1
00:00:01,000 --> 00:00:01,000
Okay.

2
00:00:01,000 --> 00:00:09,000
So now that we understand what cubes is, why it's so secure, and why you might want to use it if you're

3
00:00:09,000 --> 00:00:16,000
ready to take on this challenge, and if you have a computer that can support cubes, then you can follow

4
00:00:16,000 --> 00:00:21,000
the instructions that I'm going to show you in this lecture at the next lectures to learn how to install

5
00:00:21,000 --> 00:00:22,000
cubes.

6
00:00:23,000 --> 00:00:24,000
Now we have two options.

7
00:00:24,000 --> 00:00:31,000
We can, first of all, install it as a main operating system on the built in storage of your computer.

8
00:00:31,000 --> 00:00:36,000
Or we can install it on a USB stick as a live operating system.

9
00:00:37,000 --> 00:00:43,000
So for now, we're going to need a USB stick with at least eight gigabytes of storage.

10
00:00:44,000 --> 00:00:47,000
We will also obviously need to download cubes.

11
00:00:47,000 --> 00:00:52,000
We're going to use Escher, which is the same program that we used to Flash Tails.

12
00:00:52,000 --> 00:00:57,000
So we're going to use it to flash the cubes ISO image to the USB stick.

13
00:00:57,000 --> 00:01:03,000
And that way we're going to have a bootable USB stick that contains the Cube's ISO image.

14
00:01:04,000 --> 00:01:06,000
At this stage we have two options.

15
00:01:06,000 --> 00:01:13,000
We can either just simply connect it to a computer and install cubes on that computer on the built in

16
00:01:13,000 --> 00:01:17,000
storage of that computer, just like any other operating system.

17
00:01:17,000 --> 00:01:21,000
So we'll be able to use it without even connecting the USB stick.

18
00:01:21,000 --> 00:01:28,000
Or you can use another USB stick of minimum size, 32 gigabytes.

19
00:01:28,000 --> 00:01:37,000
And what we'll do in this case is we will flash a live version of cubes to the new USB stick and then

20
00:01:37,000 --> 00:01:46,000
we can use this new USB stick to boot into cubes from any supported computer, regardless of what operating

21
00:01:46,000 --> 00:01:48,000
system this computer runs.

22
00:01:48,000 --> 00:01:55,000
So we can connect it to a Windows computer or Mac or Linux and we'll be able to use cubes on any of

23
00:01:55,000 --> 00:01:56,000
these computers.

24
00:01:56,000 --> 00:02:03,000
And once we disconnect the USB stick, the computers will be back to normal running the default operating

25
00:02:03,000 --> 00:02:05,000
systems that they use to run.

26
00:02:06,000 --> 00:02:13,000
Now the installation steps are identical for both options, except for one small change, and I will

27
00:02:13,000 --> 00:02:15,000
highlight that change once we get to it.

28
00:02:16,000 --> 00:02:18,000
So let's go back to the start.

29
00:02:18,000 --> 00:02:23,000
Everything that I'm going to show you from now on will be done on a Windows computer.

30
00:02:23,000 --> 00:02:30,000
But you can follow the exact same steps and use the exact same software that I'm going to use on Windows

31
00:02:30,000 --> 00:02:34,000
to install cubes from any other operating system.

32
00:02:34,000 --> 00:02:40,000
So you can follow these steps from OS X and from Linux using the exact same software.

33
00:02:40,000 --> 00:02:46,000
If you face any issues, then please post them in the Q&A section and we'll respond to you within 15

34
00:02:46,000 --> 00:02:47,000
hours.

35
00:02:48,000 --> 00:02:54,000
So I have the Cubes official website opening here and I'm already in the download page.

36
00:02:54,000 --> 00:03:00,000
I will include this in the resources of this lecture and I'm going to scroll down and I'm going to download

37
00:03:00,000 --> 00:03:02,000
this version right here.

38
00:03:02,000 --> 00:03:06,000
So all you have to do is just click on the ISO button in here.

