Welcome to dyslexia.
In this lecture we'll talk about Dora browser.
So first of all all you need to do is simply go to the Google and source for this to download a list
just click on this link and it will this redirect us to the space.
I'll just install a as windows are basically for the same as Windows.
So if you see here it will just give the total browser and your bit version and I'll just go to this
64 bit and it will give us the link I'll just save this file and it will be downloaded over here.
So up to this download it is a quick installation procedure you should get this folder and it will say
that it has to start to approach.
So it would appear after users install to that on your system.
So let me just close this because I have already installed and you'll see this start or browser icon
or whatever.
So let me just open this.
Then you should get this Tor Browser establishing a connection tab.
Let it give it time to load and it will just give us the store Rosa.
So this is the tour Rosa that is going to this open us to the hidden web sites that is in the dark web.
So it is completely normal to use those only an oversight.
But if you just use something for the bad intentional are basically if you do something that harms other.
And basically if you do illegally stuffs on this tour it is completely illegal.
And you will just get involved into the action that will this take by the police.
So I'll just suggest to So basically you can just get ideas of this story websites are basically the
Kenyan drought link will as you see how to make our own on the handout linger.
Basically our own Web site on the dark web in the next lecture.
But for now let me just go to the interface of this tor browser so you could see that is it is showing
us dog go.
Same as a Google search engine.
So this is the Google search engine in the door browser.
So you could see this dog dog who is very much reliable in the browser.
That is a Google browser because this doesn't track you.
So it is a very important feature of this dog to go so you can source anything over here.
So just do you need to remember that any Web site that is visible in the normal server is also available
in the store browser.
So if you go here in our normal Firefox you'll source for the Facebook.
It is also available in the case of the door.
That means it will be available that is this dot com Web site or basically pages source for this Facebook
dot com.
Then you'll see that it will also load this Facebook dot com over here.
So that means we can source the normal wave sites are basically deep web sites that starts are basically
led into the online road or only in link like let me say this is the only road.
So this Web site can be also solved in the case of the DA browser.
So just remember that.
So this Web site will be also available over here.
So just remember that that is basically normal Web sites and deeply equips acts will be available to
serve in the case of the Dolorosa Rosa.
So let me just open some of these Web sites before that.
Let me see what is over here.
So at the Gardner the left inside you see that we have this audience sign over here.
So let's click on that symbol you see the options that will pop out over here saying new identity security
settings toward network settings and take further or browser update.
So if I just press on this new identity that means it is going to give us and know the identity for
us.
That is a new network connection.
We'll see about the connection in a minute how the store on the road works.
We'll see all of this mechanism in a minute but before that you can do that that is click on this new
identity you will just get the new identity new connection or a new circuit for your connection.
And if I just go to the security setting users get this a browser sitting over here.
It is in a standard.
That means all the tour browser nodes had features that enable if I just go to the safer more you will
see that is it is just logging some of the features like Zabriskie.
These disable on the Nuñez TTP a site that means it will be safer than this is standard.
But it is likely be more severe that means it is more secure system than before because it will have
these settings that is enabled are basically disabled so that it won't be tracked by any officials.
So that means you'll have the javascript that is disable some fonts and match symbol.
This so if I just go to the surface to more you'll see the features will be just disable over here.
So yes demo five medias are click to play.
So if I just press on the safest mode and now if I just go to the maybe YouTube.
So if I display the YouTube you'll see that drastic changes so if I just go to YouTube let with the
step and it is going to load us in a minute because it has to go through different servers.
So it is usually taking time.
Then what we normally source in the case of a Firefox so let me to give a time to load.
So it is taking the time then I estimated.
So let me just play it again or basically maybe.
Okay.
So you could see we are in this civil war so basically every if I just go to the standard more innovators
press into Reagan you you'll see that we will get now the normal oversight that is due to have website
which will have all the features like this.
So it has the javascript enable and everything.
But if I raise a score to maybe let me just go to the server more not a surface to more so let me displace
okay.
And now if I just play it again then you'll see the larger feature will be disabled over here.
So I think I haven't said that.
Okay.
So something like if I just played this video you'll see that.
Okay.
Let me just go back and play this video.
