[{"data":1,"prerenderedAt":299},["ShallowReactive",2],{"project-5890983":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":5,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":41,"post_text":44,"what":45,"said":74,"maker_in_thread":162,"shape":173,"grid":178,"attempts":261,"same_week":262,"maker_shows":37,"maker_hidden":292,"reader_version":293,"card":294},"5890983","tunnelsup.com","My Raspberry Pi a secret phone homing server","title","Show HN: I made my Raspberry Pi a secret phone homing server","http:\u002F\u002Fwww.tunnelsup.com\u002Ftup\u002F2013\u002F05\u002F08\u002Fraspberry-pi-phoning-home-using-a-reverse-remote-ssh-tunnel","xs",1371434214,2013,139,32,151,1739,9,"notable","security_privacy","covert remote access device","hardware",[23,24,25,26],"raspberry pi","reverse ssh tunnel","remote access","pentesting","curious",-0.22,{"positive":30,"neutral":31,"mixed":32,"critical":33},1,13,0,6,20,{"design":36,"execution":38,"privacy":39,"idea":40},{"positive":32,"critical":37},2,{"positive":32,"critical":32},{"positive":32,"critical":37},{"positive":30,"critical":37},[30,32,42,42,30,42,30,32,42,42,32,32,42,42,43,42,30,32,42,42,30,42,42,42,30,32,32,32,32,32,32,32],3,5,null,{"problem":46,"audience":44,"pricing":44,"motivation":44,"time_to_build":44,"stack":56,"openness":73,"stage":73,"team_size":73},{"value":47,"source":48,"evidence":49},"Gives remote access to a network from a device placed inside it via a reverse SSH tunnel.","inferred",[50,52],{"id":51},"post",{"id":53,"by":54,"text":55},"5891246","decauth","The use of physical drop boxes placed behind a firewall is nothing new. There is in fact a specific Linux distro for the Rasberry Pi targeted at this use case (see…",[57,62],{"value":58,"source":59,"evidence":60},"Raspberry Pi","maker",[61],{"id":51},{"value":63,"source":48,"evidence":64},"SSH",[65,69],{"id":66,"by":67,"text":68},"5891452","aseidl","A few suggestions: SCP'ing the public key directly to ~\u002F.ssh\u002Fauthorized_keys could overwrite the file if it already exists. It's better to use 'ssh-copy-id', which takes care of…",{"id":70,"by":71,"text":72},"5892068","thu","Someone who finds the brick can ssh into his server... that seems weird.","unknown",{"praise":75,"objections":88,"requests":114,"questions":134,"alternatives":142},[76],{"value":77,"source":78,"evidence":79},"Cool project and a fun build.","commenter",[80,84],{"id":81,"by":82,"text":83},"5891582","brokentone","Cool project, I've thought about doing something similar and bought a gumstix for roughly this reason before the Pis were out (although power is harder to figure out on Gumstix).…",{"id":85,"by":86,"text":87},"5891743","mrmekon","These things are fun, and certainly not new. You can buy devkits that already look quite unobtrusive: http:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSheevaPlug The one in this article looks like a…",[89,97,106],{"value":90,"source":78,"evidence":91},"Reinvents existing penetration-testing drop-box tools such as pwnpi and Power Pwn.",[92,93],{"id":53,"by":54,"text":55},{"id":94,"by":95,"text":96},"5891602","mey","http:\u002F\u002Fpwnieexpress.com\u002Fproducts\u002Fpower-pwn",{"value":98,"source":78,"evidence":99},"Exposed SSH access to the device is a security risk; use a limited account.",[100,101,105],{"id":70,"by":71,"text":72},{"id":102,"by":103,"text":104},"5892100","omh","You should be able to limit the account that it's ssh-ing into so that it's just used for the tunnel. Or if you're really paranoid, limit the entire thing to a dedicated virtual…",{"id":66,"by":67,"text":68},{"value":107,"source":78,"evidence":108},"The power adapter placed on the board is a fire and short-circuit hazard.",[109,110],{"id":85,"by":86,"text":87},{"id":111,"by":112,"text":113},"5891891","lgeek","Is the power adapter board sitting on top of the Pi? They should be separated by some panel to avoid shortcircuits and\u002For feeding mains power into it. It looks like there's…",[115,126],{"value":116,"source":78,"evidence":117},"Use a Tor or I2P hidden service instead of a plain SSH tunnel.",[118,122],{"id":119,"by":120,"text":121},"5891309","dfc","A tor hidden service with ssh is a great way to set up a reverse tunnel: https:\u002F\u002Fwww.torproject.org\u002Fdocs\u002Fhidden-services.html.en",{"id":123,"by":124,"text":125},"5893812","benkillin","Setting I2P up on the RPi then setting ssh up to listen on a I2P hidden service on the RPi would be better than the method shown. That way if the device is discovered it would be…",{"value":127,"source":78,"evidence":128},"Use