39
00:03:07,000 --> 00:03:09,000
Now clicking on this, we'll start the download for you.

40
00:03:10,000 --> 00:03:13,000
This is a 4.6 gigabyte file, so it's pretty big.

41
00:03:13,000 --> 00:03:17,000
That's why I've already downloaded it before this lecture.

42
00:03:17,000 --> 00:03:20,000
As you can see, I already have it downloaded here.

43
00:03:20,000 --> 00:03:27,000
The next thing that you want to download is the signature that's associated with the ISO image.

44
00:03:27,000 --> 00:03:33,000
We're going to download this because we're going to use it to ensure that the ISO image did not get

45
00:03:33,000 --> 00:03:37,000
modified by a third party as we download it.

46
00:03:37,000 --> 00:03:42,000
Because, as we said before, whenever you download something from the internet, it passes through

47
00:03:42,000 --> 00:03:47,000
a number of hops and it can be modified by a number of entities.

48
00:03:47,000 --> 00:03:52,000
Therefore, we're going to download the signature in order to use it to verify the integrity of the

49
00:03:52,000 --> 00:03:57,000
ISO image and make sure that the ISO image did not get modified.

50
00:03:57,000 --> 00:04:01,000
Since the developers of cubes created the signature.

51
00:04:01,000 --> 00:04:09,000
So to download the signature, we're going to right click it and click on Save Link as I'm going to

52
00:04:09,000 --> 00:04:13,000
put it in my downloads and I'm just going to click on Save.

53
00:04:14,000 --> 00:04:20,000
And if I look in my downloads right here, you can see we have the signature file that we can use to

54
00:04:20,000 --> 00:04:22,000
verify the integrity.

55
00:04:22,000 --> 00:04:28,000
Now, the steps that I'm going to follow right now to verify the integrity are very similar to the steps

56
00:04:28,000 --> 00:04:33,000
that we followed to verify the integrity of our browser when we download the Tor.

57
00:04:34,000 --> 00:04:41,000
To do this, you can use BGP for when I already showed you how to download and install it in the lecture

58
00:04:41,000 --> 00:04:45,000
where we download the Tor browser and verify it so I'm not going to do it again.

59
00:04:45,000 --> 00:04:50,000
You can go back to that lecture and revise it and see how to download it and install it.

60
00:04:50,000 --> 00:04:56,000
I already have it downloaded and installed and as you can see, the icon in here shows a lock icon,

61
00:04:56,000 --> 00:05:01,000
which means that the software, the BGP software is already installed on this computer.

62
00:05:02,000 --> 00:05:09,000
Now, like I mentioned in that lecture, you can use a graphical user interface to verify the signature.

63
00:05:09,000 --> 00:05:14,000
And here, but in my experience, the graphical interface is a little bit buggy.

64
00:05:15,000 --> 00:05:18,000
Therefore, I'm going to do it using the command prompt.

65
00:05:18,000 --> 00:05:24,000
Not only that, but the command prompt commands are identical to the commands that you'd use if you're

66
00:05:24,000 --> 00:05:26,000
using OSX or Linux.

67
00:05:26,000 --> 00:05:33,000
Therefore, you can follow the next steps on an OS X computer or on a Linux and they should work exactly

68
00:05:33,000 --> 00:05:34,000
the same again.

69
00:05:34,000 --> 00:05:39,000
If you face any issues, post them in the Q&A and we'll respond to you within 15 hours.

70
00:05:40,000 --> 00:05:43,000
So let's go ahead and just make this window a little bit smaller.

71
00:05:44,000 --> 00:05:47,000
And I already have my command prompt opening here.

72
00:05:47,000 --> 00:05:51,000
If you don't remember how to open it, you just go to start type CMD and run it.

73
00:05:52,000 --> 00:06:00,000
And in order to verify this file, first of all, we need to download the master key for the cubes developers.

