Hi there,
I didn't read the 18 pages, but do we know the OTA url calls?
I suppose there's an url to check if there's an update, and another url to download the OTA itself (like this:
https://s3.amazonaws.com/G7G_Firmwar...v2_5.7.2.1.bin).
We could block these urls with iptables rules.
This way everything will work (send ebooks via emails, Wikipedia, prime books...) but no OTA.
I'll try to setup a proxy tomorrow, get off my airplane mode (I even went a step further and deleted my wifi config!) and look at the calls made.