WEBVTT 00:01.140 --> 00:01.620 Okay. 00:01.620 --> 00:09.450 So now that we understand what cubes is, why it's so secure, and why you might want to use it if you're 00:09.450 --> 00:16.260 ready to take on this challenge, and if you have a computer that can support cubes, then you can follow 00:16.260 --> 00:21.630 the instructions that I'm going to show you in this lecture at the next lectures to learn how to install 00:21.630 --> 00:22.350 cubes. 00:23.160 --> 00:24.660 Now we have two options. 00:24.660 --> 00:31.110 We can, first of all, install it as a main operating system on the built in storage of your computer. 00:31.110 --> 00:36.750 Or we can install it on a USB stick as a live operating system. 00:37.580 --> 00:43.940 So for now, we're going to need a USB stick with at least eight gigabytes of storage. 00:44.030 --> 00:47.150 We will also obviously need to download cubes. 00:47.510 --> 00:52.340 We're going to use Escher, which is the same program that we used to Flash Tails. 00:52.340 --> 00:57.440 So we're going to use it to flash the cubes ISO image to the USB stick. 00:57.440 --> 01:03.380 And that way we're going to have a bootable USB stick that contains the Cube's ISO image. 01:04.010 --> 01:06.410 At this stage we have two options. 01:06.410 --> 01:13.460 We can either just simply connect it to a computer and install cubes on that computer on the built in 01:13.460 --> 01:17.390 storage of that computer, just like any other operating system. 01:17.390 --> 01:21.590 So we'll be able to use it without even connecting the USB stick. 01:21.980 --> 01:28.370 Or you can use another USB stick of minimum size, 32 gigabytes. 01:28.370 --> 01:37.730 And what we'll do in this case is we will flash a live version of cubes to the new USB stick and then 01:37.730 --> 01:46.190 we can use this new USB stick to boot into cubes from any supported computer, regardless of what operating 01:46.190 --> 01:48.080 system this computer runs. 01:48.080 --> 01:55.700 So we can connect it to a Windows computer or Mac or Linux and we'll be able to use cubes on any of 01:55.700 --> 01:56.840 these computers. 01:56.840 --> 02:03.560 And once we disconnect the USB stick, the computers will be back to normal running the default operating 02:03.560 --> 02:05.540 systems that they use to run. 02:06.730 --> 02:13.090 Now the installation steps are identical for both options, except for one small change, and I will 02:13.090 --> 02:15.430 highlight that change once we get to it. 02:16.030 --> 02:18.070 So let's go back to the start. 02:18.610 --> 02:23.770 Everything that I'm going to show you from now on will be done on a Windows computer. 02:23.770 --> 02:30.790 But you can follow the exact same steps and use the exact same software that I'm going to use on Windows 02:30.790 --> 02:34.510 to install cubes from any other operating system. 02:34.510 --> 02:40.480 So you can follow these steps from OS X and from Linux using the exact same software. 02:40.660 --> 02:46.970 If you face any issues, then please post them in the Q&A section and we'll respond to you within 15 02:46.970 --> 02:47.500 hours. 02:48.430 --> 02:54.410 So I have the Cubes official website opening here and I'm already in the download page. 02:54.430 --> 03:00.700 I will include this in the resources of this lecture and I'm going to scroll down and I'm going to download 03:00.700 --> 03:02.200 this version right here. 03:02.290 --> 03:06.550 So all you have to do is just click on the ISO button in here. 03:07.030 --> 03:09.970 Now clicking on this, we'll start the download for you. 03:10.210 --> 03:13.990 This is a 4.6 gigabyte file, so it's pretty big. 03:13.990 --> 03:17.320 That's why I've already downloaded it before this lecture. 03:17.320 --> 03:20.050 As you can see, I already have it downloaded here. 03:20.770 --> 03:27.610 The next thing that you want to download is the signature that's associated with the ISO image. 03:27.610 --> 03:33.820 We're going to download this because we're going to use it to ensure that the ISO image did not get 03:33.820 --> 03:37.150 modified by a third party as we download it. 03:37.150 --> 03:42.670 Because, as we said before, whenever you download something from the internet, it passes through 03:42.670 --> 03:47.080 a number of hops and it can be modified by a number of entities. 03:47.080 --> 03:52.870 Therefore, we're going to download the signature in order to use it to verify the integrity of the 03:52.870 --> 03:57.160 ISO image and make sure that the ISO image did not get modified. 03:57.190 --> 04:01.240 Since the developers of cubes created the signature. 