1
00:00:01,190 --> 00:00:09,430
OK so now that we understand why cubes is why it's so secure and why you might want to use it if you're

2
00:00:09,440 --> 00:00:11,360
ready to take on this challenge.

3
00:00:11,360 --> 00:00:17,000
And if you have a computer that can support cubes then you can follow the instructions.

4
00:00:17,000 --> 00:00:23,300
Then I'm going to show you and this lecture and the next lectures to learn how to install cubes.

5
00:00:23,360 --> 00:00:29,330
Now we have two options we can first of all install it as our main operating system on the built in

6
00:00:29,330 --> 00:00:37,790
storage of your computer or we can install it on a USB stick as alive operating system.

7
00:00:37,790 --> 00:00:44,230
So for now we're going to need a USB stick with at least eight gigabytes of storage.

8
00:00:44,240 --> 00:00:47,630
We will also obviously need to download cubes.

9
00:00:47,630 --> 00:00:52,490
We're going to use Archer which is the same program that we used to flash tails.

10
00:00:52,520 --> 00:00:57,540
So we're going to use it to flush the cubes iso image to the USB stick.

11
00:00:57,590 --> 00:01:03,930
And that way we're going to have a beautiful USB stick that contains the cubes iso image.

12
00:01:04,130 --> 00:01:06,490
At this stage we have two options.

13
00:01:06,560 --> 00:01:13,430
We can either just simply connected to a computer and install cubes on that computer on the built in

14
00:01:13,430 --> 00:01:17,500
storage of that computer just like any other operating system.

15
00:01:17,510 --> 00:01:25,970
So we'll be able to use it without even connecting the USB stick or you can use another USB stick of

16
00:01:25,970 --> 00:01:28,640
minimum size 32 gigabytes.

17
00:01:28,640 --> 00:01:37,610
And what we'll do in this case is we will flush a life version of cubes to the new USB stick and then

18
00:01:37,850 --> 00:01:46,190
we can use this new USB stick to boot into cubes from any supported computer regardless of what operating

19
00:01:46,190 --> 00:01:48,210
system this computer runs.

20
00:01:48,230 --> 00:01:55,700
So we can connect it to a windows computer or Mark or Linux and we'll be able to use cubes on any of

21
00:01:55,700 --> 00:01:56,930
these computers.

22
00:01:57,020 --> 00:02:03,560
And once we disconnect the USB stick the computers will be back to normal running the default operating

23
00:02:03,560 --> 00:02:11,510
systems that they used to run now the installation steps are identical for both options except for one

24
00:02:11,510 --> 00:02:12,460
small change.

25
00:02:12,560 --> 00:02:18,560
And I will highlight that change once we get to it so let's go back to the start.

26
00:02:18,690 --> 00:02:25,500
Everything that I'm going to show you from now on will be done on a Windows computer but you can follow

27
00:02:25,590 --> 00:02:32,160
the exact same steps and use the exact same software that I'm going to use on Windows to install cubes

28
00:02:32,340 --> 00:02:34,560
from any other operating system.

29
00:02:34,560 --> 00:02:41,760
So you can follow these steps from OSX and from Linux using the exact same software if you face any

30
00:02:41,760 --> 00:02:47,450
issues then please post them in the Q and A section and we'll respond to you within 15 hours.

31
00:02:48,610 --> 00:02:54,580
So I have the Cuba's official Web site open in here and I'm already in the download page.

32
00:02:54,610 --> 00:03:00,670
I will include this in the resources of this lecture and I'm going to scroll down and I'm going to download

33
00:03:00,670 --> 00:03:02,400
this version right here.

34
00:03:02,470 --> 00:03:09,250
So all you have to do is just click on the ISIL button in here now clicking on this will start to download

35
00:03:09,250 --> 00:03:10,290
for you.

36
00:03:10,330 --> 00:03:14,200
This is a four point six gigabyte file so it's pretty big.

37
00:03:14,200 --> 00:03:17,350
That's why I've already downloaded it before this lecture.

38
00:03:17,350 --> 00:03:20,890
As you can see I already have it downloaded here.

39
00:03:20,950 --> 00:03:27,720
The next thing that you want to download is the signature that's associated with the ISO image.

40
00:03:27,760 --> 00:03:33,820
We're going to download this because we're going to use it to ensure that the ISO image did not get

41
00:03:33,820 --> 00:03:40,510
modified by a third party as we download it because as we said before whenever you download something

42
00:03:40,510 --> 00:03:47,270
from the internet it passes through a number of hops and it can be modified by a number of entities.

43
00:03:47,290 --> 00:03:53,260
Therefore we're going to download the signature in order to use it to verify the integrity of the ISO

44
00:03:53,260 --> 00:04:00,430
image and make sure that the ISO image did not get modified since the developers of cubes created the

45
00:04:00,430 --> 00:04:09,120
signature so to download the signature we're going to right click it and click on save link as I'm going

46
00:04:09,120 --> 00:04:17,210
to put it in my downloads and I'm just going to click on Save and if I look in my downloads right here

47
00:04:17,420 --> 00:04:22,930
you can see we have the signature file that we can use to verify the integrity.

