iLiad How I failed to catch the update process

arivero · 07-27-2006, 04:15 AM

Finally I tryed to control the update to 2.5 and I failed (ie I am fully updated) but it could be interesting to describe the process.

First there was a preupdate. It closes the network and tells you to shutdown the machine. If instead you enable networking again, you can see that the update installed a flashing process in rc0, ie in the shutdown process. This flash seems to install some improvements in the launch system and kernel modules, and it is numbered as 2.4.10 or similar. I copied it to the USB stick and left it update, as I was sure the main filesystem was not modifyed.

Then the real update was to begin. It proceeds by dowloading os.gz and fs.gz from iRex, storing it in a partition /mnt/protected/images/ and rebooting the machine so the update is done when starting again. Reading the starting script i imagined the trick: just rename os.gz and fs.gz and they will be not installed nor deleted. Then I should be able to copy/modify

fs.gz and reenable the update flags (according the strip) to follow the update.

But where to install the renaming instruction? Well, I did it in the wrong place:

, I tryed to modify the start script. It is unclear if such modifications survive reboot, and even if they did, it could be that "mv" is not defined in the /bin of the start system, I did not checked it. In any case, the process started, download from iRex was done (I could contemplate it via a sshd connection, the network being enabled) and it rebooted... and installed everything!!!

Now I think the good alternative was to follow exactly the same way that they did: to install a script in the rc0 section and rename the files at this opportunity, when it is doing the shutdown to reboot, just making sure the filesystem was still mounted.

While I was looking the download, I got a partial copy of fs.gz, and it is a compressed ext2, so really it was possible to mount and modify it if I had done it rightly. Damn!

Antartica · 07-27-2006, 04:50 AM

If things are going this way, I vote for begin investigating the OpenEmbedded build process and create an OpenIliad distribution.

I buyed the iLiad for hacking and reading books, but if it's not hackable, there is no fun ;-)

The mayor problem right now is figuring a (safe) way to flash new versions of the firmware.

And that we don't know (yet) the proper method to use /dev/fb0 to draw small regions in the screen (it's used for the scribble function...), and the interface to the wacom tablet. For now we can use the irex kernel, but knowing the interfaces to the iliad specific functions would be very very handy...

arivero · 07-27-2006, 04:54 AM

Quote:

Originally Posted by Antartica

And that we don't know (yet) the proper method to use /dev/fb0 to draw small regions in the screen (it's used for the scribble function...). For now we can use the irex kernel, but knowing the interfaces to the iliad specific functions would be very very handy...

Yes if should, and it fact it seems the main contribution of iReX to eink development.

DHer · 07-27-2006, 05:01 AM

i think this /dev/fb0 could provide for some quite interesting ways of book reading.

like autoscrolling where the new page is continously rendered from the top down so you can read from top down, as usual, and continue reading from top without page-switching break because the first half of the next page is alreay rendered.

Antartica · 07-27-2006, 05:20 AM

Quote:

Originally Posted by DHer

i think this /dev/fb0 could provide for some quite interesting ways of book reading.

like autoscrolling where the new page is continously rendered from the top down so you can read from top down, as usual, and continue reading from top without page-switching break because the first half of the next page is alreay rendered.

Yup. That could be a funny way to read.

Perhaps is the time to read the documentation on standard way to access /dev/fb0, and try to do a small program to test it.

Then: there was a way to execute programs in 2.5 or not? (as I upgraded mine...)

deadite66 · 07-30-2006, 11:04 AM

well i had a try at catching the ids traffic with a mitm attack via lan/wlan with ettercap.
tried my router and setting my laptop at an open AP but i've given up, ettercap didn't seem to do anything on the router and the iliad wouldn't connect to the laptop

but i'm not really sure what i'm doing i've just tried a few examples i found on the net.

arivero · 07-30-2006, 11:08 AM

Quote:

Originally Posted by arivero

It is unclear if such modifications survive reboot, and even if they did, it could be that "mv" is not defined in the /bin of the start system, I did not checked it.

I checked contents, and it was the second: mv was not defined in the /bin/... Damn!

Paethon · 08-08-2006, 09:25 AM

Quote:

Originally Posted by DHer

like autoscrolling where the new page is continously rendered from the top down so you can read from top down, as usual, and continue reading from top without page-switching break because the first half of the next page is alreay rendered.

That is actually a very good idea. But I would do it a little different. When you click the flipbar once the upper half of the screen will be updated, when you click it once more the lower half of the screen will be updated.
This way you could also read without interruption.

TadW · 08-08-2006, 09:37 AM

Quote:

Originally Posted by deadite66

well i had a try at catching the ids traffic with a mitm attack via lan/wlan with ettercap.
tried my router and setting my laptop at an open AP but i've given up, ettercap didn't seem to do anything on the router and the iliad wouldn't connect to the laptop

Good idea, I brought it up earlier but it didn't seem that too many people were interested. Let me help you with setting up the ARP spoofing:

Let's assume:

your router has the IP 192.168.0.1 and acts as the gateway
your iLiad has the IP 192.168.0.10
your laptop has the IP 192.168.0.11

Then use the following Ettercap commandline to log all traffic between your router and the iLiad:

Code:

ettercap -T -L /tmp/logfile.log -M arp:remote /192.168.0.1/ /192.168.0.10/

If iDS uses a secured connection (over SSL), you'll have to do some extra work to import the certificate into Ettercap.

deadite66 · 08-08-2006, 05:28 PM

i'm sure it tries to use https, i fell over at trying to figure out ssl cert spoofing and gave up.