04:01.960 --> 04:09.220 So to download the signature, we're going to right click it and click on Save Link as I'm going to 04:09.220 --> 04:13.570 put it in my downloads and I'm just going to click on Save. 04:14.990 --> 04:20.540 And if I look in my downloads right here, you can see we have the signature file that we can use to 04:20.540 --> 04:22.100 verify the integrity. 04:22.760 --> 04:28.550 Now, the steps that I'm going to follow right now to verify the integrity are very similar to the steps 04:28.550 --> 04:33.590 that we followed to verify the integrity of our browser when we download the Tor. 04:34.040 --> 04:41.180 To do this, you can use BGP for when I already showed you how to download and install it in the lecture 04:41.180 --> 04:45.710 where we download the Tor browser and verify it so I'm not going to do it again. 04:45.710 --> 04:50.500 You can go back to that lecture and revise it and see how to download it and install it. 04:50.510 --> 04:56.330 I already have it downloaded and installed and as you can see, the icon in here shows a lock icon, 04:56.330 --> 05:01.550 which means that the software, the BGP software is already installed on this computer. 05:02.420 --> 05:09.470 Now, like I mentioned in that lecture, you can use a graphical user interface to verify the signature. 05:09.470 --> 05:14.960 And here, but in my experience, the graphical interface is a little bit buggy. 05:15.080 --> 05:18.080 Therefore, I'm going to do it using the command prompt. 05:18.380 --> 05:24.410 Not only that, but the command prompt commands are identical to the commands that you'd use if you're 05:24.410 --> 05:26.320 using OSX or Linux. 05:26.330 --> 05:33.350 Therefore, you can follow the next steps on an OS X computer or on a Linux and they should work exactly 05:33.350 --> 05:34.490 the same again. 05:34.490 --> 05:39.680 If you face any issues, post them in the Q&A and we'll respond to you within 15 hours. 05:40.220 --> 05:43.940 So let's go ahead and just make this window a little bit smaller. 05:44.060 --> 05:47.110 And I already have my command prompt opening here. 05:47.120 --> 05:51.680 If you don't remember how to open it, you just go to start type CMD and run it. 05:52.580 --> 06:00.680 And in order to verify this file, first of all, we need to download the master key for the cubes developers. 06:01.220 --> 06:07.340 To do that, we can actually just click on the question mark in here beside the verify, and this will 06:07.340 --> 06:12.740 actually open a page with detailed instructions on how to verify the cubes image. 06:12.740 --> 06:18.290 But like I said, the steps in here are very, very similar to what we followed when we verified to 06:18.290 --> 06:20.330 our browser when we downloaded it. 06:21.020 --> 06:26.390 So like I said, the first step is to add cubes master key to the key rank. 06:26.390 --> 06:29.240 And to do this we're going to use this command right here. 06:29.240 --> 06:31.250 So I'm literally just going to highlight it. 06:31.250 --> 06:36.500 All right, click copy and right click in here to paste it. 06:37.070 --> 06:39.230 We're going to hit enter to download it. 06:39.260 --> 06:44.690 You might need to give this a little bit of time to download the key for you, so be a little bit patient 06:44.690 --> 06:45.290 with it. 06:46.550 --> 06:47.210 On perfect. 06:47.210 --> 06:49.940 As you can see now, the key is imported. 06:50.630 --> 06:57.650 Next, we want to make sure that the key that we downloaded is actually the key for the Cube's developers. 06:58.010 --> 07:02.430 To do that again, this is going to be identical to what we did with Tor browser. 07:02.450 --> 07:05.150 So first of all, we're going to copy the key here. 07:05.150 --> 07:11.240 So we highlight it, we hit enter to copy it and then we're going to use GPG, the same command. 07:11.390 --> 07:14.300 We're going to say, I want the fingerprint. 07:15.600 --> 07:17.580 Of the key that I just copied. 07:18.090 --> 07:24.390 I'm going to hit Enter and we will get the fingerprint of this key and we're going to scroll down on 07:24.390 --> 07:30.150 this page and compare it to the fingerprint that we have on the page itself. 07:31.140 --> 07:34.180 As you can see, the two fingerprints are identical. 07:34.200 --> 07:41.160 Therefore, we know that the key that we just downloaded is a valid key for the Cube's developers. 07:42.810 --> 07:45.720 Next we need to download the release key. 07:45.720 --> 07:52.950 So the key that is used to sign this particular release and as you can see in the file name in here, 07:52.950 --> 07:54.580 it says cubes or four. 07:54.600 --> 07:56.580 So this is the fourth release. 