# FakeSMC ## Identification [[FakeSMC|FakeSMC]] emulates Apple’s SMC interface for non-Apple hardware. `Kext2Ffs` suggests packaging kernel-extension-related material into UEFI FFS modules. A [[Preboot Execution Environment|PXE]] driver adds network boot. This is a powerful but risky convergence: local filesystems, hardware identity emulation, and network boot all become firmware-resident. ## Notebook evidence - [[Scanned_20260730-1719#PDF page 53 — Ozmosis build components, PXE, and Kext-to-FFS conversion|PDF page 53: Ozmosis build components, PXE, and Kext-to-FFS conversion]] — The intended firmware is not merely “Mac compatible.” It is a universal pre-OS service layer capable of local filesystem access, Mac identity support, shell access, and network boot. ## Relationships and overlays The source places this note in a shared evidence cluster with [[Preboot Execution Environment|Preboot Execution Environment]]. Within the larger collection, this evidence extends [[Vendor-Agnostic Recovery|vendor-agnostic recovery]] and [[Continuity Architecture|continuity architecture]] by showing how software, hardware, identity, and pre-OS control depend on recoverable interfaces. ## Evidentiary status and open leads Threat-model every firmware-resident network driver. Expanding pre-boot functionality also expands the attack surface before OS defenses load. ## Source - [[Scanned_20260730-1719|Scanned_20260730-1719]]