OpenSecurityTraining2 @OpenSecTraining

501(c)3 Nonprofit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021! [email protected] ost2.fyi Internets! Joined November 2011

Tweets

862
Followers

10K
Following

17
Likes

348

Xeno Kovah @XenoKovah

2 days ago

Dino’s been mentioning the importance of hardware in security architectural design a bit more lately. As a reminder if you want to get on this architect level, #OST2 has 3 classes on learning to use TPMs: ost2.fyi/TC1101 ost2.fyi/TC1102 ost2.fyi/TC1103

Dino A. Dai Zovi @dinodaizovi

a week ago

The mindset between AI folks and trusted computing folks are at opposite ends of the spectrum. AI folks build inscrutable systems whose behavior is measured empirically. Trusted computing folks build transparent systems that are guaranteed to behave as predictably as possible.

3 4 15 3K 2

0 3 8 1K 2

View Details

OpenSecurityTraining2 @OpenSecTraining

2 days ago

We have posted the YouTube playlist for Trusted Computing 1103: Advanced TPM Usage by Dimi Tomov in partnership with the TCG @TrustedComputin. Now anyone wishing to download the videos for offline viewing can find all their URLs here: youtube.com/playlist?list=… But as always the best experience is at the full class at ost2.fyi/TC1103

0 3 18 1K 12

View Details

OpenSecurityTraining2 @OpenSecTraining

6 days ago

All of the videos showing our planned gamification updates to the website are now available in this playlist: youtube.com/playlist?list=…

0 1 7 1K 2

View Details

Xeno Kovah @XenoKovah

6 days ago

Thanks to all the donors who put us over $1500 in donations so far for our first ever fundraiser! But we know there are thousands of other students & well-wishers waiting in the wings. If folks donated just $5 today we'd quickly double that total! every.org/ost2/f/lets-ga…

OpenSecurityTraining2 @OpenSecTraining

6 days ago

0 0 6 2K 0

0 1 9 2K 3

View Details

OpenSecurityTraining2 @OpenSecTraining

6 days ago

Part 2 for devs! UAFs, race conditions, type confusion & info leaks. Real 0day exploit walkthroughs show why "looks unexploitable" are famous last words. Secure Development 1002 ost2.fyi/SecDev1002 by @XenoKovah

OpenSecurityTraining2 @OpenSecTraining

a week ago

The best defense is understanding the offense. Learn to spot and prevent the C/C++ implementation bugs that attackers love to exploit. Secure Development 1001 by @XenoKovah ost2.fyi/SecDev1001

0 14 60 4K 29

1 4 30 2K 5

View Details

OpenSecurityTraining2 @OpenSecTraining

6 days ago

🎮This is the last week of the OST2 gamification fundraiser! If you were waiting to be a last-minute hero, now is the time to swoop in!🕹️ every.org/ost2/f/lets-ga…   In this final video @XenoKovah talks about how the gamification system will allow us to recognize other worthwhile achievements outside of the platform, such as speaking at security conferences!   And not only will you get to show off your accomplishments, but by supporting our build-out for gamification, you'll also be helping OST2 support itself, by opening up a new type of sponsorship of OST2 by security conferences themselves!

0 0 6 2K 0

View Details

OpenSecurityTraining2 @OpenSecTraining

a week ago

The best defense is understanding the offense. Learn to spot and prevent the C/C++ implementation bugs that attackers love to exploit. Secure Development 1001 by @XenoKovah ost2.fyi/SecDev1001

0 14 60 4K 29

View Details

OpenSecurityTraining2 @OpenSecTraining

a week ago

🎮Our gamification fundraiser ends next week but we need your support today!🕹️ every.org/ost2/f/lets-ga… In this penultimate video @XenoKovah talks about how the gamification will allow us to recognize the ultimate volunteers, the instructors!  Remember, donations don't need to be large! Many hands make light work and we'd love to see how many people support what we do!🙏 And if you've got an idea for an OST2 class, reach out at teach🌀ost2.fyi! We've got many instructors who are working on classes, and we'd love to add your class to the queue too!