autossh with a restart daemon for reliable tunnels.",[129,130],{"id":66,"by":67,"text":68},{"id":131,"by":132,"text":133},"5892153","Fuxy","Actually you can write a nice little script that treats autossh like a daemon and restarts it if it crashes. I did something like that on Arch linux. Also it's probably a good…",[135],{"value":136,"source":78,"evidence":137},"Why not use a smaller, cheaper router-based device?",[138],{"id":139,"by":140,"text":141},"5892403","riobard","For the purpose of physical drop boxes, there are much better tools than a Pi. For example this one http:\u002F\u002Fwiki.openwrt.org\u002Ftoh\u002Ftp-link\u002Ftl-wr703n is cheaper (\u003C $20), smaller,…",[143,148,155],{"value":144,"source":78,"evidence":145},"pwnpi and Pwnie Express Power Pwn",[146,147],{"id":53,"by":54,"text":55},{"id":94,"by":95,"text":96},{"value":149,"source":78,"evidence":150},"Pagekite",[151],{"id":152,"by":153,"text":154},"5892346","urza","https:\u002F\u002Fpagekite.net\u002F",{"value":156,"source":78,"evidence":157},"WiFi Pineapple",[158],{"id":159,"by":160,"text":161},"5891248","bluetooth","Here's a similar project based on another similar project that's been around for quite some time: http:\u002F\u002Fpenturalabs.wordpress.com\u002F2013\u002F04\u002F25\u002Fblue-for-the-pineapple\u002F Original…",{"comments":42,"answered":30,"key":163},[164,167,170],{"id":165,"text":166},"5894256","Thanks for the tip! I guess covering my tracks with a fire isn't a good option.",{"id":168,"text":169},"5891275","While I use backtrack frequently I found the pwnipi distribution to be lacking in many things and actually ditched it to complete this project. Perhaps I'll revisit that distro…",{"id":171,"text":172},"5894270","Some of the programs that it said that were supposed to be installed were not. Very little documentation exists to get familiar with that distribution.",{"commenters":174,"max_depth":175,"maker_replies":42,"first_comment_mins":176,"lifespan_hours":177},29,4,85,18,[179,181,185,187,188,190,192,193,196,198,201,204,206,209,212,215,218,222,226,229,233,235,236,239,241,243,246,247,250,252,255,258],[85,32,30,180,86,32],"project\u002Fcritical\u002Fdesign",[182,32,32,183,184,32],"5892148","other\u002Fneutral\u002Fnone","skeletonjelly",[66,30,42,186,67,32],"project\u002Fneutral\u002Fexecution",[131,30,42,186,132,32],[123,37,30,189,124,32],"project\u002Fcritical\u002Fprivacy",[119,42,42,191,120,32],"project\u002Fneutral\u002Fprivacy",[139,175,30,180,140,32],[194,43,32,183,195,32],"5892140","jawns",[111,33,42,197,112,32],"project\u002Fneutral\u002Fdesign",[199,33,42,197,200,32],"5891903","wwwhizz",[202,33,32,203,112,32],"5892008","commenter\u002Fneutral\u002Fdesign",[165,33,32,205,10,30],"maker\u002Fneutral\u002Fdesign",[207,33,42,197,208,32],"5895349","blacksmith_tb",[159,210,42,211,160,32],7,"project\u002Fneutral\u002Fidea",[81,213,43,214,82,32],8,"project\u002Fpositive\u002Fidea",[216,17,42,211,217,32],"5892826","Morphling",[219,17,30,220,221,32],"5893723","project\u002Fcritical\u002Fidea","freehunter",[223,17,32,224,225,32],"5893880","commenter\u002Fneutral\u002Fnone","DanBC",[94,227,42,228,95,32],10,"project\u002Fneutral\u002Fnone",[230,231,42,228,232,32],"5891567",11,"curiousAl",[70,234,30,189,71,32],12,[102,234,42,191,103,32],[237,31,42,186,238,32],"5892890","fduran",[152,240,42,211,153,32],14,[53,242,30,220,54,32],15,[244,242,32,224,245,32],"5891265","meritt",[168,242,32,183,10,30],[248,242,32,224,249,32],"5891594","voltagex_",[171,242,32,251,10,30],"other\u002Fneutral\u002Fdocs",[253,242,32,224,254,32],"5891290","mikeash",[256,242,32,224,257,32],"5892734","alan_cx",[259,242,32,224,260,32],"5891900","ericHosick",[],[263,268,273,278,283,288],{"id":264,"name":265,"points":266,"category":267},"5902927","Ultimate Tic Tac Toe",160,"games",{"id":269,"name":270,"points":271,"category":272},"5900772","We're releasing SoundBrush",155,"creative",{"id":274,"name":275,"points":276,"category":277},"5873442","Invoice-o-matic",128,"web_saas",{"id":279,"name":280,"points":281,"category":282},"5901251","Morning",110,"productivity",{"id":284,"name":285,"points":286,"category":287},"5883504","offbrand_lib",91,"languages",{"id":289,"name":290,"points":291,"category":277},"5895065","Infraprint",90,false,"v2",{"id":295,"name":5,"line":6,"ai":292,"cat":19,"year":12,"points":13,"comments":14,"rec":27,"s":28,"top":17,"kw":296,"maker":10,"domain":5,"tier":18,"attempts":32,"strip":297,"url":9,"mix":298,"praise":77,"objection":90,"sub":20},5890983,[23,24,25,26],"10331310330033531033133310000000",[30,31,32,33],1793990895400]