RPi Honeypot

I’m setting up a Raspberry Pi to use at work as a host that can respond to ping requests and provide a target to test monitoring software against. It occurred to me that this might be more useful if I add something to the Pi to spice it up a bit: honeypot software. What could be more fun than having a honeypot that one could drop onto a network at a moment’s notice?

Here’s where I found my first clues on how to do such a thing:
https://isc.sans.edu/diary/A+Honeypot+for+home:+Raspberry+Pi/18463

Here I go!

SD Card Formatting

At long last I am sitting at a desk working on my MacBook with the Raspberry PI running next to me.  It is so cute, up and waiting with the command line interface.  What should we do today?  Well, what we do every day – take over the world!  But first, we have to prepare for the unlikely event that we might possibly fail.  If a failure were to occur it seems like a really good idea to have a <gasp> recovery plan.  Since the RPI uses a MicroSD card for it’s boot partition I think I’ll start by having a couple of those ready to go.

The first step is to get a 4 GB or larger micro SD card.  Check.

The next step is to format the card.  Cool, so how does one do that?  Why, by downloading the formatting utility from the SD Card Association, of course.  From this link.

What about a NOOBS installer and Raspbian image?  Well, download those from here.

Extract the files, copy them to the SD card and you should be good to go.

Database Engines

Today I’ve been thinking about building a database to keep up with IP address assignments.  In a perfect world I’d have a nice database with a clever interface and would simply start entering data.  In my world I see commercial versions (and I have no budget) and open source versions (which really want Linux distributions, which I don’t really have).  So I’m considering building a database and then using Python and PyQT to build the interfaces.

Most of my limited database experience in recent years has been with MySQL.  Sadly for me, OS X has replaced MySQL with PostgreSQL – so which would be better?  Well, I don’t know yet.  But I have found a resource about PostgreSQL that should be remembered, which can be found here.  It appears that Apple probably moved to PostgreSQL in order to put some distance between themselves and Oracle, who bought the rights to MySQL some time ago.

It appears that Python includes support for PostgreSQL.  More information can be found here.

More research on this topic to come!

Innovation?

For most of my career I’ve been careful to weed out slack time from my schedule.  If I find myself chatting at the water cooler a little alarm bell goes off.  If I finish a task shortly before lunch I go hunting a small thing to do that improves the work place in some easily recognizable way.  The list could go on.  As a consequence I’ve intentionally taken personal time and dedicated it to learning, either through experimentation with things that could eventually benefit my career or through training in topics that have a clear payback.

Today I found two new resources which are making me rethink the approach and causing me to question how businesses operates (or should, if I were the King of France).

The first is the publicly available Scrum Guides, which helped me setup my new Scrum Board.  I forgot a task for a client and discovered the problem this morning.  “Never again!” I said – and promptly wrote 6 tasks on post-its.  Then I started hunting a board, and built the Backlog, Doing, and Done sections.  Avast!

While I was trying to find/remember the section titles I found the scrum.org web site.  On the resources page there are reflections on the use of Scrum in the world and one caught my eye.  “The Deadly Disease of the Focus Factor” by Henrik Berglund is a nice article which challenges my traditional view of slack time.

If someone is successful at minimizing slack time in their schedule through the generation of or direct management toward deliverable product then they have built a trap for innovation.  Innovation requires learning new techniques, tools, and environmental awareness.  Learning takes time, and not all of it should be highly structured activity.

I’ll be thinking about this topic more as time becomes available and add comments if any more wisdom slides my way.

RADIUS Services

Today I learned of an open source RADIUS authentication server which has been used on a Raspberry Pi (among other platforms).  Here is a link to the project:

http://freeradius.org

Naturally it would be useful to follow somebody else’s instructions for setting this up the first time, so here is a post to a blog entry of someone who’s done it:

Binary Heartbeat’s blog

I’ll replace this link with my own experience when I have one.  Hopefully soon!