this is seriously cool, indeed.
Is the whole file system accessible when connecting via USB or only the books folder?
If it isn't, could you please try to invoke a "save file to" dialogue?
After that, maybe you can test in which folders you can write. If you can save files to every folder, we have the jackpot
We just drop a line in init.d and get a shell on a port.