TadW · 08-09-2006, 05:05 AM

deadite66, check again my thread on sniffing the iLiad, I just added a step by step guide how sniff the SSL connection.

07-27-2006, 04:15 AM	#1
arivero Guru Posts: 607 Karma: 2157 Join Date: Oct 2005 Device: NCR3125, Nokia 770,...	How I failed to catch the update process Finally I tryed to control the update to 2.5 and I failed (ie I am fully updated) but it could be interesting to describe the process. First there was a preupdate. It closes the network and tells you to shutdown the machine. If instead you enable networking again, you can see that the update installed a flashing process in rc0, ie in the shutdown process. This flash seems to install some improvements in the launch system and kernel modules, and it is numbered as 2.4.10 or similar. I copied it to the USB stick and left it update, as I was sure the main filesystem was not modifyed. Then the real update was to begin. It proceeds by dowloading os.gz and fs.gz from iRex, storing it in a partition /mnt/protected/images/ and rebooting the machine so the update is done when starting again. Reading the starting script i imagined the trick: just rename os.gz and fs.gz and they will be not installed nor deleted. Then I should be able to copy/modify fs.gz and reenable the update flags (according the strip) to follow the update. But where to install the renaming instruction? Well, I did it in the wrong place: , I tryed to modify the start script. It is unclear if such modifications survive reboot, and even if they did, it could be that "mv" is not defined in the /bin of the start system, I did not checked it. In any case, the process started, download from iRex was done (I could contemplate it via a sshd connection, the network being enabled) and it rebooted... and installed everything!!! Now I think the good alternative was to follow exactly the same way that they did: to install a script in the rc0 section and rename the files at this opportunity, when it is doing the shutdown to reboot, just making sure the filesystem was still mounted. While I was looking the download, I got a partial copy of fs.gz, and it is a compressed ext2, so really it was possible to mount and modify it if I had done it rightly. Damn!

07-27-2006, 04:50 AM	#2
Antartica Evangelist Posts: 423 Karma: 1517132 Join Date: Jun 2006 Location: Madrid, Spain Device: quaderno, remarkable2, yotaphone2, prs950, iliad, onhandpc, newton	If things are going this way, I vote for begin investigating the OpenEmbedded build process and create an OpenIliad distribution. I buyed the iLiad for hacking and reading books, but if it's not hackable, there is no fun ;-) The mayor problem right now is figuring a (safe) way to flash new versions of the firmware. And that we don't know (yet) the proper method to use /dev/fb0 to draw small regions in the screen (it's used for the scribble function...), and the interface to the wacom tablet. For now we can use the irex kernel, but knowing the interfaces to the iliad specific functions would be very very handy... Last edited by Antartica; 07-27-2006 at 04:55 AM. Reason: ref. to the wacom tablet

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
PRS-505 Another Failed Firmware update PRS-505	himitsu	Sony Reader	8	03-21-2010 10:32 AM
linux distribution... when will they catch on?	Justice Strike	Reading and Management	5	09-15-2009 12:32 PM
Firmware update failed - unit Dead	tonyj1	Sony Reader	13	02-23-2009 07:49 PM
New Baen CD - Claws that Catch	vsalvaggio	Deals and Resources (No Self-Promotion or Affiliate Links)	39	11-24-2008 01:21 PM
Failed 0.4.84 update	AprilHare	Calibre	3	09-19-2008 11:20 PM

07-27-2006, 05:01 AM	#4
DHer Addict Posts: 261 Karma: 156 Join Date: Jul 2006 Device: iliad	i think this /dev/fb0 could provide for some quite interesting ways of book reading. like autoscrolling where the new page is continously rendered from the top down so you can read from top down, as usual, and continue reading from top without page-switching break because the first half of the next page is alreay rendered.

07-30-2006, 11:04 AM	#6
deadite66 Groupie Posts: 197 Karma: 16 Join Date: Apr 2006 Device: irex iliad, uk Kindle gen3	well i had a try at catching the ids traffic with a mitm attack via lan/wlan with ettercap. tried my router and setting my laptop at an open AP but i've given up, ettercap didn't seem to do anything on the router and the iliad wouldn't connect to the laptop but i'm not really sure what i'm doing i've just tried a few examples i found on the net.

08-08-2006, 05:28 PM	#10
deadite66 Groupie Posts: 197 Karma: 16 Join Date: Apr 2006 Device: irex iliad, uk Kindle gen3	i'm sure it tries to use https, i fell over at trying to figure out ssl cert spoofing and gave up.

08-09-2006, 05:05 AM	#11
TadW Uebermensch Posts: 2,583 Karma: 1094606 Join Date: Jul 2003 Location: Italy Device: Kindle	deadite66, check again my thread on sniffing the iLiad, I just added a step by step guide how sniff the SSL connection.

Advert

Advert