Lightnews — Scholar-powered news

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 1h

🧵For those who are curious about the completion time distribution during the beta of my #OST2 BT2222 class, here it is. The average completion time was 8h25m, the median was 8h10m, the min was 3h50m, and the max was 15h22m

1 1 2

OpenSecurityTraining2 @opensectraining.bsky.social · 9d

🙌We're happy to announce OST2 now has over 31k students registered! 🥳 By the time we noticed we crossed the 30k mark, we were already at 30.5, so we figured we'd wait for 31k, which is now!🎉

👏Kudos to all the students taking and finishing classes!👏

1 4

OpenSecurityTraining2 @opensectraining.bsky.social · 10d

As always, the recommendation is for students to take the class as it's meant to be seen at ost2.fyi/Fuzz1001 where you get lab instructions, etc.

Fuzzing 1001 Short URL Redirect

ost2.fyi

OpenSecurityTraining2 @opensectraining.bsky.social · 10d

We have made Francesco Pollicino's "Fuzzing 1001: Introductory Fuzzing" class playlist public here: www.youtube.com/playlist?lis... for those who'd like to download the videos for offline consumption.

Fuzzing 1001: Introductory Fuzzing - YouTube

View the full free MOOC at https://ost2.fyi/Fuzz1001. This hands-on fuzzing course introduces a software-testing technique for finding security vulnerabiliti...

www.youtube.com

1 2 4

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 21d

🧵I made a structural update to the Blue2thprinting #OST2 class today: The previous class was structured like "A:B:[C:D:E]:F:G" where F & G were collecting your own data, and [C-E] were understanding what Tell_Me_Everything.py was trying to tell you about the analyzed data…

1 1 1

OpenSecurityTraining2 @opensectraining.bsky.social · 21d

With the release of ost2.fyi/BT2222, we have posted a brand new OST2 Bluetooth Learning Path which shows future classes that are planned, as well as classes which we need volunteers for. Freshly updated today: ost2.fyi/OST2_LP_Blue...

3

OpenSecurityTraining2 @opensectraining.bsky.social · 28d

PDFs are vector-based for full quality when zooming, and have click-to-go-to-class links

1 1

OpenSecurityTraining2 @opensectraining.bsky.social · 28d

The "Trusted Computing 1102: Intermediate Trusted Platform Module (TPM) usage" ost2.fyi/TC2202 class release has updated 3 #OST2 learning paths

Secure Software Design & Implementation - ost2.fyi/OST2_LP_SecD...

System Security - ost2.fyi/OST2_LP_SysS...

Windows Security - ost2.fyi/OST2_LP_Wind...

1 1 3

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 15

Designed for developers, security engineers, and researchers, the course covers both foundational TPM 2.0 concepts and practical hands-on development techniques for interacting with TPM hardware and simulators. This class has a median completion time of 13 hours.

1 1

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 15

📣"Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries" by Bill Roberts is now released!📣
ost2.fyi/TC2202

This course provides a comprehensive introduction to Trusted Platform Module (TPM) 2.0 programming using the Python-based tpm2-pytss library.

1 1 3

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 9

Periodic call for volunteers: we've got a deep slate of Bluetooth classes on the horizon, but we need classes on other wireless protocols. If you'd be interested in teaching a class on satellite, cell, WiFi, Zigbee, LoRa, Thread, etc, let us know at teach🌀ost2.fyi

2 3

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 9

If anyone from the EU would be interested in helping get #OST2 classes added to digital-skills-jobs.europa.eu/en/cyber-ski..., please reach out

Cyber Skills Academy - Knowledge and training

The Cyber Skills Academy will foster knowledge generation through education and training by establishing a common EU approach to cybersecurity training

digital-skills-jobs.europa.eu

1 4

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · Sep 8

🧵I originally started working on Blue2thprinting to try and figure out where @veronicakovah.bsky.social's over-the-air exploits against Texas Instruments & Silicon Labs (darkmentor.com/publication/...) applied...

1 3 5

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 8

New in v2.0+ is the BTIDALPOOL crowdsourcing server for researchers to push & pull data about devices they've discovered.

1

OpenSecurityTraining2 @opensectraining.bsky.social · Sep 8

📣"Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" is now released!📣
ost2.fyi/BT2222

This class teaches you about the 30+ data types that the Blue2thprinting software can collect for when you're trying to determine what a device is, and whether it has any known vulnerabilities.

1 4 6

OpenSecurityTraining2 @opensectraining.bsky.social · Aug 25

Are you making your own luck, by taking (and finishing) OST2 classes?
ost2.fyi/Learning-Pat...

1 2

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · Aug 2

If you, like me, are curious about the thousands of BT devices that are secretly making noise around us every day (and whether they’re vulnerable to exploitation), then this is the class for you. You can register here: forms.gle/MncQkVAL8Laq...

2 2

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · Jul 28

The videos came back early so the class has begun early! As a reminder, betas are perhaps the best time to participate, because it’s the only time I’m actively checking the forums multiple times per day and quickly fixing material if needed

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

📢Call for beta testers!📢
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

Enter the email you have used / will use when registering for beta.ost2.fyi. This will be used to enroll you in the beta class if you are selected. If your account does not exist at the time enrollmen...

forms.gle

1 2

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

It will take ~8-12 hours to complete (depending on how long you dig into crowdsourced BT data). This class has no prerequisite knowledge, but it does require purchasing at least $64 worth of hardware as described in the registration form above

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

📢Call for beta testers!📢
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

Enter the email you have used / will use when registering for beta.ost2.fyi. This will be used to enroll you in the beta class if you are selected. If your account does not exist at the time enrollmen...

forms.gle

1 2

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

And finally, thanks to all 29k+ folks who are taking classes at OST2! Being able to teach thousands of people at a time how to become better hackers, better engineers, better toolsmiths, and better explorers is why we do what we do! Spread the word and let's make more awesome people!

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

We're committed to using individual donors' funds to always directly pass through to instructors (never for overhead costs), and we'll once again be passing through your thanks to the current instructors as an honorarium this coming year.
ost2.fyi/Donate-Money...

OpenSecurityTraining2 - Donate Money

ost2.fyi

1

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

Thanks to everyone who's donated individually to OST2 this past year! Whether with corporate matching through work (we are an actual charity registered in the US after all) or individually through the YouTube page, donations shows us that you truly value what we do!

1 1

OpenSecurityTraining2 @opensectraining.bsky.social · Jul 21

But we need more sponsors to keep growing! ost2.fyi/Sponsorship.... If you want your company to sponsor #OST2, reach out via email at "sponsor at ost2.fyi". It's much more cost effective than sponsoring conferences, and reaches far more people!

OpenSecurityTraining2 - Sponsorship

ost2.fyi

1