07:56.820 --> 08:03.030 So we can go down in here to get the command to download the release key, which is this command right 08:03.030 --> 08:03.610 here. 08:03.630 --> 08:12.750 So again, we're going to copy all of this and paste it in here and you'll need to modify the X in here. 08:12.750 --> 08:20.160 So as you can see in here, it says X, you'll need to remove this and replace it with the release version. 08:20.160 --> 08:24.240 So again, this says cubes are for this means it's the fourth release. 08:24.240 --> 08:32.070 Therefore I'm going to type four and hit enter to download the key used to sign this particular release. 08:32.940 --> 08:33.540 Perfect. 08:33.540 --> 08:36.720 As you can see, this key is imported now. 08:37.110 --> 08:44.130 So right now you can literally go ahead and use this file to verify the integrity of the image, but 08:44.130 --> 08:45.950 we can go further. 08:45.960 --> 08:52.350 This is an optional step, but it's good to just make sure that everything we're doing so far is valid 08:52.350 --> 08:54.750 and we haven't downloaded any wrong keys. 08:55.080 --> 08:57.720 So you can use this command right here. 08:58.810 --> 09:02.200 To make sure that the sign in key that we just downloaded. 09:02.200 --> 09:06.940 The second key is a valid key for the master key for the first key. 09:07.300 --> 09:13.000 So to do that again, we're just going to paste the command that I just copied and just like we did 09:13.000 --> 09:16.300 before, we're going to replace the X with number four. 09:17.260 --> 09:18.610 I'm going to hit Enter. 09:19.620 --> 09:24.700 And as you can see in here, this is the signature of the master key. 09:24.720 --> 09:28.760 So you can see in here this is signed with Cube's master signing key. 09:28.770 --> 09:35.580 And if we go if we scroll up all the way to the top, you can see that this is the same signature for 09:35.580 --> 09:36.690 the master key. 09:37.110 --> 09:40.160 So so far we've imported the master key. 09:40.170 --> 09:42.570 We verified it using the fingerprint. 09:42.570 --> 09:48.780 Then we imported the signing key, and we verified it by comparing its signature with the signature 09:48.780 --> 09:50.190 of the master key. 09:50.220 --> 09:58.200 So at this stage, we're sure that the keys that we downloaded are valid keys that belong to the Cube's 09:58.200 --> 09:59.130 developers. 09:59.970 --> 10:07.560 The last step is to use this signature file that we initially downloaded to verify the integrity of 10:07.560 --> 10:11.550 the Cube's image that we will actually use to install cubes. 10:12.150 --> 10:19.890 So as you can see this, these two files are stored in my downloads and right now I'm in users Z, so 10:19.890 --> 10:22.470 I need to navigate to my downloads directory. 10:23.100 --> 10:30.690 We can do that by doing CD downloads and if I do there to list all files and directories in the current 10:30.690 --> 10:36.960 working directory, you can see first of all, I have the Cube's ISO image and then I have the signature 10:36.960 --> 10:37.620 file. 10:38.160 --> 10:43.920 So we're going to use the signature file to verify that the image is valid and did not get modified 10:43.920 --> 10:45.090 by a third party. 10:45.090 --> 10:50.370 And again, the command that I'm going to use is identical to the command that we used when we were 10:50.370 --> 10:53.090 verifying the integrity of our browser. 10:53.100 --> 11:02.040 So we're using GPG Dash, Dash, Verify, followed by the name of the signature file, which is this 11:02.040 --> 11:03.150 file right here. 11:03.870 --> 11:10.380 So I can just type Q followed by a tab and it will auto complete for me and I'll just need to add the 11:10.380 --> 11:14.520 dot a c I'm going to hit enter. 11:15.610 --> 11:20.950 And give this a little bit of time to check the integrity of this image right here. 11:22.240 --> 11:23.050 And perfect. 11:23.050 --> 11:28.790 As you can see in here, it's telling us this is a good signature from cubes or as developers. 11:28.810 --> 11:38.050 This means that this file did not get modified since this signature was created by the Cube's developers. 11:38.230 --> 11:45.460 Therefore, we can go ahead and install it on our system knowing that it did not get modified by any 11:45.460 --> 11:50.200 other third parties since it was released by the Cube's developers. 11:51.110 --> 11:57.350 Now in the next lecture, I'm going to show you how to flush this to a USB and continue with the installation 11:57.350 --> 11:58.040 steps.