Raspberry Pi 4 : What are YOU going to do now?

hooperre

All these projects sound awesome (particularly the Pi-Hole / file-server route), but I'm concerned a bit regarding security. Is changing the Pi's user name and password and the SSH port enough?

mitu

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

Is changing the Pi's user name and password and the SSH port enough?

You don't have to open the SSH to the world and for pi-hole you don't need to expose the PI to the internet - it can sit in your LAN behind your router.

hooperre

@mitu How about for RetroPie? I have been wondering this in general for a while.

mitu

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

@mitu How about for RetroPie?

I don't understand the question.

hooperre

Is changing the Pi's user name and password and the SSH port enough to protect my Raspberry Pi from brute force attacks from Chinese bots?

I assumed by enabling SSH I'm making my Pi accessible, but now that I'm thinking about it, there's no external IP address for it so that's probably what you were referring to. So it would be behind my router as well. My MotionEyesOS Pi OTOH I guess is the one I would need to worry about, which does have an external IP and has a changed password and port.

I'm assuming all these bots are using the default login with port 22.

Sorry, this is stupid I just haven't really thought about it much. I remember there being a discussion about whether SSH should be on by default and the admin team decided not to so I kind of assumed the RetroPie project left Pi's prone to attack if SSH was enabled.

cyperghost

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

Is changing the Pi's user name and password and the SSH port enough to protect my Raspberry Pi from brute force attacks from Chinese bots?

Better than nothing.

I'm assuming all these bots are using the default login with port 22.

Yes and if you set it to defaults your Pi will be visited by several "friends" very soon. I suggest to use a logfile watcher that will deny access after 2 attempts with wrong password. But leaving SSH open is a security risk at glance.

mitu

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

Is changing the Pi's user name and password and the SSH port enough to protect my Raspberry Pi from brute force attacks from Chinese bots?

Depends on the new password, it's its relatively simple, it's not going to be enough.

I assumed by enabling SSH I'm making my Pi accessible, but now that I'm thinking about it, there's no external IP address for it so that's probably what you were referring to. So it would be behind my router as well. My MotionEyesOS Pi OTOH I guess is the one I would need to worry about, which does have an external IP and has a changed password and port.

It depends. If you have IPv6 enabled on your router and your ISP supports it, you might find that your PI can get a - public facing - IPv6 address. Your router should also have a firewall to prevent the direct access.

I'm assuming all these bots are using the default login with port 22.

Commonly, yes.

Sorry, this is stupid I just haven't really thought about it much. I remember there being a discussion about whether SSH should be on by default and the admin team decided not to so I kind of assumed the RetroPie project left Pi's prone to attack if SSH was enabled.

I think that was an upstream (Raspbian distribution) decision, but it's still a sensible default.

hooperre

@mitu said in Raspberry Pi 4 : What are YOU going to do now?:

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

Sorry, this is stupid I just haven't really thought about it much. I remember there being a discussion about whether SSH should be on by default and the admin team decided not to so I kind of assumed the RetroPie project left Pi's prone to attack if SSH was enabled.

I think that was an upstream (Raspbian distribution) decision, but it's still a sensible default.

Oh, absolutely. Just hadn't thought about it since that discussion much.

langest

@thelostsoul said in Raspberry Pi 4 : What are YOU going to do now?:

@KN4THX I am mostly interested in reducing input latency with optimized settings for 8 and 16 bit systems. Also I am excited about the improvements on newer MAME versions and off course the Nintendo 64. My current environment is an overclocked Pi3B.

Pretty much this. Also getting more frames in Yoshi's Island

langest

@hooperre said in Raspberry Pi 4 : What are YOU going to do now?:

Is changing the Pi's user name and password and the SSH port enough to protect my Raspberry Pi from brute force attacks from Chinese bots?

Disable login with password and setup ssh-key authentication.
Much smoother as well, since you won't be prompted for a password either.

hooperre

@langest Any idea where I could read more about this? This would be new to me. Thanks!

mitu

@hooperre See this if you're using Putty.

hooperre

@mitu said in Raspberry Pi 4 : What are YOU going to do now?:

@hooperre See this if you're using Putty.

Thanks!

hotmetal007

I want to make a nas server for using plex and hifi music :V, and i have some sanwa kits to make a new arcade machine, i was thinking in a Cadillacs and Dinosaur theme :V

pi2user

A pi 1 is with 100mbit ethernet and 512mb ram is already massively overpowered for running pi-hole. Ive used one like this for years. Cpu barely goes above 20%, network bandwidth for dns requests is measured in kilobits, not gigabits, and much of the ram is unused.

So by all means buy a pi4 for pihole but you can save money by using any pi with an ethernet port that you already have.

I'll be buying a pi 4 to get better performance with snes and ps1 emulation.

Darksavior

@pi2user Yep, I retired my pi2 as a pihole. I'm even powering it off the router's usb port.

jrb555

I seem to be able to do everything I want with the Pi 3b+ except:

Running games with shader (to smooth pixels) AND with a frame Overlay (to have a TV look for example) will stutter badly specifically at 1080p.
60 fps on the XMB menu. It looks fine when using a low res screen like a CRT though, or even at 720p but I need that 1080p.

All the consoles that run well on the 3b+ are actually the ones I wanted, I don't care to emulate Saturn, Dreamcast, N64, GameCube or PS2. However, if N64 emulation becomes nice, all the better!!! (Seems to be the most likely one out of that group considering I can already play things like Ocarina of Time and Mario 64 on a Pi3b non +)

KN4THX

@jrb555 Come on, you have to get some Mario Kart 64 action in. I used to kill that game back in the day. I had just gotten my driver's license and I used to drive to my cousin's house for competitions. Once we got to drinking age we used to play "Whoever gets their score to end in five first picks out a shot for the loser". That was actually fun because if you were one point away and lost it gave you an automatic handicap and kept it fair. I'd be super excited to get Golden Eye working solid one day.

Oh, and that super fast awesome Quest 64 game that gave Final Fantasy a run for it's money :0)

Dwarfboysim

Will GameCube emulation be a possibility?

Ranma

@jrb555 said in Raspberry Pi 4 : What are YOU going to do now?:

I seem to be able to do everything I want with the Pi 3b+ except:

Running games with shader (to smooth pixels) AND with a frame Overlay (to have a TV look for example) will stutter badly specifically at 1080p.

60 fps on the XMB menu. It looks fine when using a low res screen like a CRT though, or even at 720p but I need that 1080p.

All the consoles that run well on the 3b+ are actually the ones I wanted, I don't care to emulate Saturn, Dreamcast, N64, GameCube or PS2. However, if N64 emulation becomes nice, all the better!!! (Seems to be the most likely one out of that group considering I can already play things like Ocarina of Time and Mario 64 on a Pi3b non +)

I think 720p is ideal for the Pi 3b+, just do it! I run my 3b+ at 720p and it runs perfectly with shaders etc. I use zfast shaders and have bezels on all the emulators unless the emulator itself cannot use them (like GlideN64) and have had no problems. Zfast is my favourite shader and looks amazing at 720p, with no darkening of the image. I don't think the 3b+ is really a 1080p device, if you know what I mean, but it looks amazing anyway at 720p imho.

I'm looking forward to getting a Pi4, but I feel it's such a massive change for all developers that it's going to be a good year before we can see what it can do. So I think until then I'm going to stick with the 3b+. I don't think the Pi 4 will realistically do Saturn emu (though I would be thrilled to be proved wrong!), but I do expect it'll be much better for N64 and DC. Outside of that, the 3b+ is more than capable of what I want. Plus, mine's in a Mega Pi case! I don't want to lose that!