lf-

option domain-name "boot.lfcode.ca";
option domain-name-servers 8.8.8.8, 8.8.4.4;

subnet 10.254.0.0 netmask 255.255.255.0 {
    option routers 10.254.0.1;
    option subnet-mask 255.255.255.0;
    range 10.254.0.10 10.254.0.254;

    # pxe
    filename "pxeboot";

lf-

Boot process:
1. EFI runs unencrypted EFI application
2. EFI application gets password, decrypts and runs initrd
3. initrd gets root password, decrypts root

Attack:
Stage 1:
1. EFI runs attacker-controlled EFI application
2. EFI application pretends to be original EFI application, gets password
3. EFI application decrypts initrd, doesn't run it, exfiltrates it along with password

lf-

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyd8ONbBImUNCesdvUM6re8KEXCBqC7hnqzvBwBgWdM7Y9U+pXn3YtEw5zmhAlawNNr8R0WyArCyUuhFxWmUyQfCzVNMnxpchgC8DdZ+sr1DV0mEaAl7tTSp2LzvZfXnfq8qdeIsLxCMJjQr7vM5CqyrQHWqdPT5x3J1wnPAGG2zabGLJSA/B/r9aOhFElf1KlFUZWP4PVFrOfqo4Byb/rRIb9eDBUtf1tbU8kzaXcPjMQEKj53VuQ+pCgQhAQjxmFiWNG8zoKuO9AeNXJZCmihuDmkBCrPGoM9D2+iAYT/GEzxC3n0K2xrVCFIEzCUQXyrs0RQ9Q2Tq75mAAxzXxj lf@archfiend

lf-

# $Id: PKGBUILD 108637 2014-03-30 21:43:19Z bluewind $
# Maintainer: Florian Pritz <[email protected]>
# Contributor: josephgbr <[email protected]>

_pkgbasename=gmp
pkgname=lib32-$_pkgbasename
pkgver=6.0.0
pkgrel=1
pkgdesc="A free library for arbitrary precision arithmetic (32-bit)"
arch=('x86_64')

lf-

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <sys/ioctl.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <linux/wireless.h>
#include <errno.h>

int main(int argc, const char* argv[]) {