1
00:00:01,100 --> 00:00:08,390
So in this video I'm going to show you how to download Tor verify it and make sure that it hasn't been

2
00:00:08,390 --> 00:00:14,990
modified as it got downloaded and then install it on a Windows 10 system.

3
00:00:14,990 --> 00:00:22,580
If you have OS X or Linux then please skip this lecture and I will cover install and Tor on other operating

4
00:00:22,580 --> 00:00:25,810
systems and the next lectures.

5
00:00:25,880 --> 00:00:31,370
So as you can see the normal page is loading for me so I'm going to download it from here.

6
00:00:31,370 --> 00:00:37,460
I have a 64 bit computer and I'm running Microsoft Windows so I'm just going to click on the 64 bit

7
00:00:37,460 --> 00:00:42,910
link for Microsoft Windows and I'm going to save this.

8
00:00:42,960 --> 00:00:47,530
This will automatically save the file right here for me in the downloads.

9
00:00:48,300 --> 00:00:54,270
And as you can see the download is complete now and I can literally just double click it and install

10
00:00:54,270 --> 00:00:56,370
it just like any other program.

11
00:00:56,790 --> 00:01:05,820
But before doing that it's a very good idea to verify that the file we downloaded here did not get modified

12
00:01:06,150 --> 00:01:08,490
as it was being downloaded.

13
00:01:08,490 --> 00:01:14,430
Because when you download something from the internet it passes through a number of nodes in which it

14
00:01:14,430 --> 00:01:19,580
can be modified so it can be modified by your Internet service provider.

15
00:01:19,590 --> 00:01:26,580
It can be modified by your network administrator and it can even be modified by hackers who managed

16
00:01:26,580 --> 00:01:29,570
to intercept the connection.

17
00:01:29,760 --> 00:01:37,260
So in order to verify that this file did not get modified we're going to use a signature provided to

18
00:01:37,260 --> 00:01:40,050
us by the Tor developers.

19
00:01:40,050 --> 00:01:47,890
So as you can see on this page each download has a sig this sig stands for signature.

20
00:01:47,970 --> 00:01:54,030
And this is a file that is unique to this download to the installer.

21
00:01:54,180 --> 00:02:02,100
It was generated by the developers when they packaged the installer and it can be used to verify that

22
00:02:02,100 --> 00:02:08,810
the installer did not get modified since it was packaged by the developers.

23
00:02:09,030 --> 00:02:15,020
So to verify the installer the first step is to download its signature.

24
00:02:15,030 --> 00:02:18,870
So like I said as you can see each file has its own signature.

25
00:02:19,350 --> 00:02:26,160
I downloaded this file right here so I'm going to download this signature in here so I'm going to right

26
00:02:26,190 --> 00:02:34,260
click the signature file and I'm going to click on Steve link us to download it and I'm gonna save it

27
00:02:34,350 --> 00:02:35,680
in my downloads.

28
00:02:35,680 --> 00:02:42,430
Same place that we have in here and I'm just going to click on Save and you can see we have this new

29
00:02:42,430 --> 00:02:45,910
file with a dot a C extension.

30
00:02:45,970 --> 00:02:49,540
This is the signature for this file.

31
00:02:49,540 --> 00:02:54,040
So as you can see in here each download has its own signature.

32
00:02:54,040 --> 00:02:58,770
So the signature is relevant to the file that we just downloaded.

33
00:02:58,990 --> 00:03:03,550
And it can be used to verify the integrity of the file.

34
00:03:04,150 --> 00:03:09,910
So what we're going to do is we're going to use another program called GPO G for when we're going to

35
00:03:09,910 --> 00:03:16,600
use this program to check the signature and make sure that this file right here matches the signature

36
00:03:16,600 --> 00:03:17,480
right here.

37
00:03:17,560 --> 00:03:21,880
And if it does then this means that the file has not been modified.

38
00:03:21,970 --> 00:03:29,830
Cause if this file gets modified then this this signature right here will not match the file.

39
00:03:31,000 --> 00:03:37,440
So the first step now is to download this program that will verify the signature for us which is G P

40
00:03:37,440 --> 00:03:39,580
G 4 win right here.

41
00:03:39,820 --> 00:03:43,250
I'm going to include its download link in the resources.

42
00:03:43,630 --> 00:03:45,460
Right now I'm going to set this to zero.