0 4 6 772 1

View Details

Xeno Kovah @XenoKovah

2 weeks ago

I’ve been looking for a way to recognize #OST2 volunteers more publicly, and this will allow them to stand head and shoulders above other OST2 students and claim their rightful place of honor! Only the instructors and potentially hardcore class-completionists will shine brighter!

OpenSecurityTraining2 @OpenSecTraining

2 weeks ago

1 2 6 2K 1

0 1 6 1K 0

View Details

OpenSecurityTraining2 @OpenSecTraining

2 weeks ago

All videos to date talking about the proposed gamification system update are posted here: youtube.com/playlist?list=…

0 0 0 276 0

View Details

OpenSecurityTraining2 @OpenSecTraining

2 weeks ago

🎮Our gamification fundraiser ends soon and we need your support!🕹️ every.org/ost2/f/lets-ga… In this video @XenoKovah talks about how the gamification will allow us to recognize the volunteers who make classes better through beta testing, subtitle correction, graphics contributions, etc! It's the 11th hour and we really want to know how many people support what we do, so even small donations help us by showing who are our true friends & fans!🙏

1 2 6 2K 1

View Details

OpenSecurityTraining2 @OpenSecTraining

2 weeks ago

Build the ultimate Windows kernel debugging setup! Automated VMs, ret-sync with IDA/Ghidra, and source-level kernel debugging. Your exploit lab for Cedric Halbronn (@saidelike)'s classes awaits! Debuggers 3011: Advanced WinDbg ost2.fyi/Dbg3011

1 49 277 10K 206

View Details

OpenSecurityTraining2 @OpenSecTraining

2 weeks ago

🎮In the 6th video in our fundraiser, @XenoKovah talks about how student profiles would become much more useful with gamification!🕹️   Traditionally Open edX didn't do much with student profiles, but now we can make them a useful hub to show off your accomplishments on and off the site.  But to make this happen we need everyone who likes OST2 to show their support at every.org/ost2/f/lets-ga… 🙏  To check out our past videos for more about gamification, see here: youtube.com/playlist?list=…

0 2 7 777 0

View Details

OpenSecurityTraining2 @OpenSecTraining

3 weeks ago

Want to write kernel exploits or analyze malware? You need to understand Windows internals first. Syscalls, IRQL, pools, mitigations & more. Architecture 2821: Windows Kernel Internals 2 by Cedric Halbronn @saidelike ost2.fyi/Arch2821

4 56 244 9K 179

View Details

Xeno Kovah @XenoKovah

3 weeks ago

I think inter/intra-country leaderboards will drive some fun inter/intra-country competition. E.g. here’s who’s been active on OST2 in the last 30 minutes (it’s currently too-early-to-be-up-o’clock on a holiday in the US ;)). But which country has the TOP students?!

OpenSecurityTraining2 @OpenSecTraining

3 weeks ago

1 3 14 2K 1

0 2 4 986 0

View Details

OpenSecurityTraining2 @OpenSecTraining

3 weeks ago

🎮In the 5th video in our gamification fundraiser, @XenoKovah talks about how leaderboards will work!🕹️  We will have a bunch of different leaderboards: global for the entire site, per-country, per-class, per-accomplishment, and possibly more!  If you'd like to see this happen (or if you just think OST2 is awesome!), please support us at every.org/ost2/f/lets-ga… 🙏 (And if you have already finished lots of classes on OST2 you might see yourself on the leaderboards in the video ;))

1 3 14 2K 1

View Details

OpenSecurityTraining2 @OpenSecTraining

3 weeks ago

🎮In the 4th video in our gamification fundraiser, @XenoKovah talks about how we can track intra-class accomplishments!🕹️   Remember, OST2 isn't a mega-nonprofit, we really do need *your* support to be successful! every.org/ost2/f/lets-ga… 🙏 The idea with intra-class accomplishments is to surface the useful units of knowledge students are acquiring as they go through a class, not just say "you learned a bunch of stuff!" at the very end with the per-class accomplishment. An example of medium-grain accomplishments are things typically captured by section headers such as "How a function is called" or "Control flow" in an assembly language. And then the fine-grain accomplishments are learning the individual assembly instructions which combine to know those things. You can find the previous videos here: youtube.com/playlist?list=…