iiinova — where your digital self keeps evolving

OpenSecurityTraining2 @opensectraining.bsky.social · 16h

As a thank you and more public recognition, we've granted this donor badge to the folks who donated in our recent campaign. But if you donated through work or YouTube we can't correlate to your account, so please let us know at donor at ost2.fyi and we'll get that added! p.ost2.fyi/gamma_dashbo...

012

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

And we just had an idea while posting and will add it to our TODOs to make it so that in the future the leaderboard for that badge re-orders based on who's contributed the most lines of fixes, as opposed to who has the overall most OST2 points as the default per-badge leaderboards work.

100

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

We scraped our git history to grant the Subtitle Superhero to all the awesome people who've submitted subtitle fixes over the years. If we missed you though, let us know!

111

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

Also, filling in your profile is worth some points towards the leaderboard!

010

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

You get a clean dashboard, and we get better statistics about who's actually working on classes!

000

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

We know it's a common behavior to treat the site like Netflix and to add stuff that you just think you may get around to someday. But the fix is easy, just unenroll from the classes you're not going to take any time soon.

100

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

Do you have 5 or more OST2 classes that you enrolled in but haven't started? Congrats, you've been granted the "Watchlister" accomplishment (-10k points!) Not only that, but you can't sign up for new classes!

100

OpenSecurityTraining2 @opensectraining.bsky.social · 17h

As part of the gamification we're rolling out a few "Ignominious" badges to nudge users' behavior in the right direction. 🧵

111

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 17h

This is “Li’l Stranger”, the new mascot for @opensectraining.bsky.social - “I’m Xeno and I approve of this message!”

021

OpenSecurityTraining2 @opensectraining.bsky.social · 03/10/2026

And if you want to opt out of showing up on the leaderboards, you can find that option under your new profile page too

000

OpenSecurityTraining2 @opensectraining.bsky.social · 03/10/2026

Also now's the time to fill in your profile information so you can show up how you want on the leaderboards! (Putting in your country will then have you show up on the per-country leaderboard.)

121

OpenSecurityTraining2 @opensectraining.bsky.social · 03/10/2026

The first cut of the new gamified OST2 is available at p.ost2.fyi. Start poking around and let us know what's broken!

011

OpenSecurityTraining2 @opensectraining.bsky.social · 02/10/2026

The production server p.ost2.fyi will be down at some point tomorrow to begin applying the first cut of the gamification platform & backfilling user accomplishments!

p.ost2.fyi

| OpenSecurityTraining2

000

OpenSecurityTraining2 @opensectraining.bsky.social · 28/09/2026

We have posted the YouTube playlist for "Architecture 1901: From Zero to QEMU" by Antonio Nappa @jeppojeps.bsky.social of Fuzz Society. URLs for offline download can be found here: www.youtube.com/playlist?lis... But as always the best experience is at the full class at ost2.fyi/Arch1901.

youtube.com

Architecture 1901: From Zero To QEMU - YouTube

View the full free class with labs etc at https://ost2.fyi/Arch1901 ! This class by Antonio Nappa of Fuzz Society (https://fuzzsociety.org/) builds up your k...

023

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 28/09/2026

Now it's time for us to make good on our promise to making learning more fun on the site, and to start highlighting all the accomplishments students have achieved and can yet achieve!

021

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 28/09/2026

Immense thanks to everyone who stepped forward to support #OST2! ❤️ Your generous donations help show that you value providing free high-quality educational material to the world.

121

OpenSecurityTraining2 @opensectraining.bsky.social · 25/09/2026

We have posted the YouTube playlist for Trusted Computing 1103: Advanced TPM Usage by Dimi Tomov in partnership with the TCG. Now anyone wishing to download the videos for offline viewing can find all their URLs here: www.youtube.com/playlist?lis... But for the full class see ost2.fyi/TC1103

youtube.com

Trusted Computing 1103: Advanced TPM Usage - YouTube

View the full free class at https://ost2.fyi/TC1103 ! This is the epic conclusion to the 3-class TPM series (begun in https://ost2.fyi/TC1101 (~8h) and conti...

031

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

Part 2 for devs! UAFs, race conditions, type confusion & info leaks. Real 0day exploit walkthroughs show why "looks unexploitable" are famous last words. Secure Development 1002 ost2.fyi/SecDev1002 by @xenokovah.bsky.social

ost2.fyi

Secure Development 1002: C-Family Implementation Vulnerabilities 2

020

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

And not only will you get to show off your accomplishments, but by supporting our build-out for gamification, you'll also be helping OST2 support itself, by opening up a new type of sponsorship of OST2 by security conferences themselves!

000

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

In this final video @xenokovah.bsky.social talks about how the gamification system will allow us to recognize other worthwhile achievements outside of the platform, such as speaking at security conferences!

110

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

🎮This is the last week of the OST2 gamification fundraiser! If you were waiting to be a last-minute hero, now is the time to swoop in!🕹️ www.every.org/ost2/f/lets-...

011

OpenSecurityTraining2 @opensectraining.bsky.social · 18/09/2026

The best defense is understanding the offense. Learn to spot and prevent the C/C++ implementation bugs that attackers love to exploit. Secure Development 1001 by @xenokovah.bsky.social at ost2.fyi/SecDev1001

ost2.fyi

Secure Development 1001: C-Family Implementation Vulnerabilities 1

031

OpenSecurityTraining2 @opensectraining.bsky.social · 18/09/2026

Donations don't need to be large! Many hands make light work and we'd love to see how many people support what we do!🙏 And if you've got an idea for an OST2 class, reach out at teach🌀ost2.fyi! We've got many instructors who are working on classes, and we'd love to add your class to the queue too!

011

OpenSecurityTraining2 @opensectraining.bsky.social · 18/09/2026

🎮Our gamification fundraiser ends next week but we need your support today!🕹️ www.every.org/ost2/f/lets-... In this penultimate video @xenokovah.bsky.social talks about how the gamification will allow us to recognize the ultimate volunteers, the instructors!

112

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 14/09/2026

I’ve been looking for a way to recognize #OST2 volunteers more publicly, and this will allow them to stand head and shoulders above other OST2 students and claim their rightful place of honor! Only the instructors and potentially hardcore class-completionists will shine brighter!

011

OpenSecurityTraining2 @opensectraining.bsky.social · 14/09/2026

It's the 11th hour and we really want to know how many people support what we do, so even small donations help us by showing who are our true friends & fans!🙏

000

OpenSecurityTraining2 @opensectraining.bsky.social · 14/09/2026

🎮Our gamification fundraiser ends soon and we need your support!🕹️ www.every.org/ost2/f/lets-... Here @xenokovah.bsky.social talks about how the gamification will allow us to recognize the volunteers who make classes better through beta testing, subtitle correction, graphics contributions, etc!

211

OpenSecurityTraining2 @opensectraining.bsky.social · 11/09/2026

Build the ultimate Windows kernel debugging setup! Automated VMs, ret-sync with IDA/Ghidra, and source-level kernel debugging. Your exploit lab for Cedric Halbronn's classes awaits! Debuggers 3011: Advanced WinDbg ost2.fyi/Dbg3011

ost2.fyi

Debuggers 3011: Advanced WinDbg

021

OpenSecurityTraining2 @opensectraining.bsky.social · 11/09/2026

Traditionally Open edX didn't do much with student profiles, but now we can make them a useful hub to show off your accomplishments on and off the site.  But to make this happen we need everyone who likes OST2 to show their support at www.every.org/ost2/f/lets-... 🙏

111

OpenSecurityTraining2 @opensectraining.bsky.social · 11/09/2026

🎮In the 6th video in our fundraiser, @XenoKovah talks about how student profiles would become much more useful with gamification!🕹️  🧵

111

OpenSecurityTraining2 @opensectraining.bsky.social · 07/09/2026

Want to write kernel exploits or analyze malware? You need to understand Windows internals first. Syscalls, IRQL, pools, mitigations & more. Architecture 2821: Windows Kernel Internals 2 by Cedric Halbronn ost2.fyi/Arch2821

ost2.fyi

Architecture 2821: Windows Kernel Internals 2

041

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 07/09/2026

I think inter/intra-country leaderboards will drive some fun inter/intra-country competition. E.g. here’s who’s been active on OST2 in the last 30 minutes (it’s currently too-early-to-be-up-o’clock on a holiday in the US ;)). But which country has the TOP students?!

021

OpenSecurityTraining2 @opensectraining.bsky.social · 07/09/2026

If you'd like to see this happen (or if you just think OST2 is awesome!), please support us at www.every.org/ost2/f/lets-... 🙏 (And if you have already finished lots of classes on OST2 you might see yourself on the leaderboards in the video ;))

every.org

011

OpenSecurityTraining2 @opensectraining.bsky.social · 07/09/2026

🎮In the 5th video in our gamification fundraiser, @xenokovah.bsky.social talks about how leaderboards will work!🕹️  We will have a bunch of different leaderboards: global for the entire site, per-country, per-class, per-accomplishment, and possibly more!  youtu.be/sJEFw-e1iao

youtu.be

OST2 Gamification Fundraiser: Video 5: Leaderboards

YouTube video by OpenSecurityTraining2

111

OpenSecurityTraining2 @opensectraining.bsky.social · 04/09/2026

An example of medium-grain accomplishments are things typically captured by section headers such as "How a function is called" or "Control flow" in an assembly language. And then the fine-grain accomplishments are learning the individual assembly instructions which combine to know those things.

111

OpenSecurityTraining2 @opensectraining.bsky.social · 04/09/2026

The idea with intra-class accomplishments is to surface the useful units of knowledge students are acquiring as they go through a class, not just say "you learned a bunch of stuff!" at the very end with the per-class accomplishment.

111

OpenSecurityTraining2 @opensectraining.bsky.social · 04/09/2026

🎮In the 4th video in our gamification fundraiser, @xenokovah.bsky.social talks about how we can track intra-class accomplishments!🕹️   Remember, OST2 isn't a mega-nonprofit, we really do need *your* support to keep the ball rolling! www.every.org/ost2/f/lets-... 🙏

every.org

111

OpenSecurityTraining2 @opensectraining.bsky.social · 31/08/2026

Learn Intel Simics: the full-system simulator that lets you debug *everything*, even firmware. Essential prep for the firmware attack & defense class. Debuggers 1015: Introductory Simics ost2.fyi/Dbg1015

ost2.fyi

Debuggers 1015: Introductory Simics

030

OpenSecurityTraining2 @opensectraining.bsky.social · 31/08/2026

🎮In this video in our gamification fundraiser @xenokovah.bsky.social talks about how multi-class completion accomplishments will work!🕹️ We super appreciate everyone who's donated thus far, but we need everyone who can to show their support for #OST2! www.every.org/ost2/f/lets-... 🙏

110

OpenSecurityTraining2 @opensectraining.bsky.social · 28/08/2026

🎮For the next video in our gamification fundraiser let's talk about how per-class completion accomplishments will work!🕹️ youtu.be/DnffPQQo2QQ Please support OST2 if you can! 🙏 www.every.org/ost2/f/lets-...

youtu.be

OST2 Gamification Fundraiser: Video 2: Class-Completion Accomplishments

YouTube video by OpenSecurityTraining2

021

OpenSecurityTraining2 @opensectraining.bsky.social · 26/08/2026

Note that www.every.org/ost2/f/lets-... supports crypto donations in case you've got some crypto burning a hole in your wallet ;)

every.org

011

OpenSecurityTraining2 @opensectraining.bsky.social · 23/08/2026

🎮We're running a 1-month fundraiser and need your support to gamify OST2!🕹️ www.youtube.com/watch?v=hu46... Check out the above video for our plans, and then please donate here to support this effort: www.every.org/ost2/f/lets-...   More videos with more details coming all this month!

youtube.com

OST2 Gamification Fundraiser: Video 1: Gamification Overview

YouTube video by OpenSecurityTraining2

021

OpenSecurityTraining2 @opensectraining.bsky.social · 27/07/2026

Sniff the airwaves! Learn BT recon with Blue2thprinting; identify devices, detect known vulns & crowdsource data via BTIDALPOOL. Bluetooth 2222: Bluetooth Reconnaissance with Blue2thprinting by @xenokovah.bsky.social ost2.fyi/BT2222 (~8.5 hrs)

ost2.fyi

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

031