CKRT
Posts: 3
Joined: Sat Sep 07, 2013 5:36 am

Unsure if Pi is my solution

Sat Sep 07, 2013 5:43 am

I just moved into an apartment complex that provides great internet at "no" cost (rolled into rent) . Problem? Everyone connects to 1 of 2 routers. They do have a password on them, but again, everyone has access. I'm a little paranoid of anyone looking at my account logins, or at the worst having my identity stolen.

I've heard of using Pi as a VPN server, but I'm not sure if this is what I'm looking for. Ideally, I'd like to be able to use my Apple TV without having people decide to randomly AirPlay to it as well, but at this point I just want to browse securely without worrying about someone maliciously going through my packets. There are no Ethernet jacks in my apartment, just routers in the hallway.


Is Pi what I'm looking for? If not, then what do I need to be looking into?

User avatar
redhawk
Posts: 3465
Joined: Sun Mar 04, 2012 2:13 pm
Location: ::1

Re: Unsure if Pi is my solution

Sat Sep 07, 2013 8:47 am

Sharing your internet connection with other users on a local LAN whether it's Wifi access with WPA2 encryption or wired your machine would still be prone to ARP poisoning - http://en.wikipedia.org/wiki/ARP_spoofing
The only true way to stay anonymous is to use a dedicated proxy or VPN service since packets would be encrypted and impossible to read.

Richard S.

User avatar
pluggy
Posts: 3635
Joined: Thu May 31, 2012 3:52 pm
Location: Barnoldswick, Lancashire,UK
Contact: Website

Re: Unsure if Pi is my solution

Sat Sep 07, 2013 8:55 am

Its easy enough to make a Pi into a router/vpn with its own dhcp so that your stuff isn't accessible to everyone else in the complex. The Pi issues IPs outside the subnet of the complex's system and won't route stuff back into your apartment. Use a USB/ethernet adaptor for a wired connection or a Wifi adaptor if everything in your apartment is wireless. There are plenty of ready made solutions to do the same thing if you don't facny getting your hands dirty.

Eg http://www.businessdirect.bt.com/produc ... =470000000

ARP spoofing is dependent on MAC addresses and since MAC addresses aren't routable, the attacker would need to be on your side of the router to use anything to do with ARP.
Don't judge Linux by the Pi.......
I must not tread on too many sacred cows......

User avatar
mrpi64
Posts: 931
Joined: Sat Feb 16, 2013 5:13 pm

Re: Unsure if Pi is my solution

Sat Sep 07, 2013 4:19 pm

CKRT wrote:I just moved into an apartment complex that provides great internet at "no" cost (rolled into rent) . Problem? Everyone connects to 1 of 2 routers. They do have a password on them, but again, everyone has access. I'm a little paranoid of anyone looking at my account logins, or at the worst having my identity stolen.

I've heard of using Pi as a VPN server, but I'm not sure if this is what I'm looking for. Ideally, I'd like to be able to use my Apple TV without having people decide to randomly AirPlay to it as well, but at this point I just want to browse securely without worrying about someone maliciously going through my packets. There are no Ethernet jacks in my apartment, just routers in the hallway.


Is Pi what I'm looking for? If not, then what do I need to be looking into?
If you have a gmail account, you allways could install chromium (sudo apt-get install chromium), and have google encrypt all of your sync data. I'm not sure if this will work, as Chromium is being a reall buggar to me right now!
I'm happy to help.
https://www.raspberrypi.org/forums/viewtopic.php?f=78&t=51794 - List of games that work on the Pi.

CKRT
Posts: 3
Joined: Sat Sep 07, 2013 5:36 am

Re: Unsure if Pi is my solution

Sat Sep 07, 2013 4:23 pm

pluggy wrote:Its easy enough to make a Pi into a router/vpn with its own dhcp so that your stuff isn't accessible to everyone else in the complex. The Pi issues IPs outside the subnet of the complex's system and won't route stuff back into your apartment. Use a USB/ethernet adaptor for a wired connection or a Wifi adaptor if everything in your apartment is wireless. There are plenty of ready made solutions to do the same thing if you don't facny getting your hands dirty.

Eg http://www.businessdirect.bt.com/produc ... =470000000

ARP spoofing is dependent on MAC addresses and since MAC addresses aren't routable, the attacker would need to be on your side of the router to use anything to do with ARP.
So, how would I set up that router specifically? I don't understand how it would work if I don't have a Ethernet jack to use.

User avatar
topguy
Posts: 6527
Joined: Tue Oct 09, 2012 11:46 am
Location: Trondheim, Norway

Re: Unsure if Pi is my solution

Sat Sep 07, 2013 9:12 pm

CKRT wrote:, but at this point I just want to browse securely without worrying about someone maliciously going through my packets.
1st. step:
https://www.eff.org/https-everywhere

2nd. step:
Tell windows that its on a unsecured network. This should tighten the firewall a bit.

CKRT
Posts: 3
Joined: Sat Sep 07, 2013 5:36 am

Re: Unsure if Pi is my solution

Sun Sep 08, 2013 10:03 pm

topguy wrote:
CKRT wrote:, but at this point I just want to browse securely without worrying about someone maliciously going through my packets.
1st. step:
https://www.eff.org/https-everywhere

2nd. step:
Tell windows that its on a unsecured network. This should tighten the firewall a bit.
I'd much rather either VPN or somehow have my own router set up.

Return to “General discussion”