43
00:03:45,460 --> 00:03:50,680
I don't want to donate and I'm just going to click on Download to download the program.

44
00:03:50,680 --> 00:03:56,380
We're going to save it and we have it right here.

45
00:03:56,420 --> 00:04:02,720
Now we're going to double click this to install it and it's a normal windows installer.

46
00:04:02,720 --> 00:04:06,830
So it's actually very very simple we're just going to click on.

47
00:04:06,830 --> 00:04:08,500
Okay.

48
00:04:08,560 --> 00:04:14,830
Next Next install and it'll install it for us and that's it we're done.

49
00:04:14,830 --> 00:04:15,820
So we're going to finish.

50
00:04:15,880 --> 00:04:17,090
I don't want to reboot.

51
00:04:17,110 --> 00:04:20,380
I'm going to reboot later and that's it.

52
00:04:20,380 --> 00:04:26,830
Now the file is installed and we can actually use it with a graphical user interface that I noticed

53
00:04:26,860 --> 00:04:28,390
is a little bit buggy.

54
00:04:28,450 --> 00:04:36,040
Therefore we're going to use it using the command prompt so I'm going to go to start I'm going to type

55
00:04:36,040 --> 00:04:41,470
CND to open my command prompt they'll just put this here.

56
00:04:43,310 --> 00:04:52,250
So the first thing that we need to do is import the key of detour developers so we can get that from

57
00:04:52,250 --> 00:04:54,000
their page right here.

58
00:04:54,020 --> 00:04:58,560
This is their key and we can actually add it using this command.

59
00:04:58,610 --> 00:05:01,360
So we do GPO G dirty X E.

60
00:05:01,400 --> 00:05:04,740
This is the name of the program that we just installed.

61
00:05:04,760 --> 00:05:11,570
We're giving the key server that it's going to get the key from and we're giving it the developer key

62
00:05:11,570 --> 00:05:12,500
right here.

63
00:05:12,590 --> 00:05:20,580
After the receive keys argument so I'm gonna copy all of this and I'm going to paste it here.

64
00:05:20,590 --> 00:05:26,620
All I have to do is just right click it will automatically paste and I'm going to hit enter.

65
00:05:26,620 --> 00:05:27,900
This could take some time.

66
00:05:27,910 --> 00:05:31,240
So just be patient and give it its time.

67
00:05:31,270 --> 00:05:35,500
You might also have to run this command a number of times until it works.

68
00:05:35,500 --> 00:05:40,870
This is because their servers might be under pressure so you want to be able to get the key.

69
00:05:41,620 --> 00:05:44,890
But as you can see right here I was able to get the key.

70
00:05:45,520 --> 00:05:51,090
So right now we can go ahead and verify the file that we downloaded.

71
00:05:51,250 --> 00:05:55,060
But before I do that I'm going to make sure I have the correct key.

72
00:05:55,840 --> 00:06:02,770
So I'm going to do a GP do that EKG the same command I'm going to say I want to see the fingerprint

73
00:06:03,910 --> 00:06:06,130
of the key that I requested.

74
00:06:06,130 --> 00:06:09,330
So the key that I requested is this key right here.

75
00:06:09,340 --> 00:06:13,690
So I'm going to copy it again and I'm going to paste it

76
00:06:16,570 --> 00:06:19,420
and right here we have the fingerprint of the key.

77
00:06:19,900 --> 00:06:26,770
And what you want to do is compare this fingerprint right here with the fingerprint that you have on

78
00:06:26,770 --> 00:06:31,540
their website which is this one if you have the same fingerprint.

79
00:06:31,540 --> 00:06:38,020
This means that you've downloaded the correct key and it means that we can use this key to verify the

80
00:06:38,020 --> 00:06:46,230
integrity of this installer so the last step now is to actually do that and verify that this installer

81
00:06:46,290 --> 00:06:48,120
is the correct installer.

82
00:06:48,120 --> 00:06:50,400
And again we're going to use the same command.

83
00:06:50,730 --> 00:06:55,540
But first we will need to navigate to where we have the installer.

84
00:06:55,620 --> 00:07:00,010
So as you can see the installer is in users Zaid downloads.

85
00:07:00,120 --> 00:07:02,270
So I need to go to the downloads directory.

