5.3 Update for Paperwhite -- will it interfere with the jailbreak? - Page 2

NiLuJe · 11-07-2012, 05:05 PM

... And the data.stgz exploit is plugged.

knc1 · 11-07-2012, 05:16 PM

Quote:

Originally Posted by NiLuJe

... And the data.stgz exploit is plugged.

And they broke my source file audit automation.
A minor inconvenience but another indication they must be reading this site.
Perhaps it is time to block Amazon/lab126 in the site's .htaccess file?

Naw, that would be playing the game their way.

NiLuJe · 11-07-2012, 05:19 PM

... I think the /var/local/custom_screensavers folder (and the jar that uses it /opt/amazon/ebook/lib/CustomScreensavers.jar) are there just to make me hate them, don't you think? ^^

knc1 · 11-07-2012, 05:26 PM

Rename it to a.1 - Amazon style directory names.

geekmaster · 11-07-2012, 05:30 PM

Is it time yet to start using my "secret" jailbreak method?

Just drop two files on USB, then boot to diags with MfgTool or imx_usb_loader. Then select diags menu item to trigger the jailbreak...

I gave it to a few of the devs here. If agreed (let me know), I will release my "5.3.0 Jailbreak". Unfortunately, because ENABLE_DIAGS is no longer useful, it is a "tethered jailbreak" (requires a USB cable to boot to diags)...

EDIT: I was relying on the USB networking hack to go to diags. What now?

EDIT: The DMCA exclusion for jailbreaking will no longer be allowed for tablets and ereaders purchased starting January 2013. So if we are going to release a new jailbreak, we should do it before then. Strangely, the DMCA exlusion will remain in effect allowing cellphones (such as iphone) but not tablets (such as ipod touch) to be jailbroken. Details here:
https://s3.amazonaws.com/public-insp...2012-26308.pdf

NiLuJe · 11-07-2012, 05:33 PM

@geekmaster: Won't help, the (main) rootfs is wiped during the 5.3.0 update.

(Unless my memory's shaky and you can use it on a vanilla device, without ENABLE_DIAGS support?)

EDIT: On a somewhat related note, one convoluted way to update to 5.3.0 for devs would be to boot to diags, flash the rootfs & kernel from the unpacked update, and manually reapply the jailbreak/usbnet on main. The entry point is plugged, but AFAICT, if we manage to put the stuff back in, most of the simple things should still work. If you mess up, you potentially only get one shot, though, ;D.

dos1 · 11-07-2012, 05:34 PM

Quote:

Originally Posted by geekmaster

Is it time yet to start using my "secret" jailbreak method?

Just drop two files on USB, then boot to diags with MfgTool or imx_usb_loader. Then select diags menu item to trigger the jailbreak...

I gave it to a few of the devs here. If agreed (let me know), I will release my "5.3.0 Jailbreak". Unfortunately, because ENABLE_DIAGS is no longer useful, it is a "tethered jailbreak" (requires a USB cable to boot to diags)...

Tethered jailbreak is good enough for me. Actually, any kind is as long as it works

Can't wait to test your method on my device.

geekmaster · 11-07-2012, 05:41 PM

Quote:

Originally Posted by NiLuJe

@geekmaster: Won't help, the (main) rootfs is wiped during the 5.3.0 update.

(Unless my memory's shaky and you can use it on a vanilla device, without ENABLE_DIAGS support?)

EDIT: Well, one convoluted way to update to 5.3.0 for devs would be to boot to diags, flash the rootfs & kernel from the unpacked update, and manually reapply the jailbreak/usbnet on main. The entry point is plugged, but AFAICT, if we manage to put the stuff back in, most of the simple things should still work. If you mess up, you potentially only get one shot, though, ;D.

Damn! I keep FORGETTING that we do not have USB Downloader mode (so no MfgTool or imx_usb_loader).

I was relying on USB networking to us the idme command to change to diags.

geekmaster · 11-07-2012, 05:43 PM

Does anybody know how to boot to diags on a paperwhite that does NOT already have USB networking installed? My jailbreak only works in diags.

