Page 1 of 1

Everything is insecure!

Posted: Sat Sep 14, 2024 9:43 pm
by wcndave

Just installed Fossapup, load up browser, search for something, Duck Duck Go is not secure and blocked.
Tried Google, blocked
Tried BBC News, blocked...

Can't verify any of the certificates for unknown reasons.
Any ideas as to what causes this?
Thanks!

Dave


Re: Everything is insecure!

Posted: Sat Sep 14, 2024 9:55 pm
by williwaw

try a later version of puppy?


Re: Everything is insecure!

Posted: Sat Sep 14, 2024 10:01 pm
by wcndave

I installed it today...


Re: Everything is insecure!

Posted: Sat Sep 14, 2024 10:04 pm
by wcndave

And it's the recommended version of 64 bit puppy to go for, on the Puppy forum...


Re: Everything is insecure!

Posted: Sat Sep 14, 2024 10:29 pm
by rockedge

@wcndave
Check your system clock! If it is set incorrectly the certificates will not work for you.

Boot up the Puppy Linux and set your clock. Menu->Desktop->Psync


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 12:23 am
by geo_c
rockedge wrote: Sat Sep 14, 2024 10:29 pm

@wcndave
Check your system clock! If it is set incorrectly the certificates will not work for you.

Boot up the Puppy Linux and set your clock. Menu->Desktop->Psync

I had this problem last week on a machine that had a funky clock, and Thunderbird said my certificates would not be good until Jan 20th, 2022. And then I looked at my system clock and date and realized it was years behind, like a factory reset of the internal clock. Once I set it, certificates worked again.


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 1:27 am
by wizard

@wcndave

Update your browser version.

wizard


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 5:59 am
by dimkr

Fossapup was released in 2020 and has no security updates of any kind. If you install it now, you're installing an OS with 4 years of known vulnerabilities, many of them with ready made exploits that can be found online easily.

The problems with browsers probably happen because the clock is not set correctly, or because Fossapup has 4y old CA certificates: it's likely that some certificates are expired, revoked or missing.

If you tell us what led you to it and not a more recent Puppy release, maybe we can fix it. puppylinux.com no longer offers Fossapup in the main page.


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 6:03 am
by peebee
wcndave wrote: Sat Sep 14, 2024 10:04 pm

And it's the recommended version of 64 bit puppy to go for, on the Puppy forum...

Please say where you found this "recommendation"? Thanks.


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 8:21 am
by greengeek

It is ironic that "certificates" and "hardware clock" are used as excuses for webpages to not load.
Strange world.
Seems to me that these are artificial methods to ensure that specific people (Gates) or organisations (Google) can easily fit nose-rings into we mere mortals.

Keen for a web that allows the user to do what the user wants.

But yeah - in this case it looks like bad RTC and hardware clock settings....


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 9:35 am
by dimkr

@greengeek Without this "security nosense" you wouldn't be able to differentiate between your bank and a malicious site that pretends to be your bank. If you have an outdated set of CA certificates, maybe your browser still trusts sites with certificates signed by a compromised CA, allowing you to view malicious sites without an "I understand the risk and want to proceed" prompt, and even shows a lock icon or a nice green bar on top to indicate that the site is what it claims to be. And certificates are valid in a given time range, so without a synchronized clock, your browser has no protection against leaked certificates (which expire at some point).


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 12:00 pm
by wcndave
peebee wrote: Sun Sep 15, 2024 6:03 am
wcndave wrote: Sat Sep 14, 2024 10:04 pm

And it's the recommended version of 64 bit puppy to go for, on the Puppy forum...

Please say where you found this "recommendation"? Thanks.

Started at the homepage: https://puppylinux-woof-ce.github.io/
Clicked on "downloads" https://forum.puppylinux.com/puppy-linux-collection
I could go for ubuntu 64 bit version, which is the second on the list.
OR
I can click on Getting Started and System Requirements - Reading Guide
then Making a CD or USB for your First Boot
then Puppy Linux Collection page.

As a noob to puppy, it was quickly presented to me on a number of occasions as being a good very lightweight for older 64 bit computers.

Could you suggest an alternative?


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 12:47 pm
by Jasper

@wcndave

Why not share your hardware specs and that might provide informed suggestions from existing members?

Also, how do you intend to use the OS and it's purpose?

The newer builds use external package managers which give you a greater choice of new applications to install.

There will be learning curve at the beginning!!


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 1:52 pm
by peebee
wcndave wrote: Sun Sep 15, 2024 12:00 pm

I can click on Getting Started and System Requirements - Reading Guide
then Making a CD or USB for your First Boot
then Puppy Linux Collection page.

As a noob to puppy, it was quickly presented to me on a number of occasions as being a good very lightweight for older 64 bit computers.

Could you suggest an alternative?

I have updated the misleading "Making a CD or USB for your First Boot" - thanks

I suggest you try BookwormPup64


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 5:37 pm
by wcndave
Jasper wrote: Sun Sep 15, 2024 12:47 pm

@wcndave

Why not share your hardware specs and that might provide informed suggestions from existing members?

Also, how do you intend to use the OS and it's purpose?

The newer builds use external package managers which give you a greater choice of new applications to install.

There will be learning curve at the beginning!!

I've been using slack/redhat/redora/debian/ubuntu/SuSE for decades, however I often need something very lightweight and USB bootable to run either a gparted type tool, or clamav.

I have a i5 2GB RAM laptop, and am now running Bookworm, although not obvious re clamav, as it's not in the package manager.
I will have a look around a bit more.

Linux has now been 2 days away from "ready for consumers" for about 20 years... I keep hoping!


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 6:28 pm
by Jasper

@wcndave

As you mention two specific tools, Gparted & ClamAV.

OOps :oops: should have said that FatDog64 will have both applications available to use.

How about SystemRescue?

https://www.system-rescue.org/System-tools/

This will have GParted onboard and you could use PacMan to install ClamAV

https://www.system-rescue.org/manual/In ... th_pacman/


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 8:36 pm
by wcndave
Jasper wrote: Sun Sep 15, 2024 6:28 pm

@wcndave

As you mention two specific tools, Gparted & ClamAV.

OOps :oops: should have said that FatDog64 will have both applications available to use.

How about SystemRescue?

https://www.system-rescue.org/System-tools/

This will have GParted onboard and you could use PacMan to install ClamAV

https://www.system-rescue.org/manual/In ... th_pacman/

Hi, that's really helpful, thanks. Right now I found by updating the package manager list, ctrl+r clamav was listed, so can do what I needed to do today.
I will check out the system rescue option after - thanks again!


Re: Everything is insecure!

Posted: Sun Sep 15, 2024 9:04 pm
by Sofiya

ClamTK - GUI for ClamAV
sudo pacman -S clamtk