OpenSecurityTraining2

📣"Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" released!📣 ost2.fyi/Arch1901 This class by Antonio Nappa @jeppojeps of Fuzz Society @fuzzsociety_org builds up your knowledge from learning a toy 8-bit CPU architecture all the way to understanding how QEMU can emulate that architecture. Using this knowledge you can then understand how QEMU can emulate any architecture!

After taking this class and understanding more about how QEMU works, I'm looking forward to throwing LLMs at the often painstaking work necessary for re-hosting firmware to run in an emulator like QEMU.

Go deeper with TPMs! Machine identity, attestation, PCRs, and extended authorization policies. Build on TC1101 to master platform security. "Trusted Computing 1102: Intermediate TPM Usage" ost2.fyi/TC1102 (~10 hrs) by Dimi Tomov

Based on beta testing, this class takes an average of 8h47m to complete, and a median of 7h26m

📣"Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" released!📣 ost2.fyi/Arch1901 This class by Antonio Nappa @jeppojeps of Fuzz Society @fuzzsociety_org builds up your knowledge from learning a toy 8-bit CPU architecture all the way to understanding how QEMU can emulate that architecture. Using this knowledge you can then understand how QEMU can emulate any architecture!

Our free course on @OpenSecTraining has officially launched today after 2 betas. From Zero to QEMU will drive you from writing a basic 8bit interpreter (python) to understand how to instrument QEMU - we are hosting, in-browser-lab to start immediately - also docker avaliable. Thanks to all the beta testers, @XenoKovah Hudson, Crandyman, Lizard for their invaluable and deep help. Direct Link Below.

GDB is the Swiss Army knife of Linux & embedded debugging. Learn breakpoints, stepping & memory inspection: fast and hands-on. Debuggers 1012: Introductory GDB ost2.fyi/Dbg1012

TPMs are everywhere: laptops, servers, IoT. Learn to harness them for signing, encryption & platform integrity. Hands-on Docker labs included. "Trusted Computing 1101: Introductory TPM Usage" by Dimi Tomov ost2.fyi/TC1101 (~8.5 hrs)

Another thing we meant to mention about the server upgrade is that we've simplified your account settings (the place to edit) and the public profile (the place to view). Open edX doesn't do much with profiles by default, so you wouldn't have had much reason to edit this in the past. But it will become where you can show off your accomplishments in the future version with gamification enabled! You may also notice we've started linking to this from discussion forum posts. So update your profile now, under Account Settings, and that's what others will see on future leaderboards!

With the 5th anniversary of #OST2 coming up in a month, people who were Jr/Sr when the site started should be Sr/Lead by now! If you were helped by OST2 and want to pay it forward, reach out about teaching a class! ost2.fyi/Donate-Time.ht…

Upgraded server news 7: This is actually the biggest one, and what prompted us to upgrade. The new server is ready for adding gamification support! We're going to be running a fundraiser soon to test the community's support for OST2 and share how gamification could work on OST2. If you want to get a head start you can contribute here (cryptocurrency is now accepted too!) every.org/ost2/f/lets-ga…

Upgraded server news 6: Another longstanding Open edX bug that we've fixed is the fact that there was no way for instructors to get emails when students posted to forums. None of the instructors have time to be checking the forums every day. But now instructors can opt in to getting emails and deciding if they want to reply. (Reminder: in this day and age, the best bet is to try an LLM first with your questions. But for sure keep posting when things are broken in a class, so they can get fixed.)

Upgraded server news 5: No more missed emails thanks to improved rate limiting. Open edX has a forever-bug where it doesn't slow down email sending when it hits the rate limit. We've fixed this so now we can ensure all students get instructor emails.

Upgraded server news 4: Light/dark mode theme switcher in top right corner.

Upgraded server news 3:
New password complexity requirements - 18 characters, no complexity requirements, since 26^18 >> 62^8 (hopefully we don't need to educate you on password best practices ;)). This doesn't apply retroactively, just to new registrations or password resets.

Upgraded server news 2: Our new support for OAuth also lets us serve as a SSO server for other platforms. Antonio Nappa @jeppojeps has enabled it to allow SSO for OST2 students into fuzzsociety.org @fuzzsociety_org for the current "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" class that's currently in beta testing.

Upgraded server news 1: OAuth registration & sign-in via GitHub or Google. Let us know what other providers would be useful as they're now easy to add.

🧵Upgrade complete! We've upgraded the Open edX version that underpins OST2. Why tho?! The changes are discussed below!