WEBVTT 0 00:01.200 --> 00:08.070 The Tor Browser comes as a hardened Mozilla Firefox browser and it’s a standalone application 1 00:08.130 --> 00:10.860 which means that it can be run without installing it. 2 00:11.430 --> 00:15.090 There are versions for Windows, Linux, Mac or Mobile phones. 3 00:15.570 --> 00:22.170 If you want to do a Windows installation, you just download the installation kit from the official 4 00:22.170 --> 00:27.000 website, which is torproject.org and follow the instructions 5 00:27.270 --> 00:31.710 which are off type next, next and finish. The entire process 6 00:31.950 --> 00:33.560 takes a few seconds. Let's 7 00:33.660 --> 00:34.080 do it. 8 00:34.470 --> 00:36.600 I'm downloading Tor for Windows. 9 00:41.100 --> 00:43.020 I'm opening the installation kit. 10 00:43.150 --> 00:45.710 I'm selecting the language English. 11 00:45.830 --> 00:46.320 OK. 12 00:46.680 --> 00:47.250 And install. 13 00:48.460 --> 00:49.390 And that's all. 14 01:00.650 --> 01:02.360 This is Tor, for Windows. 15 01:03.770 --> 01:11.480 Now let's see how to install the Tor browser on Linux Even though you don't use Tor on Linux 16 01:11.720 --> 01:18.290 I advise you to watch this part of the video tutorial, because I'm going to show you also other interesting 17 01:18.290 --> 01:23.360 things like how to check the digital signature of Tor or how to use bridges. 18 01:23.750 --> 01:24.920 Let's get started! 19 01:25.790 --> 01:31.960 I have this Linux Mint VM and I'm downloading the installation kit for Linux. 20 01:33.080 --> 01:35.420 I'm saving it locally, on my disc. 21 01:36.820 --> 01:41.740 But what can it be done if the website is blocked due to censorship? 22 01:42.550 --> 01:47.980 Note that Tor is censored in some countries. In this table 23 01:48.220 --> 01:55.810 we see the top 10 countries by possible censorship events as obtained from the Tor anomaly based censorship 24 01:55.810 --> 01:56.950 detection system. 25 01:58.100 --> 02:05.900 If the Tor website is blocked in your country and you cannot access the torproject.org and download 26 02:05.960 --> 02:13.040 the Tor browser, then in this case, there is a service called the Get Tor that provides alternative 27 02:13.040 --> 02:20.420 methods to obtain the Tor browser, especially for people living in places with high level of censorship. 28 02:21.320 --> 02:24.290 The idea behind the Get Tor is very simple. 29 02:24.710 --> 02:29.370 You just have to send the request to get Tor at torproject. 30 02:29.450 --> 02:34.910 org specifying your operating system and your language like, say, Windows 31 02:35.000 --> 02:35.600 es 32 02:35.970 --> 02:44.030 from Spanish and Get Tor will send you back a reply with links to download Tor browser from a supported 33 02:44.030 --> 02:44.690 provider. 34 02:46.120 --> 02:53.500 That email will also contain a link to the digital signature of the Tor browser so that you can verify 35 02:53.710 --> 02:55.030 that it's legitimate. 36 02:55.480 --> 03:00.940 Take a look at the gpg lecture where I ‘ve explained how to check a digital signature. 37 03:02.170 --> 03:04.420 Tor is not the blocked in my country, 38 03:04.600 --> 03:07.000 so I was able to download it. 39 03:08.260 --> 03:12.850 It's in the downloads folder, in the user's home directory. 40 03:14.200 --> 03:16.200 I'm moving to that directory. 41 03:17.510 --> 03:24.200 The next step, even though it's optional, it's highly recommended, especially for applications like 42 03:24.230 --> 03:24.590 Tor. 43 03:25.340 --> 03:28.460 This step means to verify the digital signature. 44 03:28.820 --> 03:35.510 Only this way you'll be sure you've downloaded the legitimate application and not a clone with back 45 03:35.510 --> 03:37.150 doors or other flaws. 46 03:38.270 --> 03:41.250 I am also downloading the digital signature. 47 03:41.940 --> 03:47.490 I am clicking with my right mouse button and then select copy link location. 48 03:49.360 --> 03:53.510 And in the terminal, I'm downloading the signature using wget. 49 03:53.560 --> 03:55.780 wget 50 03:56.380 --> 03:59.260 And I'm pasting the url, the address. 51 04:05.470 --> 04:05.790 OK. 52 04:06.390 --> 04:08.760 This is the archive of the Tor browser 53 04:09.030 --> 04:14.280 and this is its digital signature. In order to verify a digital signature 54 04:14.610 --> 04:21.360 you also need the public key of the entity that signed the software, the application. 55 04:22.290 --> 04:25.470 I don't have the public key, so I have to import it. 56 04:26.220 --> 04:30.750 Let's try to verify the digital signature without having the public key. 57 04:31.050 --> 04:38.520 So gpg --verify the signature and the file 58 04:38.550 --> 04:39.450 I want to verify. 59 04:42.400 --> 04:44.380 And I'm getting an error. 