Live data from Hacker News

The curious case of the Raspberry Pi in the network closet (2019)

blog.haschek.at

121–130 of 269 posts

Re: The curious case of the Raspberry Pi in the network closet (2019)

#121

That's a very obvious and very obviously bad way of planting a network exploit. Very rookie and rather sad. In entirely unrelated news, this guide details how to set up an encrypted boot process on a raspberry pi, with it waiting for you(r forked login agent) to ssh in and provide the LUKS password: https://github.com/ViRb3/pi-encrypted-boot-ssh

Without reverse ssh wouldn’t you need to be directly on the same network to do so?

I was setting up an encrypted-root system with ssh access to pass the passphrase, and got reading. It looks like an initrd image can connect to a VPN or set up a Tor hidden service these days. I didn't try it, though.

Re: The curious case of the Raspberry Pi in the network closet (2019)

#122
post #66

Earlier quoted context omitted.

“Gifted” individuals are selected at early ages to run through rigorous education programs that greatly push them ahead of their peers. It is a pipeline to create intellectual elites and captains of industry. Gifted kids are widely accepted as the most intelligent kids of a school and held up as the finest examples of the school’s educational abilities.

Do kids in gifted programs go on to become intellectual elites and “captains of industry” at higher rates than their peers?

This one didn't:)

Re: The curious case of the Raspberry Pi in the network closet (2019)

#124
post #11

> they identified the dongle as a microprocessor, almost as powerful as the Rasberry Pi itself Well, its more like an order of magnitude slower than the Pi (and with a lot less RAM as well) > A very powerful wifi, bluetooth and RFID reader. It's 2.4GHz, but only BLE and custom protocols (2 Mbit max, GFSK modulation). The SoC can do RFID, but you have to connect a transmitter coil to use it, which doesn't seem to be t…

That puzzled me too. I didn't remember the 52832 having WiFi, but I figured it was just faulty memory.

I think the dongle might just be Nordic's cheap evaluation board.

Re: The curious case of the Raspberry Pi in the network closet (2019)

#125
post #66

Earlier quoted context omitted.

“Gifted” individuals are selected at early ages to run through rigorous education programs that greatly push them ahead of their peers. It is a pipeline to create intellectual elites and captains of industry. Gifted kids are widely accepted as the most intelligent kids of a school and held up as the finest examples of the school’s educational abilities.

Do kids in gifted programs go on to become intellectual elites and “captains of industry” at higher rates than their peers?

Nope, it's a dick shaking title that can give kids issues in life.

Someone I know was called gifted at some point, he didn't end up in any accelerated programs but he did end up in higher education... which he only finished after many years, meanwhile he was eating, drinking and smoking his student loans + job income away, he ended up broke and in debt, and to date - 10, 15 years later - is still unemployed.

Re: The curious case of the Raspberry Pi in the network closet (2019)

#128
post #107

Earlier quoted context omitted.

> An encrypted disk would be kind of useless in such a device as it would require the user to login every time the device reboots There is actually a solution for that (shameless plug): https://www.recompile.se/mandos

While I'm sure I could configure this on a system, the level of understanding required to actually create it honestly is fantastic. Is this something you created yourself, or was it a community project?

Initial idea and C++ implementation (using TLS with X.509 certificates and explicit UDP broadcasts) was done in 2007 by another person. Redesign of the protocol (to TLS with OpenPGP keys¹ and DNS Service Discovery²), and re-implementation in Python and C, I did in collaboration with that person. In addition to ongoing maintenance, the relatively recent switch from TLS with OpenPGP keys to TLS with Raw Public Keys³ was done by me.

The level of understanding required is something I would think that all system administrators worth their salt had at the time. I would think that the best way to acquire such knowledge is doing the Linux From Scratch⁴ exercise, even though I have not done it myself.

1. RFC 6091

2. http://www.dns-sd.org/, RFC 6763

3. RFC 7250

4. https://www.linuxfromscratch.org/lfs/

Re: The curious case of the Raspberry Pi in the network closet (2019)

#129
post #66

Earlier quoted context omitted.

“Gifted” individuals are selected at early ages to run through rigorous education programs that greatly push them ahead of their peers. It is a pipeline to create intellectual elites and captains of industry. Gifted kids are widely accepted as the most intelligent kids of a school and held up as the finest examples of the school’s educational abilities.

Do kids in gifted programs go on to become intellectual elites and “captains of industry” at higher rates than their peers?

Not by much, I'd bet. If at all.

The poster seems to have confused top-tier private schools and gifted programs. Read enough politician and C-suite and such bios and it's very clear what's going on. You practically never see "attended a pretty decent public high school—but was in the gifted program!" Private college prep secondary schools (at the very least—often it's private schools all the way) on the other hand are overwhelmingly the norm in that set.

It's kinda depressing as a parent. If you haven't scraped together 25+k/yr for elite prep school tuition (and, probably, boarding) all your "you can be anything you want if you try really hard!" is kinda a lie. Like, that's still much better than not trying hard and will likely improve your life outcomes, but, looking at the actual world, realistically... nah, sorry, you're probably locked out of a lot of options. There are de facto requirements, and we couldn't afford them. Sorry kid.

Similar story with The Arts. You start looking at the backgrounds of very high-paid artists of all kinds (actors, musicians, even authors a lot of the time if they're considered good and not "merely" popular) and you're likely screwed if you weren't at least one of: 1) born to a family that's already successful at that, or 2) had an expensive and very focused education starting before college. Lots of the successful folks had both of those things. Again: there are counter examples, and it's technically possible to get in if your parents weren't in the arts and you didn't start gigging/acting/attending-an-artsy-private-school by the time you were 12, but realistically you're looking at a serious uphill battle.

Re: The curious case of the Raspberry Pi in the network closet (2019)

#130

Earlier quoted context omitted.

now i guess a smaller pi zero can do this with a much smaller footprint

Pi Zero doesn't have an ethernet port, so you have the size of the pi+ethernet adapter then.

Technically, I believe Pi-Hole works over Wi-Fi as well: that is, you can have the Pi Zero running Pi-Hole connect to your router via Wi-Fi. Then all your devices connect to the Pi Zero for their internet access.

I could be mistaken though; only over installed on a Pi 3.

Post reply on HN