Maybe
now you will see that it has selected some of the features.
So it has legs.
These features so let me show you.
So these are the security settings that were just like Zabriskie is disabled on this non a sort search.
So that means some of the features like the just setting and everything that is Dom manipulation has
been disabled in this website.
So that means this is more a safer website than before because this cannot be traced easily than that
which was before.
So next setting over here.
So let me just close this one and the next sitting over here is a tornado exiting I have to open that
and you could see I use a proxy to connect to the Internet the setting over here.
Let me open that and it is giving us some options.
So if I just type the proxy maybe SOC five or SOC for if I just open this website which is maybe some
proxy website this frees up probably that network say you can get this proxy from here.
So these are the stocks for proxy.
So you can just get those and they simply what you need to do is simply take this IP addresses and these
are free if you want to buy the proxy it would be faster than this but if I just want to give you the
example over here you can simply add the IP address you can get the port of that IP address from here
and the user name and the password over here must be optional.
So after that you just click Okay over here to run your socks and basically now we have successfully
added that proxy to this storm but I won't be adding it.
So you could see how to add the proxy how easy it is to add the proxy to the tar Rojo.
So next thing in this star browser is these extensions which is freely downloaded while users download
these Firefox.
So let me just go to maybe her ads and you'll see it has just to be as every way noise screen door about
an entire launcher.
So this comes prefect while we just install the door Rosa that is saying noise that means do just have
the extra protection for this Firefox and for this tour browser.
So this is the activity that we get is download through the door so we can source so many websites that
is only a link in this tor browser.
So before that let's see how this on the road to work in the toll roads or what is the mechanism of
just making so secured systems so how is these systems can be so secure that it is very hard to the
stress by the officers.
So let's see how this works obviously let's see how Tor browser works under the hood.
So let me open my document over here.
Let me grab my pen.
So let me just grab this pen away.
Now you could see that.
Let me just grab it here so you could see.
This is our Internet over here.
And it is the manner it is the client who is basically surfing that internet.
Maybe I want to get a Google dot com so you can see the server or what they are saying that is this
is DNS.
That means it is a domain name server.
So anything you type over here is going to be so let me say give a quick example what is happening over
here.
So if I see something like w w w dot google dot com.
So I won't type.
I will just type Z as Google dot com and if I just solved this internet then it will just go for us
to this domain name server.
It will just take that Google dot com and it has associated IP with it.
So this IP is basically the way to just data mining that it is related to Google.
So this is the IP that is particular to Google.
So that can be done.
So something like if I just go over here and being my Google dot com you will get the IP of the Google
if I see here that this is the IP of the Google you can clearly see over here.
So this is the way where we can just get the IP address so that is done by this domain name server because
Internet only gives idea of these numbers to they don't know anything about this.
So Google dot com for this Internet is just to do this.
So first of all we have to convert these Google dot com which is basically the name that is given by
the humans because just remembering these characters that this number for the human is very tedious.
So they have just given the name so that they are remembering this name would be easier just in remembering
this IP addresses.
So basically DNS server we convert our domain name to the IP addresses.
And after that domain name or basically after that IP addresses is given back to the client it will
just give it to the ISP your Internet service provider.
And through this Internet service provider they will just make a request to the Internet to face the
Web site of the Google dot com.
And this is the Web site server which has the address of 1 1 1.
That means it is the website of Google.
So it will just give you the page of the Google.
So this is the way how the internet works.
But you can see there is no security at all.
So what if we just came as a man in the middle over here and we just grab that pages or anything.
Basically your location or the data so or anything you have sourced here can be just wonderful.
So so you can clearly see over here that the data is not encrypted.
It is not through the encryption it is just sending the request through the ATP protocol which is very
one level.
So there comes a handy technique which is this on the en route.
So let's see how this works.
So you could see that it is the same so that we just see.
But now we have the different servers so you can see this is the.
These are the servers.
So they are located just normally are located remotely in the all of the locations that is through out
the world.
So basically what happens now is if we just give the address that is your IP address and now instead
of just let me let me show you the example that we have this going to source for maybe our Dakar in
Google dot com which has IP address of this one dot one that one that one.