60 04:44.860 --> 04:46.540 It says no public key. 61 04:47.440 --> 04:53.850 But what's interesting, it also says the idea of the public key that's missing. 62 04:54.190 --> 04:55.450 This is the Keys I.D.. 63 04:56.570 --> 05:01.430 Having the Keys I.D., I can import it from a key server. 64 05:04.440 --> 05:17.260 So gpg -- keyserver, a key server,pgp.mit.edu-- recv 65 05:17.910 --> 05:19.970 And I'm pasting the key id. 66 05:22.310 --> 05:24.260 It's importing the key. 67 05:27.980 --> 05:31.520 It can take a few seconds or even tens of seconds. 68 05:37.930 --> 05:38.420 OK. 69 05:38.620 --> 05:39.940 The key was imported. 70 05:41.420 --> 05:44.530 If you get an error in the first attempt, try again. 71 05:46.340 --> 05:51.430 Now I can verify the signature, so I'm executing the same command 72 05:51.620 --> 05:55.640 again, gpg -- verify the signature 73 05:55.640 --> 05:57.770 file and the application 74 05:58.010 --> 05:59.060 the Tor archive. 75 06:01.410 --> 06:03.150 And I've got a good signature. 76 06:03.930 --> 06:04.470 Perfect. 77 06:05.130 --> 06:10.200 After verifying the digital signature, I'm extracting the archive. 78 06:11.700 --> 06:16.590 tar -xvf and the file 79 06:18.510 --> 06:23.830 x comes from extract, v from verbose and f from file. 80 06:25.560 --> 06:26.730 It's extracting Tor. 81 06:32.940 --> 06:35.020 A new directory was created. 82 06:35.440 --> 06:37.480 I'm moving to that directory. 83 06:37.840 --> 06:40.630 And I'm starting Tor, like this. 84 06:46.310 --> 06:55.070 You can also start it by going into that directory and double click the file, this file. Tor for 85 06:55.100 --> 07:00.470 Linux has been started. When you started the Tor browser for the first time 86 07:00.590 --> 07:03.320 you will be asked if you want to configure it, 87 07:03.700 --> 07:10.450 if you are in a country that censor Tor. Let's see how to break through censorship of barriers 88 07:10.760 --> 07:12.320 even when Tor is blocked. 89 07:14.630 --> 07:18.440 I'm clicking on "Tor is censored in my country". 90 07:20.250 --> 07:28.920 In fact, to circumvent censorship, Tor uses bridges; they are useful for Tor users living in oppressive 91 07:28.920 --> 07:36.450 regimes and for people who want an extra layer of security because they are worried somebody will recognize 92 07:36.690 --> 07:40.730 that they are contacting a public relay IP address. 93 07:41.300 --> 07:44.010 A bridge is basically a private 94 07:44.370 --> 07:49.020 Tor relay that helps you hide the fact that you are using the Tor network. 95 07:52.170 --> 07:58.350 You can run a bridge by yourself if you want to help censored users connect to the Tor Network. 96 07:58.860 --> 08:06.730 The requirements are to have a 24/7 Internet connection and the ability to expose TCP ports to the 97 08:06.750 --> 08:07.160 Internet 98 08:07.590 --> 08:09.060 (so NAT is not working). 99 08:10.590 --> 08:15.120 For more details about how to set up a Tor bridge follow this guide. 100 08:16.450 --> 08:19.030 OK, let's return to the Tor browser. 101 08:19.720 --> 08:21.160 You have three options: 102 08:22.620 --> 08:26.160 select a built-in bridge which is the default option, 103 08:27.760 --> 08:33.680 request a bridge from torproject.org or provide a bridge 104 08:33.740 --> 08:34.690 you already know. 105 08:35.960 --> 08:39.800 Leave the default option if you don't know what to do. 106 08:40.520 --> 08:43.060 In my case, I won't use a bridge. 107 08:43.520 --> 08:47.690 It's not necessary because Tor is not censored in my country. 108 08:49.010 --> 08:50.770 I'm connecting to the Tor network. 109 08:54.430 --> 08:56.710 And the Tor browser has started. 110 09:01.820 --> 09:06.070 Now I can browse the Internet anonymously and freely. 111 09:07.400 --> 09:13.850 By the way, you can always change the bridge settings by going to preferences 112 09:16.010 --> 09:17.240 and then to Tor. 113 09:22.000 --> 09:27.910 At the end of this lecture, I'd like to tell you that another easy way to connect to the Tor Network 114 09:27.910 --> 09:32.890 is to use another browser called Brave that has Tor built-in. 115 09:33.820 --> 09:37.520 It is based on a Chromium web browser, blocks 116 09:37.690 --> 09:43.870 ads and web trackers and provides a faster and safer way to browse the Internet. 117 09:44.350 --> 09:47.380 It was built with security and privacy in mind. 118 09:47.890 --> 09:51.400 You can download the Brave browser from brave.com. 119 09:52.630 --> 09:59.450 After downloading and installing Brave, which is a straightforward process, to connect to the Tor 120 09:59.450 --> 10:06.430 network, you just go to the three dots menu and click on the new private windows with Tor. 121 10:10.680 --> 10:11.940 And you are in the Tor network.