Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror •...
Transcript of Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror •...
![Page 1: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/1.jpg)
Building a magic mirror
1
![Page 2: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/2.jpg)
Steven Wierckx
2
Application security consultant for Toreon (www.toreon.com) OWASP volunteer (www.owasp.org) I am the cavalry volunteer (www.iamthecavalry.org) Twitter: @ihackforfun
![Page 3: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/3.jpg)
Agenda
• Introduction • Components • Preparing the hardware • Preparing the software • MagicMirror installation & configuration • Changing the modules • Securing the magic mirror • Next steps • Credits
3
![Page 4: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/4.jpg)
Introduction
What s a ‘magic mirror’? Just a mirror that also shows text, pictures etc.
4
![Page 5: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/5.jpg)
Components
• Screen • Computer • One way mirror (a.k.a. Observation mirror, doorkijkspiegel) • Various cables, case(s)
5
![Page 6: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/6.jpg)
Preparing the hardware
6
![Page 7: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/7.jpg)
Preparing the hardware
7
![Page 8: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/8.jpg)
Preparing the hardware
8
![Page 9: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/9.jpg)
Preparing the hardware
9
![Page 10: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/10.jpg)
Building a travel case
10
![Page 11: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/11.jpg)
Preparing the software
• Burn latest Raspbian to SD card (2017-03-02-raspbian-jessie.img) • Enable wireless • Update • Configure SSH • Disable ‘underscan’
11
![Page 12: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/12.jpg)
Underscan
12
![Page 13: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/13.jpg)
MagicMirror installation & configuration part I
• Rotate screen • Autohide cursor
• sudo apt-get install unclutter
• Disable screensaver • Can be difficult • Easy option: install xscreensaver and disable the screensaver
• Disable WiFi power save
13
![Page 14: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/14.jpg)
MagicMirror installation & configuration part II
• https://magicmirror.builders/ • Config files can be found at /home/pi/MagicMirror/config Not done: • Autostart MagicMirror
14
![Page 15: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/15.jpg)
MagicMirror installation & configuration part III
• npm start • Web view of mirror (good for remote testing) • Update config file
15
![Page 16: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/16.jpg)
Changing the modules
Standard widgets: • Current weather in New York • Weather prediction for New York • News feed for a US news paper
Changed to: • Current weather in Wezemaal • Weather prediction for Wezemaal • News feed for ‘De Morgen’
16
![Page 17: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/17.jpg)
Securing the magic mirror
• Change default password • Remove services that are not used
• rcconf
• Secure SSH • Added fail2ban • Not done: disable password login and use key pair to authenticate
• Remove software • sudo apt-get remove --purge smbclient samba-common
• Setup iptables
17
![Page 18: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/18.jpg)
Threat landscape
• Will run on my home WiFi • Home WiFi is a trusted environment If my home WiFi is compromised the magic mirror will be the least of my problems If my home is invaded they can have the magic mirror if they leave me and my family alone
18
![Page 19: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/19.jpg)
Next steps
• Facial recognition • Motion activated powersave • Motion activated widgets • Voice control (like Alexa) • Touch screen • Button(s) in case • Start timer to brush teeth, play animation • Replay the latest news broadcast
• Time based widgets • Holiday themes • Halloween scare
19
![Page 20: Building a magic mirror - HITB · Building a magic mirror 1 . ... • Securing the magic mirror • Next steps ... • Burn latest Raspbian to SD card (2017-03-02-raspbian-](https://reader033.fdocuments.us/reader033/viewer/2022050814/5b376f4f7f8b9abd438c337d/html5/thumbnails/20.jpg)
Credits
• Michael Teeuw, creator of the MagicMirror² project
• Sebastiaan Mangoentonojo, security consultant & woodwork specialist
20