501(c)3 Nonprofit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021! [email protected]
Internets!
Joined November 2011
- Tweets884
- Following17
- Followers10K
- Likes353
Pinned Tweet
The first cut of the new gamified OST2 is available at p.ost2.fyi. Start poking around and let us know what's broken!
The production server p.ost2.fyi will be down at some point tomorrow to begin applying the first cut of the gamification platform & backfilling user accomplishments!
Build a disk encryption solution with TPM! Advanced policies, key attestation & importing external keys to be protected by hardware instead of software. The capstone of the TPM trilogy. Trusted Computing 1103: Advanced TPM Usage ost2.fyi/TC1103 (~12 hrs)
There was a UI error on the site which was allowing students to track their progress within a class while not being enrolled. We've fixed the UI bug, and enrolled students who had non-0% progress in unenrolled classes. This led to thousands of new enrollments, badges earned, and at least 57 new completion certificates being awarded!
While it was our intention to make class material fully publicly available, it was not the intention that the UI would allow signed-in-but-unenrolled users to click "Mark as complete" and get updated Progress page UI that confusingly made students think they were properly enrolled. Hopefully now the UI is more clear. Thanks to the user who reported this!
OpenSecurityTraining2 retweeted
I took the assembly and OS internals class and they both were amazing
OpenSecurityTraining2 retweeted
If you're into Windows internals, reverse engineering or exploit development, bookmark this.
The @OpenSecTraining has an incredible collection of FREE low-level security courses covering:
- x86-64 assembly
- Windows kernel internals
- Windows kernel exploitation
- WinDbg from introductory to advanced
- IDA + Ghidra + Binary Ninja
- HyperDbg
- UEFI internals
- Intel firmware attack + defense
- C/C++ vulnerability research
- Symbolic analysis
- C++ binary reversing
- AFL++ fuzzing
- TPM + trusted computing
- Intel SPI analysis
- OS internals
- RISC-V
- Emulator development with QEMU
There is even a dedicated Windows kernel exploitation course covering race conditions + UAFs in KTM.
Proper low-level material, not another surface-level security course.
Start digging:
p.ost2.fyi/
#WindowsInternals #ReverseEngineering #ExploitDevelopment
Get introduced to IDA, an industry-standard disassembler! Learn breakpoints, stepping, memory/register inspection. The essential start for any RE path. Debuggers 1101: Introductory IDA ost2.fyi/Dbg1101
Another nudge which we've added to the site is the different tiers of course completion accomplishments. If you complete a class within 2 weeks of starting it you'll get Gold (12.5k points), 4 weeks Silver (6250), 12 weeks Bronze (3125), and > 12 weeks Plain (1250). We've also updated the certificates to match the accomplishment coloring. We hope students will finish classes ASAP after they start them going forward!
As part of the gamification we're rolling out a few "Ignominious" badges to nudge users' behavior in the right direction.
Do you have 5 or more OST2 classes that you enrolled in but haven't started? Congrats, you've been granted the "Watchlister" accomplishment (-10k points!) Not only that, but you can't sign up for new classes! We know it's a common behavior to treat the site like Netflix and to add stuff that you just think you may get around to someday. But the fix is easy, just unenroll from the classes you're not going to take any time soon. You get a clean dashboard, and we get better statistics about who's actually working on classes!
We scraped our git history to grant the Subtitle Superhero to all the awesome people who've submitted subtitle fixes over the years. If we missed you though, let us know!
And we just had an idea while posting and will add it to our TODOs to make it so that in the future the leaderboard for that badge re-orders based on who's contributed the most lines of fixes, as opposed to who has the overall most OST2 points as the default per-badge leaderboards work.
As a thank you and more public recognition, we've granted this donor badge to the folks who donated in our recent campaign. But if you donated through work or YouTube we can't correlate to your account, so please let us know at donor at ost2.fyi and we'll get that added!
p.ost2.fyi/gamma_dashboard/l…
ALT 2026 Gamification Donor badge
As part of the gamification we're rolling out a few "Ignominious" badges to nudge users' behavior in the right direction.
Do you have 5 or more OST2 classes that you enrolled in but haven't started? Congrats, you've been granted the "Watchlister" accomplishment (-10k points!) Not only that, but you can't sign up for new classes! We know it's a common behavior to treat the site like Netflix and to add stuff that you just think you may get around to someday. But the fix is easy, just unenroll from the classes you're not going to take any time soon. You get a clean dashboard, and we get better statistics about who's actually working on classes!
OpenSecurityTraining2 retweeted
This is “Li’l Stranger”, the new mascot for @OpenSecTraining.
- “I’m Xeno and I approve of this message!”
Also now's the time to fill in your profile information so you can show up how you want on the leaderboards! (Putting in your country will then have you show up on the per-country leaderboard.)
The production server p.ost2.fyi will be down at some point tomorrow to begin applying the first cut of the gamification platform & backfilling user accomplishments!
Immense thanks to everyone who stepped forward to support #OST2! ❤️ Your generous donations help show that you value providing free high-quality educational material to the world.