So you can see that the only thing that this server can track is your IP address and the things that
is your data so you can see that this server which is the Google dot com can distress you back or get
every information that you just do in the Internet.
That means this is not secure.
So let's see how.
Now on your hours mixer mix this data encrypted that means our connection or the network will be more
secure than before.
So first of all you'll have this information that is saying hey I want this data.
So this will be gone through this server.
So data will be encrypted first to this.
So first of all what happens is.
So first of all let me say you that this since data from here that is one dot wondered wondered one.
And first of all is to go through this.
So basically this is the first server that this will just get communicate to.
So this will send that data to this server and basically after that you can clearly see there is a layer
of encryption over here because if you just see every layer had this encrypted key that means it will
just get a time to just to encrypt one layer of in groups and that means only one part of the messages
will have to be only encrypted or basically decrypted by each of these server so that the encryption
will be much more efficient than before.
So let me show you what is.
I'm just talking about over here so let me just go to the documentation of Tor Project over here and
you'll see that how these talks basically.
So let me saw that Elise is the one that is going to be giving the source and you can see this is Dave.
Is there another claim that there will be the masses encryption in between them.
So first of all what happens is alias is this axing for the two nodes.
So we have the two nodes that is basically the server that is associated on different location.
So they had the Tor nodes.
So they're basically the Tor nodes are the direct server.
And after that they will just get that door nodes the list of the top north for the Ellis.
And basically now encryption happens in the next step so you can see that over here that these circuits
are so encrypted that every encryption have is encrypted and decrypted key over here.
So you can see this is the encrypted socket away here.
And this part which is this part is your Tor node.
So this is your turn order.
Basically this is your encrypted link again.
But this this link is your unencrypted link and this part which is this part.
These three are your third nodes.
So you can clearly see the masses or the request is sent from Alias.
But when it reaches above it will think that it is from the stored node but not from the alias.
But instead it was sent from the alias so it was so encrypted that this Bob has no idea which of these
nor has sent these messages.
So you can just now get information that this alias is sorting something on the Google maybe this Bob
is Google Now and Google has no information that who is sending that information or who is sending that
request.
So this is the work of the tour.
You can see clearly over here how this is encrypted.
And if you just make one request let me so say something like okay at first we just made the request
to Google dot com and in second if I just make a request again to Facebook dot com new circuit will
be created.
Now in this circuit will be random than before.
At first this was this circuit associated to make a link between Alice and Bob.
Now for the second request maybe pressing dot com.
Now there will be another circuit created so that this new server will nor have any longer information
about this Alice again any more.
So this is a very important encrypted technique in the case of the store and we have to see that how
these circuits are created in the case of the tour and how we can just see that green link here is an
encrypted one and the red link is the clear one or on encrypted link that means this will have the information
of this synod but this notice of the third nodes so Ellis will be having the encrypted communications
with this den or basically with this person or with this server and that is the only way to protect
the transportation of data which is basically staying anonymous in the network.
So it is very important features of the door that is it will this make us anonymous in the network so
that if you do any stops and I won't encourage to do any illegally stops in the tour but if we do it
again then there will be something that is encrypted link so that the person who is going to track.
So basically I'm not saying they cannot track you but there will be hard for them to just track if it
is to use the tool for the attacking or for any stops.
That is not legal.
So you can see that we have now talk about the term.
So an analogy I'll just give you analogy of the story here.
So you can just think this story is a mailing system where this email basically we're mailing a letter
that is received and forwarded by the different people.
So here people is a Kleins and there can be the connection between the Tor network to order tor Nord.
So let's say there is a one person with media and she wants to send the letter to the John.
So what we are just talking about here is a personal client is making a request to another server maybe
Google dot com.
So here we are just making an analogy that maybe sending a mail to Johnny.
So we'll see now how encryption works in the door.
But the main thing is that C doesn't want to let joining that.
The letter is what is in it.
So basically what we want is do anyone to have any idea that the letter was originated from the mail.
That means the Google or any other server don't have any information of this matter.
So that is our main priority.
So next steps or next step to remain anonymous will be as follows.
Let's see how this works.
So first of all Mary who organized the letter.
Write a letter.