74
00:06:01,000 --> 00:06:07,000
To do that, we can actually just click on the question mark in here beside the verify, and this will

75
00:06:07,000 --> 00:06:12,000
actually open a page with detailed instructions on how to verify the cubes image.

76
00:06:12,000 --> 00:06:18,000
But like I said, the steps in here are very, very similar to what we followed when we verified to

77
00:06:18,000 --> 00:06:20,000
our browser when we downloaded it.

78
00:06:21,000 --> 00:06:26,000
So like I said, the first step is to add cubes master key to the key rank.

79
00:06:26,000 --> 00:06:29,000
And to do this we're going to use this command right here.

80
00:06:29,000 --> 00:06:31,000
So I'm literally just going to highlight it.

81
00:06:31,000 --> 00:06:36,000
All right, click copy and right click in here to paste it.

82
00:06:37,000 --> 00:06:39,000
We're going to hit enter to download it.

83
00:06:39,000 --> 00:06:44,000
You might need to give this a little bit of time to download the key for you, so be a little bit patient

84
00:06:44,000 --> 00:06:45,000
with it.

85
00:06:46,000 --> 00:06:47,000
On perfect.

86
00:06:47,000 --> 00:06:49,000
As you can see now, the key is imported.

87
00:06:50,000 --> 00:06:57,000
Next, we want to make sure that the key that we downloaded is actually the key for the Cube's developers.

88
00:06:58,000 --> 00:07:02,000
To do that again, this is going to be identical to what we did with Tor browser.

89
00:07:02,000 --> 00:07:05,000
So first of all, we're going to copy the key here.

90
00:07:05,000 --> 00:07:11,000
So we highlight it, we hit enter to copy it and then we're going to use GPG, the same command.

91
00:07:11,000 --> 00:07:14,000
We're going to say, I want the fingerprint.

92
00:07:15,000 --> 00:07:17,000
Of the key that I just copied.

93
00:07:18,000 --> 00:07:24,000
I'm going to hit Enter and we will get the fingerprint of this key and we're going to scroll down on

94
00:07:24,000 --> 00:07:30,000
this page and compare it to the fingerprint that we have on the page itself.

95
00:07:31,000 --> 00:07:34,000
As you can see, the two fingerprints are identical.

96
00:07:34,000 --> 00:07:41,000
Therefore, we know that the key that we just downloaded is a valid key for the Cube's developers.

97
00:07:42,000 --> 00:07:45,000
Next we need to download the release key.

98
00:07:45,000 --> 00:07:52,000
So the key that is used to sign this particular release and as you can see in the file name in here,

99
00:07:52,000 --> 00:07:54,000
it says cubes or four.

100
00:07:54,000 --> 00:07:56,000
So this is the fourth release.

101
00:07:56,000 --> 00:08:03,000
So we can go down in here to get the command to download the release key, which is this command right

102
00:08:03,000 --> 00:08:03,000
here.

103
00:08:03,000 --> 00:08:12,000
So again, we're going to copy all of this and paste it in here and you'll need to modify the X in here.

104
00:08:12,000 --> 00:08:20,000
So as you can see in here, it says X, you'll need to remove this and replace it with the release version.

105
00:08:20,000 --> 00:08:24,000
So again, this says cubes are for this means it's the fourth release.

106
00:08:24,000 --> 00:08:32,000
Therefore I'm going to type four and hit enter to download the key used to sign this particular release.

107
00:08:32,000 --> 00:08:33,000
Perfect.

108
00:08:33,000 --> 00:08:36,000
As you can see, this key is imported now.

109
00:08:37,000 --> 00:08:44,000
So right now you can literally go ahead and use this file to verify the integrity of the image, but

110
00:08:44,000 --> 00:08:45,000
we can go further.

111
00:08:45,000 --> 00:08:52,000
This is an optional step, but it's good to just make sure that everything we're doing so far is valid

112
00:08:52,000 --> 00:08:54,000
and we haven't downloaded any wrong keys.

