News for hackers. Stuff that matters.

A comment on Ask HN: What have you done with Raspberry Pi so far?. Parent comment

Re:Ask HN: What have you done with Raspberry Pi so far? by brutus1213 on Saturday January 19, 2019 @08:10AM (#18946862)
Did you use some opensource IDS software or just your own scripts? Stuff like nmap, snort? I've been wanting to do this for a while .. just tracking comms statistics from various devices so I can see what phones home.
[ Parent | on HN ]
Re:Ask HN: What have you done with Raspberry Pi so far? by jamieweb on Saturday January 19, 2019 @08:44AM (#18946995)
No it's a bit more primitive than that. :)

For basic IDS, it's a Python program I wrote a few years ago which does a recursive wget over my entire website, then generates SHA256 hashes of each page. Then it compares the hashes against the previous scan, and emails me if there are any changes. For very dynamic websites this doesn't work very well - luckily my site is almost 100% static so I can just whitelist the few allowed changes to prevent false-positive alerts.

I also monitor my DNS and WHOIS for changes, so that if my domain or DNS is hijacked, then I hopefully will know about it more quickly.

[ Parent | on HN ]