[ prog / sol / mona ]

prog


RaspberryPi hardening for eepsite

1 2020-06-18 00:42

What would you do to make rpi fast and secure for an eepsite?

2 2020-06-18 01:24

>>1
It's a normal computer, there's nothing special about it, except for the raspberry picture drawn on the PCB. On this small machine you should be using i2pd instead of i2p. Do not run non-hidden services on the RPi (set up a tunnel for sshd for instance). Avoid building your website with vulnerabilities-ridden CMS.
If you're trying to do something illegal you'll be busted because your site will be offline when your modem is offline. All the proofs of your illegal activities will conveniently sit in your home.
The real question is: when they kick at your front door, how you gonna come? With your hands on your head or on the trigger of your gun?

3 2020-06-18 01:29

Thanks, helpful scary comrade.
It uses a broadcom chip, which is interesting.

your modem
implying

4 2020-06-18 02:11 *

>>3
Raspberry Pi 1, 2 and 3 require loading binary blobs to boot. Raspberry Pi 4's Cortex-A72 is vulnerable to Spectre. I'll probably start hardening the RPi by using another cheap board like the Olimex A20-OLinuXino-LIME2.
See:
http://textboard.org/prog/130
http://textboard.org/prog/96

5 2020-06-18 13:45

>>4
Interesting. I didn't know you could flash the RPi OS to the sd and use it on another board.

6 2020-06-18 14:42 *

>>5
Do you mean Raspbian?I wouldn't user their officially supported OS either. It ships non-free software (you'll have to use a binary blob to boot if you own a pre-4 RPi anyway). Install Debian of FreeBSD and then just add the services you need. Save every MB of RAM.

https://wiki.debian.org/CheapServerBoxHardware

7 2020-06-30 18:46

If the cops break down your door just swallow the microsd lol

8


VIP:

do not edit these