113
00:08:55,000 --> 00:08:57,000
So you can use this command right here.

114
00:08:58,000 --> 00:09:02,000
To make sure that the sign in key that we just downloaded.

115
00:09:02,000 --> 00:09:06,000
The second key is a valid key for the master key for the first key.

116
00:09:07,000 --> 00:09:13,000
So to do that again, we're just going to paste the command that I just copied and just like we did

117
00:09:13,000 --> 00:09:16,000
before, we're going to replace the X with number four.

118
00:09:17,000 --> 00:09:18,000
I'm going to hit Enter.

119
00:09:19,000 --> 00:09:24,000
And as you can see in here, this is the signature of the master key.

120
00:09:24,000 --> 00:09:28,000
So you can see in here this is signed with Cube's master signing key.

121
00:09:28,000 --> 00:09:35,000
And if we go if we scroll up all the way to the top, you can see that this is the same signature for

122
00:09:35,000 --> 00:09:36,000
the master key.

123
00:09:37,000 --> 00:09:40,000
So so far we've imported the master key.

124
00:09:40,000 --> 00:09:42,000
We verified it using the fingerprint.

125
00:09:42,000 --> 00:09:48,000
Then we imported the signing key, and we verified it by comparing its signature with the signature

126
00:09:48,000 --> 00:09:50,000
of the master key.

127
00:09:50,000 --> 00:09:58,000
So at this stage, we're sure that the keys that we downloaded are valid keys that belong to the Cube's

128
00:09:58,000 --> 00:09:59,000
developers.

129
00:09:59,000 --> 00:10:07,000
The last step is to use this signature file that we initially downloaded to verify the integrity of

130
00:10:07,000 --> 00:10:11,000
the Cube's image that we will actually use to install cubes.

131
00:10:12,000 --> 00:10:19,000
So as you can see this, these two files are stored in my downloads and right now I'm in users Z, so

132
00:10:19,000 --> 00:10:22,000
I need to navigate to my downloads directory.

133
00:10:23,000 --> 00:10:30,000
We can do that by doing CD downloads and if I do there to list all files and directories in the current

134
00:10:30,000 --> 00:10:36,000
working directory, you can see first of all, I have the Cube's ISO image and then I have the signature

135
00:10:36,000 --> 00:10:37,000
file.

136
00:10:38,000 --> 00:10:43,000
So we're going to use the signature file to verify that the image is valid and did not get modified

137
00:10:43,000 --> 00:10:45,000
by a third party.

138
00:10:45,000 --> 00:10:50,000
And again, the command that I'm going to use is identical to the command that we used when we were

139
00:10:50,000 --> 00:10:53,000
verifying the integrity of our browser.

140
00:10:53,000 --> 00:11:02,000
So we're using GPG Dash, Dash, Verify, followed by the name of the signature file, which is this

141
00:11:02,000 --> 00:11:03,000
file right here.

142
00:11:03,000 --> 00:11:10,000
So I can just type Q followed by a tab and it will auto complete for me and I'll just need to add the

143
00:11:10,000 --> 00:11:14,000
dot a c I'm going to hit enter.

144
00:11:15,000 --> 00:11:20,000
And give this a little bit of time to check the integrity of this image right here.

145
00:11:22,000 --> 00:11:23,000
And perfect.

146
00:11:23,000 --> 00:11:28,000
As you can see in here, it's telling us this is a good signature from cubes or as developers.

147
00:11:28,000 --> 00:11:38,000
This means that this file did not get modified since this signature was created by the Cube's developers.

148
00:11:38,000 --> 00:11:45,000
Therefore, we can go ahead and install it on our system knowing that it did not get modified by any

149
00:11:45,000 --> 00:11:50,000
other third parties since it was released by the Cube's developers.

150
00:11:51,000 --> 00:11:57,000
Now in the next lecture, I'm going to show you how to flush this to a USB and continue with the installation

151
00:11:57,000 --> 00:11:58,000
steps.