Running 2 programs on raspberry pi 5, potential vulnerabilities?
Posted by SeriousSquirtSlurper@reddit | learnprogramming | View on Reddit | 2 comments
I'm running a discord bot using python 3.12.7 and discord.py 2.4.0 on raspberry pi 5. In the future I hope to also host a website on it. I haven't decided what libraries but jQuery, react, vue, typescript, and tailwind all seem interesting.
Are there any security issues I should be aware of? Such as people hacking into my website or bot then accessing my raspberry pi or the two programs conflicting with each other. Both programs will not interact with each other. They will be using Google firebase (separate databases though).
Is there anything I should look out for when doing this?
chaotic_thought@reddit
You could run your bot as a limited to user to restrict the damage in case there is a bug or vulnerability. I think this is standard practice, anyway. In the worst case, the attacker will only have access to what the bot's process itself can do.
You can also use containerization on Linux or a "jail" in BSD. But you have to decide whether this kind of thing is worth it. It's a raspberry Pi -- to me this sounds like digging up a moat and putting a drawbridge to protect your doghouse.
Big_Combination9890@reddit
There are literally hundreds of potential issues that can arise regarding webapp security, using cloud databases or running programs interacting with chat channels.
Just a short, and absolutely not exhaustive list of examples: