Sometimes we review books on this list, but I spent last week, for seven days in a row, taking the R2-RingZer0-Amy-Burnett Browser Hacking https://ringzer0.training/advanced-browser-exploitation.html class. But before I do, I want to point out that 36 Minutes into this video ( https://vimeo.com/442583799) I ask Marco Ivaldi about what it's like to switch from management back into the technical field. "It's hard, but it's very rewarding."
Here's my one top tip for making remote classes easier as a student: TURN YOUR FREAKING CAMERA ON. This forces you to pay attention to the trainer. Also: trainers do better when they can see if you are picking up the material.
I like the remote format better in many ways than the in-person format. I like seeing everyone else's questions in the Discord. I like being able to take a big break during the day to get food and then come back to the exercises later and get real-time answers to my questions by Amy typing things up on her cellular phone at the local Troy bar. I like continuing to have lungs complete with working alveoli.
Also, the Browser Hacking class is effective. Everyone in the class (I was quite nervous since I didn't even know Javascript and last wrote an exploit in 1992AD) can write Chrome and Webkit exploits now. This is a useful feature. Obviously the first half of the class is "This is the giant optimized data structure they invented to allow people to check Gmail super fast" and the second half is "this is what those bug-classes look like in source code, and how you build your exploit primitives and plug them together".
I guess my summary is this: Great class. It is well worth the money just to feel the dragon inside you wake up and swallow something whole again.
-dave (List Note: I have turned off bounce processing, since it was misfiring and kicking people off the list for no reason.)
dailydave@lists.aitelfoundation.org