Now I am afraid to install the 5.3.0 update, until I know how to revert to 5.2.0.

I suppose we will have to use serial port debricking on 5.3.0 until we discover a better way...

knc1 · 11-07-2012, 05:47 PM

Might be time for this:
https://www.mobileread.com/forums/sho...86&postcount=3

eureka · 11-07-2012, 05:55 PM

Quote:

Originally Posted by NiLuJe

... I think the /var/local/custom_screensavers folder (and the jar that uses it /opt/amazon/ebook/lib/CustomScreensavers.jar) are there just to make me hate them, don't you think? ^^

Maybe.

But it also looks like there is official capability for custom screensavers with possible automatic downloading (from Amazon?) or removing by ToDo commands (i.e. by Amazon's "push notifications").

Or, at least, prototype of it.

EDIT: I mean I've looked into a new code a bit and it's a valid conclusion. (/var/local/custom_screensavers is aslo known to Blanket module for displaying screensavers.)

dos1 · 11-07-2012, 07:14 PM

So... there's no known way to downgrade I guess? :/

knc1 · 11-07-2012, 07:17 PM

Quote:

Originally Posted by dos1

So... there's no known way to downgrade I guess? :/

Give us a few hours at least before giving up.

dos1 · 11-07-2012, 07:39 PM

Well, I won't throw away my device, I will always be open to new propositions

I also have unpacked 5.3.0 firmware and I'm looking for anything I could use to at least perform some manual fiddling with files on rootfs, but without any luck yet. The only idea that came into my mind was to use custom fonts handling from /mnt/us/fonts to exploit some libfreetype vulnerability (it seemed to have problems with segfaults on some custom fonts in older firmwares), but that would be real, assembly-level hacking and I lack proper knowledge to do that.

But I'm still trying.

PS. Anyone knows how Amazon's ToDo service works and what it can do? I wonder if some kind of self-man-in-the-middle attack between Amazon and our Kindles could help with forcing Kindle to do something. For instance, if only we could put some file in /etc/upstart, then we could run any script from /mnt/us on boot.

knc1 · 11-07-2012, 07:54 PM

Number one requirement of the first step:
It has to be something that is not required to be signed.

If uboot over the serial port can be accessed, anything is possible.

11-07-2012, 05:19 PM	#18
NiLuJe BLAM! Posts: 13,477 Karma: 26012492 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	... I think the /var/local/custom_screensavers folder (and the jar that uses it /opt/amazon/ebook/lib/CustomScreensavers.jar) are there just to make me hate them, don't you think? ^^ Last edited by NiLuJe; 11-07-2012 at 05:22 PM.

11-07-2012, 05:30 PM	#20
geekmaster Carpe diem, c'est la vie. Posts: 6,433 Karma: 10773668 Join Date: Nov 2011 Location: Multiverse 6627A Device: K1 to PW3	Is it time yet to start using my "secret" jailbreak method? Just drop two files on USB, then boot to diags with MfgTool or imx_usb_loader. Then select diags menu item to trigger the jailbreak... I gave it to a few of the devs here. If agreed (let me know), I will release my "5.3.0 Jailbreak". Unfortunately, because ENABLE_DIAGS is no longer useful, it is a "tethered jailbreak" (requires a USB cable to boot to diags)... EDIT: I was relying on the USB networking hack to go to diags. What now? EDIT: The DMCA exclusion for jailbreaking will no longer be allowed for tablets and ereaders purchased starting January 2013. So if we are going to release a new jailbreak, we should do it before then. Strangely, the DMCA exlusion will remain in effect allowing cellphones (such as iphone) but not tablets (such as ipod touch) to be jailbroken. Details here: https://s3.amazonaws.com/public-insp...2012-26308.pdf Last edited by geekmaster; 11-07-2012 at 05:42 PM.

