Kali Linux On a Raspberry Pi (A/B+/2) With LUKS Disk Encryption

An anonymous reader writes With the advent of smaller, faster ARM hardware such as the new Raspberry Pi 2 (which now has a Kali image built for it), we've been seeing more and more use of these small devices as 'throw-away computers'. While this might be a new and novel technology, there's one major drawback to this concept – and that is the confidentiality of the data stored on the device itself. Most of the setups do little to protect the sensitive information saved on the SD cards of these little computers.

Comments

Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

There's already a full-fledged distro for the RPi. Why not just use its encryption features?

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

kali linux is totally pointless and the clueless twits behind it need to get back to the tech support desk, call volume peaks at 11 AM.

this distro is also produced by a ridiculous "hacking" school/worthless diploma mill that for a fee will make a Hax0r out of you and give you a certificate in pen testing suitable for framing. it is a complete scam.

witless jackassery of the most foolish variety is responsible for kali linux and its "hacking dojo" as they all it.

bullshit. complete bullshit.

Re:Why are Raspbian and Encryption orthogonal?

[hamjudo]

They are not orthogonal. This should have been titled "if you are going to use Kali Linux on a Raspberry Pi, here is how to encrypt it".

Kali Linux is designed for penetration testing, among other things. The logs from a penetration test are valuable to dark hats. The advantage of doing this from a Raspberry Pi, is that they are cheap enough to send to each branch of a company, so each network can be individually tested. Sometimes this means that physical security is difficult to ensure. It would be very embarrassing to lose a system during an internal audit. It could quite easily turn into a career ending event, if that led to a security breach.

Disclaimer: I've never used Kali Linux, nor did I look closely at this technique to see if there is something stupid in the instructions.

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

it is a big wad of shit for brains stupid. all around, up and down, side to side pointless is what kali linux is.

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

Kali seems to be an extension of Back Track; BT seemed to me to be a reasonably handy distro to have if you wanted a bunch of security tools by default. But I'm no expert in this stuff - what would you suggest? CentOS or Ubuntu plus a bunch of repos, or install all the tools from source?

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

kali linux is totally pointless and the clueless twits behind it need to get back to the tech support desk, call volume peaks at 11 AM.

this distro is also produced by a ridiculous "hacking" school/worthless diploma mill that for a fee will make a Hax0r out of you and give you a certificate in pen testing suitable for framing. it is a complete scam.

witless jackassery of the most foolish variety is responsible for kali linux and its "hacking dojo" as they all it.

bullshit. complete bullshit.

Didn't get your Kali certificate, did you?

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

i don't need a worthless certification from a pack of absolute nobodies with a fly by night Scam Academy. no one anywhere takes these goofballs seriously.

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

Kali Linux has this awesome Dragon on the CD. it is so metal dude! That dragon has a lot of skills and doesn't fear anybody!

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

if you aren't using slack or gentoo, don't call yourself a 'hacker'....

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

As someone actually going through this school, I'm going to go out an a limb here, and say you have absolutely, positively no idea what you are talking about, or referring to. CEH/CPT, those are bs certs worth nothing more than framing. OSCP/OSCE, you actually learn something.

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

whatever you say mr. reggae hacker mon

Re:Why are Raspbian and Encryption orthogonal?

[Anonymous Coward]

Let's just simplify that to "don't call yourself a 'hacker'...."

Your accomplishments stand by themselves.

Re:Why are Raspbian and Encryption orthogonal?

[Barsteward]

nah... don't call yourself a 'hacker' unless you use http://www.linuxfromscratch.or...

Re:Why are Raspbian and Encryption orthogonal?

[ZorglubZ]

I thought the prime requisite was using Suicide Linux... http://sourceforge.net/project...

You're just aiding them terrists

[Anonymous Coward]

and you know it.

Gay Niggers Felching Cum from Gay NIGGER FUCK ASS

[Anonymous Coward]

GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the first organization which
gathers GAY NIGGERS from all over America and abroad for one common goal - being GAY NIGGERS.

Are you GAY ?
Are you a NIGGER ?
Are you a GAY NIGGER ?

If you answered "Yes" to any of the above questions, then GNAA (GAY NIGGER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
Join GNAA (GAY NIGGER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time GNAA member.
GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the fastest-growing GAY NIGGER community with THOUSANDS of members all over United States of America. You, too, can be a part of GNAA if you join today!

Why not? It's quick and easy - only 3 simple steps!

First, you have to obtain a copy of GAY NIGGERS FROM OUTER SPACE THE MOVIE and watch it.

You can watch GAY NIGGERS FROM OUTER SPACE on Youtube.

Second, you need to succeed in posting a GNAA "first post" on slashdot.org , a popular "news for trolls" website

Third, you need to join the official GNAA irc channel #GNAA on EFNet, and apply for membership.
Talk to one of the ops or any of the other members in the channel to sign up today!

If you are having trouble locating #GNAA, the official GAY NIGGER ASSOCIATION OF AMERICA irc channel, you might be on a wrong irc network. The correct network is EFNet, and you can connect to irc.secsup.org or irc.easynews.com as one of the EFNet servers.
If you do not have an IRC client handy, you are free to use the GNAA Java IRC client by clicking here.

If you have mod points and would like to support GNAA, please moderate this post up.