Basically she writes a letter and places it in an envelope addressed to the journey in the Boston.
So this is just remember we're here.
What is us talking about this place is the letter and addressed to the Johnny in the bottle and that
means don't you stay in the Boston or to the side where basically we just say that there is a server
in the Boston and again many places that involving the another and addresses it Suzanne in the city.
So that means this is the new server which is our third node.
So that envelop which is obviously the masses is also addressed to Susan in Seattle.
And again this may be places that involve in an order and addresses it to bury in Dallas and Mary and
so places then it will have in another and it addresses it to Bob in Denver and then Mary places the
letter in a mailbox from her home in San Francisco.
So basically this is the place where this mailbox or basically this letter where all this is inherited
from.
So you can see you can just see that this envelop over here represents a layer of encryption.
So using the rule that each person in this analogy can only unwrap the first envelope.
So just remember that he only can unwrap the first in bill of that descent.
So that concludes on are basically the contents that remain hidden encrypted in the most inner envelop.
That means if you see the letter of the envelop which is the layer of encryption has that letter which
is encrypted are hidden in the most inner envelop.
So that is your encryption and you can see the Bobby's entry point here.
Betty will be middle point.
And Suzanne will be middle point again.
So it is exit point not a middle point.
So she will be the exit point for each of these has basically your notes.
So they are towed nodes.
That means this envelop which we are talking about over here represents a layer of encryption.
And basically this content which is inner contained will be encrypted in the envelop.
And just remember that every party every party over here which is obviously this Betty Suzanne and Joe
which is Bob which is a metaphor for our tour roads that are out for our tour links are a tour north.
We'll just unwrap the first envelop.
So they'll have the priority to just encrypt the first part of the messages and not the whole messages.
So that is very important to think about this start browser.
We saw how our browser works under the hood in these Celexa.
You can see these are your top browsers and we saw these are your darlings.
They're voluntarily skipped across the world so that it will be faster than before.
But you know that door being so much safer than any other browser has to go through many tor links.
That means it will be slower than any other browser but maybe it is more civil.
So we have the trade off over here.
We just have the slower browser that is more safe or in order to do some pain testing.
Now let's go to the some of the quick onion link now.
So first of all I have this bit of lingo over here.
You can just take out from the resource section so there are great bunch of lingo here.
You can just grab it out.
So if I just open this on your link over here so let me just copy.
Go to our our browser at Mrs. paste and just press go.
You'll see to this have the little less Internet connection.
So basically we have just opened the door.
So this is the way how this on your browser works or you can just grab anything it is same is the normal
loops that you can just make Facebook or you can also go or solve the social Web sites e-mailing Web
sites.
You can also host Euro websites to do many things.
So you can see over here this has the on the on road.
That means that this is the Web site of the dark web.
You can do many stuffs from this tor browser.
But let me just remind you of some incident that was happen back in 2013.
So there was this Harvard student who was basically just remember his name.
It may be Kim or something.
So he used basically this to the browser to e-mail bomb.
So what e-mail Bombay's he is going to just you.
He was basically threatening the Harvard staff to this to avoid taking the exam.
So that was really interesting facts that you we were just threatening to the hardware the staff not
to take the exam and the I.T. stops at the Harvard looked at their logs so they can obviously look at
their Internet logs in that I.T. starves us identify that Kim was assisting the door on the school network
during the time of e-mails.
So they discussed him and just the FAA axed that game if he did that action and he made me there so
you can see that door has world.
But Kim has just brought that because you can clearly see that door is not for everyone.
If you want to make a user vote or make it in a way that it will just be not harmful for other you can
just make your masses encryption much more efficient in the door.
But if it does do any legally stop it will be distracted by any office cell in any time.
So it is very dangerous to work with the door for the illegal stuff.
So I highly recommend just you can go through for the educational purposes or basically you can solve
it and you can see how is this on your onion browser work or onion vowed to work under the hood in this
lecture.
So in the next Alexa would be interesting Lexi because we are going to this launch our own Web site
is an onion route from the college Linux so we'll just make our own server that is a party server will
just some make our own Web site and will just host that Web site in and on the on route.
So we'll see you in the next Alexa soon the next one.