|
If an attacker wants to do something malicious, you would first have to download an MP3 from them. The XSS only works with the artist, title, or album field, all of which are easily seen from a modern operating system. If you're really worried, all you have to do is check those three fields before loading any downloaded music unto your Kindle. If you see <script> in any of the fields, don't use it.
Now of course, that's if the attacker is using the same exploit. There's no telling what other holes amazon left in the device.
|