48
00:04:22,940 --> 00:04:28,550
Now the steps that I'm going to follow right now to verify the integrity are very similar to the steps

49
00:04:28,580 --> 00:04:32,090
that we followed to verify the integrity of your browser.

50
00:04:32,090 --> 00:04:39,620
When we download the tour to do this you can use PDP for when I already showed you how to download and

51
00:04:39,620 --> 00:04:43,790
install it in the lecture where we download the Tor Browser and verify it.

52
00:04:43,820 --> 00:04:45,830
So I'm not going to do it again.

53
00:04:45,830 --> 00:04:50,710
You can go back to that lecture and revise it and see how to download it and install it.

54
00:04:50,720 --> 00:04:53,150
I already have it downloaded and installed.

55
00:04:53,150 --> 00:04:58,880
And as you can see the icon in here shows a log icon which means that the software the PDP software

56
00:04:59,210 --> 00:05:02,310
is already installed on this computer.

57
00:05:02,430 --> 00:05:09,470
Now like I mentioned in that lecture you can use a graphical user interface to verify the signature

58
00:05:09,470 --> 00:05:10,320
and here.

59
00:05:10,460 --> 00:05:15,260
But in my experience the graphical interface is a little bit buggy.

60
00:05:15,260 --> 00:05:18,460
Therefore I'm going to do with using the command prompt.

61
00:05:18,590 --> 00:05:24,370
Not only that but the command prompt commands are identical to the commands that you'd use if you're

62
00:05:24,380 --> 00:05:26,360
using OSX or Linux.

63
00:05:26,510 --> 00:05:33,350
Therefore you can follow the next steps on an OS X computer or on a Linux and they should work exactly

64
00:05:33,350 --> 00:05:34,430
the same again.

65
00:05:34,520 --> 00:05:40,370
If you face any issues post them in the Q and A and we'll respond to you within 15 hours.

66
00:05:40,430 --> 00:05:44,100
So let's go ahead and just make this window a little bit smaller.

67
00:05:44,300 --> 00:05:47,180
And I already have my command prompt open in here.

68
00:05:47,240 --> 00:05:52,220
If you don't remember how to open it you just go to start type C and D and run it.

69
00:05:52,760 --> 00:06:00,470
And in order to verify this file first of all we need to download the master key for the cubes developers

70
00:06:01,340 --> 00:06:01,960
to do that.

71
00:06:01,970 --> 00:06:08,090
We can actually just click on the question mark in here beside the verify and this will actually open

72
00:06:08,120 --> 00:06:12,890
a page with detailed instructions on how to verify the cubes image.

73
00:06:12,890 --> 00:06:17,160
But like I said the steps in here are very very similar to what we followed.

74
00:06:17,240 --> 00:06:20,150
When we verify tor browser when we downloaded it.

75
00:06:21,230 --> 00:06:27,650
So like I said the first step is to add cubes master key to the keyring and to do this we're going to

76
00:06:27,650 --> 00:06:29,390
use this command right here.

77
00:06:29,420 --> 00:06:31,240
So I'm literally just going to highlight it.

78
00:06:31,250 --> 00:06:39,300
All right click copy and right click in here to paste it we're gonna hit enter to download it.

79
00:06:39,500 --> 00:06:43,280
You might need to give this a little bit of time to download the key for you.

80
00:06:43,310 --> 00:06:50,820
So be a little bit patient with it and perfect as you can see now the key is imported.

81
00:06:50,820 --> 00:06:57,420
Next we want to make sure that the key that we downloaded is actually the key for the cubes developers

82
00:06:58,170 --> 00:06:59,210
to do that again.

83
00:06:59,220 --> 00:07:02,590
This is going to be identical to what we did with tor browser.

84
00:07:02,610 --> 00:07:05,160
So first of all we're going to copy the key here.

85
00:07:05,190 --> 00:07:11,370
So we highlighted we had entered to copy it and then we're going to use GPO g the same command.

86
00:07:11,580 --> 00:07:18,250
We're going to say I want a fingerprint of the key that I just copied.

87
00:07:18,250 --> 00:07:22,100
I'm going to hit enter and we will get the fingerprint off this key.

88
00:07:22,870 --> 00:07:29,320
And we're going to scroll down on this page and compare it to the fingerprint that we have on the page

89
00:07:29,320 --> 00:07:31,030
itself.

90
00:07:31,270 --> 00:07:34,060
As you can see the two fingerprints are identical.

91
00:07:34,390 --> 00:07:43,420
Therefore we know that the key that we just downloaded is a valid key for the cubes developers next.

92
00:07:43,520 --> 00:07:50,520
We need to download the release key so the key that is used to sign this particular release.

93
00:07:50,570 --> 00:07:54,620
And as you can see in the file name in here it says cubes are for.

94
00:07:54,710 --> 00:07:57,020
So this is the fourth release.