11-07-2012, 05:33 PM	#21
NiLuJe BLAM! Posts: 13,477 Karma: 26012492 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	@geekmaster: Won't help, the (main) rootfs is wiped during the 5.3.0 update. (Unless my memory's shaky and you can use it on a vanilla device, without ENABLE_DIAGS support?) EDIT: On a somewhat related note, one convoluted way to update to 5.3.0 for devs would be to boot to diags, flash the rootfs & kernel from the unpacked update, and manually reapply the jailbreak/usbnet on main. The entry point is plugged, but AFAICT, if we manage to put the stuff back in, most of the simple things should still work. If you mess up, you potentially only get one shot, though, ;D. Last edited by NiLuJe; 11-07-2012 at 05:40 PM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Kindle Touch/PW1/PW2 5.0.x - 5.4.4.2 JailBreak. Plus FW 5.x USBNetwork.	NiLuJe	Kindle Developer's Corner	2844	11-20-2023 07:04 PM
K5(Touch/Paperwhite). Jailbreak 5.1.x;5.2.0	cristbo	Amazon Kindle	2	11-22-2012 02:34 AM
Paperwhite Shipping Update?	nobylspoon	Amazon Kindle	454	10-26-2012 09:56 AM
K2 Update Help Needed -> Can't get to 2.5.8 after old Jailbreak	clambert	Amazon Kindle	4	07-16-2012 12:53 AM
Jailbreak/Screensaver Hack Won't Update	RGSG99	Kindle Developer's Corner	4	02-13-2011 07:42 PM

11-07-2012, 05:05 PM	#16
NiLuJe BLAM! Posts: 13,477 Karma: 26012492 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	... And the data.stgz exploit is plugged.

11-07-2012, 05:26 PM	#19
knc1 Going Viral Posts: 17,212 Karma: 18210809 Join Date: Feb 2012 Location: Central Texas Device: No K1, PW2, KV, KOA	Rename it to a.1 - Amazon style directory names.

11-07-2012, 05:43 PM	#24
geekmaster Carpe diem, c'est la vie. Posts: 6,433 Karma: 10773668 Join Date: Nov 2011 Location: Multiverse 6627A Device: K1 to PW3	Does anybody know how to boot to diags on a paperwhite that does NOT already have USB networking installed? My jailbreak only works in diags. Now I am afraid to install the 5.3.0 update, until I know how to revert to 5.2.0. I suppose we will have to use serial port debricking on 5.3.0 until we discover a better way...

11-07-2012, 05:47 PM	#25
knc1 Going Viral Posts: 17,212 Karma: 18210809 Join Date: Feb 2012 Location: Central Texas Device: No K1, PW2, KV, KOA	Might be time for this: https://www.mobileread.com/forums/sho...86&postcount=3

11-07-2012, 07:14 PM	#27
dos1 20% cooler. Posts: 93 Karma: 364674 Join Date: Oct 2012 Location: Poznań, Poland Device: Kindle Paperwhite 1	So... there's no known way to downgrade I guess? :/

11-07-2012, 07:39 PM	#29
dos1 20% cooler. Posts: 93 Karma: 364674 Join Date: Oct 2012 Location: Poznań, Poland Device: Kindle Paperwhite 1	Well, I won't throw away my device, I will always be open to new propositions I also have unpacked 5.3.0 firmware and I'm looking for anything I could use to at least perform some manual fiddling with files on rootfs, but without any luck yet. The only idea that came into my mind was to use custom fonts handling from /mnt/us/fonts to exploit some libfreetype vulnerability (it seemed to have problems with segfaults on some custom fonts in older firmwares), but that would be real, assembly-level hacking and I lack proper knowledge to do that. But I'm still trying. PS. Anyone knows how Amazon's ToDo service works and what it can do? I wonder if some kind of self-man-in-the-middle attack between Amazon and our Kindles could help with forcing Kindle to do something. For instance, if only we could put some file in /etc/upstart, then we could run any script from /mnt/us on boot.

11-07-2012, 07:54 PM	#30
knc1 Going Viral Posts: 17,212 Karma: 18210809 Join Date: Feb 2012 Location: Central Texas Device: No K1, PW2, KV, KOA	Number one requirement of the first step: It has to be something that is not required to be signed. If uboot over the serial port can be accessed, anything is possible.