killerbees19

coreboot @ Lenovo ThinkPad T440p

Replace original BIOS/UEFI with open-source alternative coreboot and strip down Intel ME.

This is my very first experience with SPI chips and external flashing 🥳

These are my personal notes, just in case I need them again…

Hardware

• Notebook: Lenovo ThinkPad T440p (20AW; without dGPU / only iGPU)
• Top chip: Winbond 25Q32FVSIQ (4 MiB; accessible through "big door")

killerbees19

Less Cheatsheet

less {filename}

Navigation
SPACE	forward one window
b	backward one window
d	forward half window

killerbees19

FAQ on the xz-utils backdoor

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that gives developers lossless compression. This package is commonly used for compressing release tarballs, software packages, kernel images, and initramfs images. It is very widely distributed, statistically your average Linux or macOS system will have it installed for

killerbees19

From self[at]sungpae.com Mon Nov  8 16:59:48 2021
Date: Mon, 8 Nov 2021 16:59:48 -0600
From: Sung Pae <self[at]sungpae.com>
To: security@docker.com
Subject: Permissive forwarding rule leads to unintentional exposure of
 containers to external hosts
Message-ID: <YYmr4l1isfH9VQCn@SHANGRILA>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="QR1yLfEBO/zgxYVA"

killerbees19

# It's may out of the day.
# Source: https://forum.xda-developers.com/showpost.php?p=73608658&postcount=28

# Debug Options
persist.dbg.ims_volte_enable=1 
persist.dbg.volte_avail_ovr=1 
persist.dbg.vt_avail_ovr=1
persist.dbg.wfc_avail_ovr=1

# Radio Options

killerbees19

#!/usr/bin/env python

import os
import sys
import subprocess
import tempfile
import struct
import shutil
import hashlib

killerbees19

#!/usr/bin/env bash

shopt -s nullglob
lastgroup=""
for g in `find /sys/kernel/iommu_groups/* -maxdepth 0 -type d | sort -V`; do
    for d in $g/devices/*; do
        if [ "${g##*/}" != "$lastgroup" ]; then
            echo -en "Group ${g##*/}:\t"
        else
            echo -en "\t\t"

killerbees19

#!/bin/bash
for d in $(find /sys/kernel/iommu_groups/ -type l | sort -n -k5 -t/); do 
    n=${d#*/iommu_groups/*}; n=${n%%/*}
    printf 'IOMMU Group %s ' "$n"
    lspci -nns "${d##*/}"
done;

killerbees19

1. Ohne Root
   1. Schritt 1: APK downloaden/extrahieren
   2. Schritt 2: ReVanced installieren
   3. Schritt 3: APK patchen
   4. Schritt 4: App installieren
2. Mit Root
   1. Schritt 1: APK downloaden
   2. Schritt 2: ReVanced installieren
   3. Schritt 3: App patchen
3. Fragen

killerbees19

#!/bin/bash
# v1.0.0 (2023-01-21) cs@fnx.li
HOSTS=(foo.example.org bar.example.com)
SIMPLE=(host1 host2 host3)
SUFFIX=".example.net"

for simple in "${SIMPLE[@]}"
do
	HOSTS+=("${simple}${SUFFIX}")
done