95
00:07:57,020 --> 00:08:03,050
So we can go down in here to get the command to download the release key which is this command right

96
00:08:03,050 --> 00:08:03,860
here.

97
00:08:03,860 --> 00:08:12,730
So again we're going to copy all of this and paste it in here and you'll need to modify the in here

98
00:08:12,740 --> 00:08:20,330
so as you can see in here it says X you'll need to remove this and replace it with the release version.

99
00:08:20,330 --> 00:08:22,630
So again this says cubes are for.

100
00:08:22,670 --> 00:08:24,350
This means it's the fourth release.

101
00:08:24,350 --> 00:08:33,000
Therefore I'm going to type 4 and hit enter to download the key used to sign this particular release.

102
00:08:33,050 --> 00:08:33,580
Perfect.

103
00:08:33,620 --> 00:08:37,270
As you can see this key is important now.

104
00:08:37,280 --> 00:08:43,460
So right now you can literally go ahead and use this file to verify the integrity of the image.

105
00:08:43,610 --> 00:08:46,160
But we can go further.

106
00:08:46,160 --> 00:08:52,370
This is an optional step but it's good to just make sure that everything we're doing so far is valid

107
00:08:52,400 --> 00:09:00,030
and we haven't downloaded any wrong keys so you can use this command right here to make sure that the

108
00:09:00,030 --> 00:09:02,230
assigning key that we just downloaded.

109
00:09:02,250 --> 00:09:07,020
The second key is a valid key for the master key for the first key.

110
00:09:07,470 --> 00:09:13,410
So to do that again we're just going to piece the command that I just copied just like we did before

111
00:09:13,410 --> 00:09:17,210
we're going to replace the X with number four.

112
00:09:17,370 --> 00:09:25,150
I'm going to hit enter and as you can see in here this is the signature of the master key so you can

113
00:09:25,150 --> 00:09:28,990
see in here this is signed with Q's master signing key.

114
00:09:28,990 --> 00:09:35,530
And if we go if we scroll up all the way to the top you can see that this is the same signature for

115
00:09:35,530 --> 00:09:37,280
the master key.

116
00:09:37,330 --> 00:09:40,320
So so far we have imported the master key.

117
00:09:40,360 --> 00:09:42,700
We verified it using the fingerprint.

118
00:09:42,730 --> 00:09:49,060
Then we imported the signing key and we verified it by comparing its signature with the signature of

119
00:09:49,060 --> 00:09:50,400
the master key.

120
00:09:50,410 --> 00:09:58,210
So at this stage we're sure that the keys that we downloaded are valid keys that belong to the cubes

121
00:09:58,210 --> 00:09:59,910
developers.

122
00:10:00,130 --> 00:10:07,540
The last step is to use this signature file that we initially downloaded to verify the integrity of

123
00:10:07,540 --> 00:10:12,310
the cubes image that we will actually use to install cubes.

124
00:10:12,310 --> 00:10:16,710
So as you can see this these two files are stored in my downloads.

125
00:10:16,780 --> 00:10:19,550
And right now I'm in users Zaid.

126
00:10:19,690 --> 00:10:23,070
So I need to navigate to my downloads directory.

127
00:10:23,290 --> 00:10:26,430
We can do that by doing C.D. downloads.

128
00:10:26,650 --> 00:10:32,950
And if I do dare to list all files and directories in the current working directory you can see first

129
00:10:32,950 --> 00:10:38,350
of all I have the cubes iso image and then I have the signature file.

130
00:10:38,350 --> 00:10:43,960
So we're going to use the signature file to verify that the image is valid and did not get modified

131
00:10:43,960 --> 00:10:45,260
by a third party.

132
00:10:45,280 --> 00:10:51,100
And again the command that I am going to use is identical to the command that we used when we were verifying

133
00:10:51,100 --> 00:10:53,350
the integrity of Tor browser.

134
00:10:53,350 --> 00:11:02,620
So we're using CPG dash dash verify followed by the name of the signature file which is this file right

135
00:11:02,620 --> 00:11:04,000
here.

136
00:11:04,000 --> 00:11:10,120
So I can just type cue followed by a tab and it will auto complete for me and I'll just need to add

137
00:11:10,210 --> 00:11:19,740
the DOT a c I'm going to hit enter and give this a little bit of time to check the integrity of this

138
00:11:19,740 --> 00:11:26,900
image right here aren't perfect as you can see in here it's telling us this is a good signature from

139
00:11:26,900 --> 00:11:28,930
cubes or as developers.

140
00:11:29,060 --> 00:11:38,280
This means that this file did not get modified since this signature was created by the cubes developers.

141
00:11:38,450 --> 00:11:45,830
Therefore we can go ahead and install it on our system knowing that it did not get modified by any other

142
00:11:45,830 --> 00:11:52,450
third parties since it was released by the cubes developers now in the next lecture.

143
00:11:52,450 --> 00:11:57,850
I'm going to show you how to flash this to us B and continue with the installation steps.