Looks like the course got a huge rewrite this year, especially the addition of Ghidra. Very interesting to see that, usually I just recommend RPISEC's course[0] but the Ghidra inclusion is huge. Great stuff.

[0] https://github.com/RPISEC/Malware

Great Content! but the lectures OMG...

The Lecturer is brutal. the "Umm" rate in his talks is inexcusable for a professional public speaker, which is what I classify any "teacher" as. Makes the lectures impossible for me to listen to.

I would rather listen to someone who knows what they're talking about over someone else who talks sweet.

Umm, I don't think so and those aren't mutually exclusive. Sit in a silent class trying to listen to someone who has no tonal changes in their voice for 1 to 3 straight hours multiple times a week and your interest will die hard and fast.

Can confirm. The reason I'm a self-taught programmer today is that my 101 professor combined a near-perfect monotone with the ability to repeat himself, word for word, if you asked for clarification.

I feel there is a serious demand for transcribed audio lectures that is hyperlinked to the right entities.

I.e you can hover over a word and it links you to the right lecture notes or the correct position in a video or something.

I really prefer reading and doing rather than solely listening.

For podcasts, udemy, YouTube, udacity I listen at 2x the speed with closed captioning (if available).

It messes with your brain. Now I can’t listen to people for >5 mins at normal human speed.

I'm pretty sure Khan Academy does this actually. Really good experience.

I've had this debate with my academic advisor at CMU.

I'd take a trained speaker–even an actor who doesn't actually know the material he/she's describing–as a primary lecturer any day, as long as I get access to someone who knows what they're talking about in a recitation.

This is a great question. It would be interesting to run an A/B test on an online course. The treatment gets an actor reading pre-prepared notes, and the control gets a lecturer who actually knows the material.

An A/B test might be interesting, but we have scores from any conference that takes feedback seriously. Commercial conferences will sometimes be ranking speakers on individual tracks and you'll get a pep talk about expectations before and a review after.

I was thrown into one of those conferences with a colleague once and it was pretty intense. I sat in on sessions and had access to the scores and feedback later and people would have very specific things they didn't like about the speaking. Having listened you can sort of agree with the attendee, but access to formal training, or a good mentor can be tough. Former employer offered an hour with a speaking coach at one point and that made a big impact on my issues, but people don't give similar feedback in the local dev speaking circuits.

Have they ever considered running a few coaching sessions for staff? I suspect the answer is no because they don't believe they have a problem, but that's my bias from university in UK.

I am not a good speaker, but one time my employer offered an hour long session with a coach before a conference. I presented my material (something they strongly emphasised) and he was able to give me advice on getting rid of the "umms" and sound a bit more engaging. It made a big difference to what people have to listen to and gave me a confidence boost.

This professor is actually pretty good compared to the other computer science professors at the University of Cincinnati.

This seems like a pretty meaningless criticism.

If you can't listen to it - maybe that says more about you than him?

> This seems like a pretty meaningless criticism

How is that a meaningless criticism?

For lecturers the ability to present in an engaging manner is at least as important as understanding the subject.

Imagine how much more efficiently you could absorb new information if you did not put arbitrary barriers on the "engagement" level of the source?

The reality is that you are just being mentally lazy for not accepting new information because it isn't in the most palatable format.

It is juvenile.

That’d be great, unfortunately real people aren’t like that.

Some of this stuff is like black magic to me! Absolutely brilliant to see this in the public domain.

Looks like strictly static analysis? I am personally very interested in using dynamic analysis to guide static analysis efforts. When I do run into malware I need to know its harmful effects and persistence mechanisms (!) immediately so I can do IR. That's a different purpose than research or countermeasure development.

Typo in the first paragraph: undergrarduate