86
00:07:02,700 --> 00:07:06,260
So we're going to use the CDE command to change our working directory.

87
00:07:06,360 --> 00:07:08,130
And I want to go to downloads.

88
00:07:08,130 --> 00:07:10,970
Keep in mind it's capital in here.

89
00:07:11,130 --> 00:07:12,450
I'm going to hit enter.

90
00:07:12,450 --> 00:07:20,060
And as you can see now I'm an user as a download and I can do DIY or to list all the files that we have.

91
00:07:20,490 --> 00:07:28,630
And you can see we have the G.P.S. installer we have the Tor Browser installer and the signature.

92
00:07:29,880 --> 00:07:35,040
So all we have to do is use GPO G dot EMC again.

93
00:07:35,610 --> 00:07:43,750
We're going to say that I want to verify and we're going to give it the name of this signature.

94
00:07:43,750 --> 00:07:46,840
So this is the name of the signature file.

95
00:07:46,840 --> 00:07:48,050
You can copy it.

96
00:07:48,190 --> 00:07:48,530
You are.

97
00:07:48,540 --> 00:07:54,610
We also have it in here so you can copy it from here or you can just type the starter with followed

98
00:07:54,610 --> 00:07:55,440
by a tab.

99
00:07:55,470 --> 00:08:03,960
It'll auto complete for us and make sure you complete to the DOT a C to specify the signature file I'm

100
00:08:03,960 --> 00:08:07,150
going to hit enter.

101
00:08:07,390 --> 00:08:10,810
Let's just make this a little bit bigger so we can read it easier.

102
00:08:11,530 --> 00:08:15,410
And as you can see it's telling us that this is a good signature.

103
00:08:15,430 --> 00:08:22,810
So basically it's telling us that the signature right here is the correct signature for this file.

104
00:08:22,810 --> 00:08:29,350
So this means that this file has not been modified since we downloaded it from this page because this

105
00:08:29,350 --> 00:08:35,320
page had the file itself it had the installer itself and it had the signature which we downloaded from

106
00:08:35,320 --> 00:08:36,030
here.

107
00:08:36,070 --> 00:08:43,330
Like I said each signature is unique to each file and we use this signature with the developer key to

108
00:08:43,330 --> 00:08:44,650
sign this file.

109
00:08:44,650 --> 00:08:46,840
And as you can see everything marched.

110
00:08:46,870 --> 00:08:54,280
So this means that this file has not been modified since we downloaded it from the web page.

111
00:08:54,280 --> 00:08:59,550
So we can go ahead now and double click it to install Tor.

112
00:08:59,790 --> 00:09:03,070
So as you can see this step was optional.

113
00:09:03,090 --> 00:09:04,580
You don't have to do it.

114
00:09:04,680 --> 00:09:10,530
But we did it just to make sure that this file has not been modified by anybody.

115
00:09:10,530 --> 00:09:17,550
When we downloaded it from our Web site so the rest of the install is very simple we're going to say

116
00:09:17,580 --> 00:09:19,750
OK I want the language to be English.

117
00:09:19,860 --> 00:09:25,950
I'm going to keep the installation path for the default one I'm going to click on install it will install

118
00:09:25,950 --> 00:09:31,690
it for me just like any other program and were done.

119
00:09:32,060 --> 00:09:37,780
So you can uncheck these if you don't want to on tour or if you don't want to add it to the start menu.

120
00:09:37,820 --> 00:09:39,820
I'm going to keep everything the same.

121
00:09:39,890 --> 00:09:45,880
I'm going to click on finish and this will automatically start the Tor browser for me.

122
00:09:46,280 --> 00:09:51,150
As you can see right here still in me I can click on Kinect to connect to the network.

123
00:09:51,500 --> 00:09:59,660
So we're going to do the and now the browser is going to first connect to the tour network and then

124
00:09:59,840 --> 00:10:01,730
launch the browser for me.

125
00:10:01,730 --> 00:10:06,760
And as you can see the browser is working and I'm not going to use it right now.

126
00:10:06,760 --> 00:10:08,660
I'm not going to show you how to use it.

127
00:10:08,660 --> 00:10:11,670
We'll talk about this in the next lectures.

128
00:10:11,810 --> 00:10:19,640
But right now we have a clean version of the Tor Browser installed on our computer and ready to be used.