Official curated learning paths
The rooms that go with the maths labs, from arrows on a grid to how a language model picks its next word. Play a warm-up before its lab, and the rest alongside it.
The rooms that go with the computing labs, in the order the labs run: circuits, then logic gates and a CPU, then programs, then version control. Play a warm-up before its lab, and the rest alongside it.
Learning sequences created by the community

Learn what NPUs are and gain basic knowledge about them.

What Words as arrows builds on: why a computer needs words as numbers, when two arrows point the same way, subtracting one arrow from another, and analogies in plain words. About ten minutes.

A look at what can go wrong when several transactions touch a database at the same time, and the isolation levels SQL databases use to control it. For anyone who already knows what a database table is and wants to understand what happens under concurrent load.

Modern web uygulamalarını tehdit eden gerçek açıklar. Her teknoloji kimliğini nasıl ele verir, açık tam olarak neyi mümkün kılar ve nasıl kapatılır. Express, Next.js, Django ve Apache. Küçük bayraklar saklı.

Web güvenliğine yeni başlayanlar için kısa bir sözlük: CVE ve CVSS nedir, istek–yanıt nasıl çalışır, RCE ile kimlik doğrulama/yetkilendirme ne demek, ve sırada hangi lab ve odalar var. Yaklaşık on dakika.

What Chance machines builds on: a chance worked out by counting, why all the chances add up to 100%, and when to multiply chances and when to add them. About ten minutes.

What Machine learning 2 builds on: the logic gates again, what makes a neuron fire, what a feature is, and why a perfect score on practice questions can mislead. About ten minutes.

Big-O notation is how programmers describe how an algorithm's speed changes as the amount of data grows. This room covers the common complexity classes and what they mean for real programs, for anyone just starting to learn algorithms.

The ideas the Web security 2 lab assumes: what a signed token is, how a database query is built from parts, why a server fetching a URL for you is different from you fetching it, and the theme under all of it — the server must not trust data just because it handled it. About ten minutes.

The ideas the Web security lab assumes: how a request and response work, what a URL’s parts are, what a cookie is, and the one that makes everything after it possible — the browser fills in the request, so the request is yours to change. About ten minutes.

What actually happens between typing a web address and reaching a server: the chain of DNS servers involved, and how caching keeps it fast. For anyone curious about the plumbing behind every web visit.

What Machine learning 1 builds on: what a labelled example is, how a score decides spam or not, what "training" actually changes, and why you keep some examples back. About ten minutes.

The handful of ideas Linear algebra 2 builds on: multiplying matching parts, what a right angle means for two arrows, Pythagoras, and why "similar" can mean "pointing the same way". About ten minutes.

Starts from nothing: directions on a map, arrows you can add and stretch, and rules that move every point at once — which is all a matrix is. About ten minutes.

How a scheduler picks which process gets the CPU, and what goes wrong when it picks badly. For anyone curious what actually happens between pressing a key and seeing it appear on screen.


The ideas the Digital Forensics lab assumes: what a file signature is, what base64 does, how metadata hides in plain sight, and what a log line actually says. Ten minutes.

The maths behind the Crypto lab, without the heavy parts: bytes and hex, XOR, remainders, and why multiplying two primes is easy but splitting the answer is hard. Ten minutes.

Phishing is the most common way attackers get into accounts and networks, and it works by exploiting trust and urgency rather than technical flaws. This room covers how to recognize phishing attempts across email, text and impersonated accounts, and what to do instead of clicking.

Tarayıcınız ile bir web sitesi arasındaki bağlantının nasıl korunduğunu, TLS sertifikalarının gerçekte neyi doğruladığını ve HSTS gibi mekanizmaların hangi saldırılara karşı koruma sağladığını öğrenin.

A tour of how hash tables give near-constant-time lookup, insertion and deletion, and the collisions and load factor that decide whether that promise holds. Written for anyone who has used a dictionary or map in code and wants to know what is happening underneath.

The basics of building strong passwords and adding a second layer of protection with multi-factor authentication. Written for anyone who wants safer logins without needing a technical background.
The handful of ideas that make the Electronics bench lab make sense: what voltage, current and resistance actually are, why an LED needs a resistor, and how Ohm's law ties them together. Ten minutes.
Polling vs interrupts, the IRQ vector, PC/LR/SP, and the buses that move data around a CPU — the theory half of 1DT301's Pico labs, the part that is easy to skip past while your LEDs are blinking.
The machine code trips up more students than the assembly itself. Hex/binary conversion, MOVZ vs MOVK, immediate-value limits, and translating real bit patterns to assembly and back — practice built for 1DT301's labs and exam.