|
In my opinion, the Scribe goes too far, and I fear the rest of the Kindles will follow.
Amazon attempts to require the Scribe be registered, and an updated firmware downloaded, before allowing the Scribe to be used without a network connection.
This makes registration attacks fair-game just to use the purchased hardware.
Changing the device serial number is impractical - one can watch what goes on during registration by adding their own root certificates in two places. If one does that, they would observe what is sent by the Kindle, and unless you have Amazon signing keys..
|