
19k views

No SSH (Connection refused) using raspbian with pixel [duplicate]

Recently I updated my Raspbian image from a very old image to new Raspbian with PIXEL. On old image I had a lot of trash so I just dd'd a new SD card and inserted it to the rpi- I use Raspberry Pi 3. ...
0
votes
1answer
84 views

Using many individual Raspberry Pi's as monitoring systems in a 'business' usage setting

I want to use a lot (3000+) Raspberry Pi's in a country-wide service. I have been googling around, but I haven't found a similar usage-scenario so far. It made me wonder what would be against this ...
0
votes
2answers
5k views

Raspberry Pi passwordless SSH - refusing key

I'm following this tutorial: Raspberry Pi - SSH Public Key Authentication, but I'm generating the keys directly on my Raspberry. So this is exactly what I did: start a fresh Raspbian image ssh-...
0
votes
2answers
92 views

Accessing files on Pi over HTTPS

I've installed Baracuda drive on my Raspberry Pi in order to access files located on an attached USB drive from a browser. This works well in my local network and now I want to open a port on my ...
7
votes
4answers
9k views

Locking down Raspbian to only allow limited features

In a public environment a computer can get a lot of abuse, leading to system failures, viruses, compromised security, etc. In many schools, the computers are setup to only allow basic features to be ...
-1
votes
1answer
598 views

Requirements to build a poisontap

I'm new to single board computing and to hardware. I've found PoisonTap to be an interesting project, tough I've got no idea where to start. What would be a list of concepts I'd need to know in order ...
-3
votes
1answer
1k views

Kali+Ubuntu+Parrot Security Armhf Image's on same multiboot SD card howto?

Ive installed a bunch of Armhf linux distros to the PI 3 and with allot of success. However i cannot find a good tutorial on installing them all on one SD Card. Im not talking about the preloaded OS'...
1
vote
1answer
1k views

System Calls From C Code

after many searches and tries, finally I found a way to protect my python code on my raspberry pi (for sure there is no 100% security), but let's say I made it a little bit harder. This method still ...
2
votes
1answer
984 views

Motion on_movie_end run a python script and bash script

I am using Motion to record videos. I have a Python script which sends the video to me when it ends (sendvideo.py). I have a bash script that clears the folder (clearmedia.sh) I have tried the ...
2
votes
1answer
709 views

Can I use auditd on a Raspberry Pi?

auditd is a kernel demon that can snoop on users using your server. Can it be used on a Raspberry Pi?
0
votes
1answer
1k views

Securing the Pi for use as a server

I want to use the Raspberry Pi 3 (B) as a web server and need SSH/VNC access. I will use VNC only over SSH, forwarding only port 22. Should I be worried about SSH? I removed user pi and created a new ...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
2
votes
1answer
3k views

SELinux on Raspberry Pi 3 running CentOS 7

Issue I'm running CentOS 7 on a Raspberry Pi 3 (image here: http://buildlogs.centos.org/centos/7/isos/armhfp/CentOS-Userland-7-armv7hl-Minimal-1602-RaspberryPi3.img.xz). I'm attempting to enable ...
0
votes
1answer
115 views

How to get sure that the Internet connection has been correctly transfered?

I'm currently working on a project of making an highly secured router with my RaspberryPi to navigate anonymously on the net. Yet, I'm not able to correctly transfer the Internet connection to the new ...
3
votes
3answers
2k views

Strange IP connected to ssh?

Just typed netstat and found this: Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 304 raspberrypi.home:ssh ...
2
votes
1answer
170 views

Is the Raspberry Pi safe

I just partnered with a company that is conducting a Facebook ad study. They sent me this CanaKit to attach to my computer in order to observe advertising info on facebook. I am not a programmer or ...
0
votes
1answer
827 views

How to secure my offline Raspberry Pi LAMP server against manipulation and copying?

I have spent a lot of time on researching on this topic but I haven't found any working solution for my problem respectively I'm not clear about some points. My goal is to distribute a encrypted/copy-...
10
votes
2answers
15k views

Are there any issues changing default username in Raspbian or Raspbmc?

I know that security by obscurity is not real security, however, why make it easy by keeping a well known username such as "pi". Therefore, what are the implications to changing the username of "pi" ...
-3
votes
1answer
338 views

Network Wide Security / Access Control Software [closed]

Is there a way to have a network wide, intrusion / attack detection system running on a Raspberry Pi? Kinda like fail2ban but for everything as well as access control to restrict certain devices from ...
3
votes
1answer
461 views

How to fix glibc vulnerability CVE-2015-7547

https://www.debian.org/security/2016/dsa-3481 Do we need to wait for a RASPBIAN upgrade to be available here? https://www.raspberrypi.org/downloads/raspbian/ I ran: sudo apt-get update && ...
4
votes
2answers
817 views

auth.log sshd entries

I set up my Raspberry a few weeks ago. Currently I just use it as an SSH server until I find the time to do something more interesting with it. The Raspberry runs a sshd server and is connected to my ...
7
votes
1answer
547 views

Is it still safe to use pidora?

Pidora is Fedora 20 based, Fedora 20 is in EOL (End Of Life). yum does not update anymore Is it still safe to use Pidora for hosting a webserver or fileserver?
0
votes
3answers
851 views

Locking a C++ binary to the RPi serial number

I see that each RPi has a serial number that is accessible by reading /proc/cpuinfo. How secure is it for me to tie such serial number to my C++ binary when I want to lock that binary to a single RPi ...
1
vote
1answer
201 views

Strange things in my logs

So, I actually have set up my Raspberry Pi as a public web server. I have the port forwarding set up and my FTP and SSH can be accessed by me remotely. Now I was looking around in my logs yesterday ...