This post brought to you by Penisbird , a proud member of the GNAA

G_____________________________________naann_______ ________G
N_____________________________nnnaa__nanaaa_______ ________A
A____________________aanana__nannaa_nna_an________ ________Y
A_____________annna_nnnnnan_aan_aa__na__aa________ ________*
G____________nnaana_nnn__nn_aa__nn__na_anaann_MERI CA______N
N___________ana__nn_an___an_aa_anaaannnanaa_______ ________I
A___________aa__ana_nn___nn_nnnnaa___ana__________ ________G
A__________nna__an__na___nn__nnn___SSOCIATION_of__ ________G
G__________ana_naa__an___nnn______________________ ________E
N__________ananan___nn___aan_IGGER________________ ________R
A__________nnna____naa____________________________ ________S
A________nnaa_____anan____________________________ ________*
G________anaannana________________________________ ________A
N________ananaannn_AY_____________________________ ________S
A________ana____nn_________IRC-EFNET-#GNAA________ ________S
A_______nn_____na_________________________________ ________O
*_______aaaan_____________________________________ ________C
Gary Niger gary_niger@gnaa.us GNAA Corporate Headquarters 143 Rolloffle Avenue Tarzana, California 91356
Enid Al-Punjabi enid_al_punjabi@gnaa.us GNAA World Headquarters No.33 Kyutei Bld. 2F, Shinjuku 2-11-7, Shinjuku-ku, Tokyo, Japan ????????2??11-6
Copyright (c) 2003-2015 Gay Nigger Association of America

Ich Bindawalross (London) - GNAA (NYSE: GNAA) President Nigger released a statement today regarding the immediate Internet rele

Kali linux is a joke

[Anonymous Coward]

a dubious distro put together by script kiddies and oh gosh! it comes with a bundle of script kiddie hax0r shit so you don't have to DOWNLOAD IT!

there is nothing innovative here. at all.

and their dumbass brogrammer website plays reggae!

it is 2015 and the last thing, the _very_ last thing needed by mankind is NOT another fucking linux distro.

the 90's are calling, boys. the 90's wants its stuff back.

Re:Kali linux is a joke

[Anonymous Coward]

Clearly Kali is a joke since it has not embraced the wonder that is systemd.

Re:Kali linux is a joke

[Barsteward]

yet.....

Why not just install other crypto?

[Anonymous Coward]

Is there anything keeping you from installing LUKS on any other Raspberry Pi? Is this a story for any other reason than you can now install Kali Linux to avoid typing the three commands required to get it working on any other Pi distro?

Re:Why not just install other crypto?

[Anonymous Coward]

nope. what this article is is nothing but an ill thought out marketing stunt for a worthless distro and the even more worthless "hacking school" scam behind it.

Performance?

[fisted]

Oh yeah please. Make it even slower.

Re:Performance?

[Anonymous Coward]

Exactly for a small performance decrease you've just made you data a couple magnitudes more secure against any nefarious agents.

Re:Performance?

[fisted]

Yes, if by "small" you mean "large".

Re:Performance?

[facetube]

And if by "large" you mean "I was definitely saturating all four of those 900MHz ARMv7 cores, so much so that the highly-concurrent in-kernel crypto layer couldn't keep up with the relatively low I/O bandwidth of a MicroSD card", then... sure. It'd probably suck pretty hard on the single-core 700MHz v1, but the second-generation unit is considerably better equipped.

Re:Performance?

[fisted]

You do realize that the vast majority of raspis in the wild are Model Bs, though, right?

Re:Performance?

[facetube]

I do; it just doesn't seem unusual for new distribution features to target emerging or even in-development hardware. A $35 credit-card sized board that can perform full-disk encryption acceptably seems like it'd be valuable even without a large installed base.

hardware support?

[Eunuchswear]

Does the SOC in tbe Rasbery PI 2 have hardware encryption support? 'cos it's going to be pretty slow without it.

Re:hardware support?

[Anonymous Coward]

It's ok though, because the (under) performance of the SD card or USB storage more than overshadows an extra couple of percent overhead.

Re:hardware support?

[facetube]

And it has 4 900MHz ARMv7 cores. Unless you're running something compute-intensive that saturates all four of those cores, the excess CPU capacity combined with the relatively slow SD storage means you probably won't even notice the overhead.

New Macbook Air: 500+ comments, this crap: ~20

[Anonymous Coward]

No one even cares about Lin-sux on slashdot!

Think different.
Think BETTER.
Think Apple.

Re:New Macbook Air: 500+ comments, this crap: ~20

[Anonymous Coward]

Indeed. Anything different than Apple is bound to be BETTER.

SD card security is easy

[Anonymous Coward]

SD cards are orders of magnitude easier to secure than regular hard drives. To secure a hard drive you need screwdrivers with weird shaped heads, pliers, hammers and all manner of hardware. All you need for an SD card is to remove and microwave.

Re:SD card security is easy

[Anonymous Coward]

A gun can secure a hard drive pretty reliably against all but the NSA... good luck putting the resulting platter shards back together...

For that matter, simply having a raid 6 array and destroying enough disks such that the array cannot be rebuilt.

Ya but...

[Anonymous Coward]

...can it run SCO?

Marketing?

[Anonymous Coward]

Why are people still wasting their money on this? there are plenty, more advanced embedded boards at about the same price....

I guess I will never understand hype.
And yes, I had an Apple device once, then I realized that every upgrade of the OS is only intended to slow the device and change mostly the UI without adding any value.

Re:Marketing?

[Half-pint HAL]

Why are people still wasting their money on this? there are plenty, more advanced embedded boards at about the same price....

The Pi has the advantage of near uiquity -- you don't have to write anything new or faff about too much with configuration, as someone has already done it for you.

The Pi should have become a reference platform for low-processor-power computing, but then they decided to go for a non-commodity part and locked out interoperability at the hardware level....