OpenSecurityTraining2

501(c)3 Nonprofit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021! [email protected]

[OpenSecurityTraining2 @OpenSecTraining]

The first cut of the new gamified OST2 is available at https://t.co/aYsDfmHVHq. Start poking around and let us know what's broken!

[OpenSecurityTraining2 @OpenSecTraining]

The production server https://t.co/aYsDfmHnRS will be down at some point tomorrow to begin applying the first cut of the gamification platform & backfilling user accomplishments!

[OpenSecurityTraining2 @OpenSecTraining]

Bluetooth security starts with recon. Learn passive & active collection, device fingerprinting & crowdsourced intel with Blue2thprinting. Bluetooth 2222 by @XenoKovah https://t.co/rv7GoZ1IHs (~8.5 hrs)

[OpenSecurityTraining2 @OpenSecTraining]

Build a disk encryption solution with TPM! Advanced policies, key attestation & importing external keys to be protected by hardware instead of software. The capstone of the TPM trilogy. Trusted Computing 1103: Advanced TPM Usage https://t.co/jVrXiijqYB (~12 hrs)

[OpenSecurityTraining2 @OpenSecTraining]

There was a UI error on the site which was allowing students to track their progress within a class while not being enrolled. We've fixed the UI bug, and enrolled students who had non-0% progress in unenrolled classes. This led to thousands of new enrollments, badges earned, and at least 57 new completion certificates being awarded!

While it was our intention to make class material fully publicly available, it was not the intention that the UI would allow signed-in-but-unenrolled users to click "Mark as complete" and get updated Progress page UI that confusingly made students think they were properly enrolled. Hopefully now the UI is more clear. Thanks to the user who reported this!

[Brian Halbach ☕️ @brianhalbach]

@cr3ghost @OpenSecTraining I took the assembly and OS internals class and they both were amazing

[cr3ghost @cr3ghost]

If you're into Windows internals, reverse engineering or exploit development, bookmark this.

The @OpenSecTraining has an incredible collection of FREE low-level security courses covering:

- x86-64 assembly
- Windows kernel internals
- Windows kernel exploitation
- WinDbg from introductory to advanced
- IDA + Ghidra + Binary Ninja
- HyperDbg
- UEFI internals
- Intel firmware attack + defense
- C/C++ vulnerability research
- Symbolic analysis
- C++ binary reversing
- AFL++ fuzzing
- TPM + trusted computing
- Intel SPI analysis
- OS internals
- RISC-V
- Emulator development with QEMU

There is even a dedicated Windows kernel exploitation course covering race conditions + UAFs in KTM.

Proper low-level material, not another surface-level security course.

Start digging:
https://t.co/1zU3REgzUf

#WindowsInternals #ReverseEngineering #ExploitDevelopment

[OpenSecurityTraining2 @OpenSecTraining]

Get introduced to IDA, an industry-standard disassembler! Learn breakpoints, stepping, memory/register inspection. The essential start for any RE path. Debuggers 1101: Introductory IDA https://t.co/TYqHOiq1uT

[OpenSecurityTraining2 @OpenSecTraining]

Another nudge which we've added to the site is the different tiers of course completion accomplishments. If you complete a class within 2 weeks of starting it you'll get Gold (12.5k points), 4 weeks Silver (6250), 12 weeks Bronze (3125), and > 12 weeks Plain (1250). We've also updated the certificates to match the accomplishment coloring. We hope students will finish classes ASAP after they start them going forward!

[OpenSecurityTraining2 @OpenSecTraining]

As part of the gamification we're rolling out a few "Ignominious" badges to nudge users' behavior in the right direction.
Do you have 5 or more OST2 classes that you enrolled in but haven't started? Congrats, you've been granted the "Watchlister" accomplishment (-10k points!) Not only that, but you can't sign up for new classes! We know it's a common behavior to treat the site like Netflix and to add stuff that you just think you may get around to someday. But the fix is easy, just unenroll from the classes you're not going to take any time soon. You get a clean dashboard, and we get better statistics about who's actually working on classes!

[OpenSecurityTraining2 @OpenSecTraining]

Deployed! https://t.co/VwZ7UEYQcz

[OpenSecurityTraining2 @OpenSecTraining]

We scraped our git history to grant the Subtitle Superhero to all the awesome people who've submitted subtitle fixes over the years. If we missed you though, let us know!

[OpenSecurityTraining2 @OpenSecTraining]

And we just had an idea while posting and will add it to our TODOs to make it so that in the future the leaderboard for that badge re-orders based on who's contributed the most lines of fixes, as opposed to who has the overall most OST2 points as the default per-badge leaderboards work.

[OpenSecurityTraining2 @OpenSecTraining]

As a thank you and more public recognition, we've granted this donor badge to the folks who donated in our recent campaign. But if you donated through work or YouTube we can't correlate to your account, so please let us know at donor at https://t.co/DKrtNZrjXM and we'll get that added!

https://t.co/uJPX51A9Eh

[OpenSecurityTraining2 @OpenSecTraining]

Also, filling in your profile is worth some points towards the leaderboard!

[OpenSecurityTraining2 @OpenSecTraining]

Also now's the time to fill in your profile information so you can show up how you want on the leaderboards! (Putting in your country will then have you show up on the per-country leaderboard.)

[OpenSecurityTraining2 @OpenSecTraining]

As part of the gamification we're rolling out a few "Ignominious" badges to nudge users' behavior in the right direction.
Do you have 5 or more OST2 classes that you enrolled in but haven't started? Congrats, you've been granted the "Watchlister" accomplishment (-10k points!) Not only that, but you can't sign up for new classes! We know it's a common behavior to treat the site like Netflix and to add stuff that you just think you may get around to someday. But the fix is easy, just unenroll from the classes you're not going to take any time soon. You get a clean dashboard, and we get better statistics about who's actually working on classes!

[Xeno Kovah @XenoKovah]

This is “Li’l Stranger”, the new mascot for @OpenSecTraining.
- “I’m Xeno and I approve of this message!”

[OpenSecurityTraining2 @OpenSecTraining]

And if you want to opt out of showing up on the leaderboards, you can find that option under your new profile page too

[OpenSecurityTraining2 @OpenSecTraining]

Also now's the time to fill in your profile information so you can show up how you want on the leaderboards! (Putting in your country will then have you show up on the per-country leaderboard.)