View Single Post
Old 11-17-2009, 10:01 AM   #229
ekaser
Opinion Artiste
ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.ekaser has a propeller beanie that spins backward.
 
ekaser's Avatar
 
Posts: 301
Karma: 61464
Join Date: Mar 2009
Location: Albany, OR
Device: Nexus 5, Nexus 7, Kindle Touch, Kindle Fire
Quote:
Originally Posted by llreader View Post
Could the segments between the { and : be an encrypted digit of the PID?
Very possibly. I forgot to point out in last night's post that, if you subtract the '{' and ':' characters, which appear to always be at the same points in the file, then that leaves exactly 64 other characters (26 upper, 26 lower, 0 to 9, hyphen and underscore), which would lead one to believe that the file is an ASCII encoding of some sort, where each character represents 6 bits (0-63) of the "value".

Also, a week ago when Kindle for PC was first released and I'd first installed it, I did a directory listing of my entire hard disk (redirecting it to a file), then sorted that file by date and time, to see what folders and/or files had been created or modified with the same time-stamp as the Kindle for PC installation. I found that a file was created in a sub-folder of:
C:\Users\(username)\AppData\Roaming\Microsoft\Prot ect
(The 'Protect' folder is a hidden folder, so you have to do a /ah directory search to find it, or CD directly to it, knowing the path.) Another "made up name" folder existed in that, within which was a half-dozen files, all with made-up names (apparently 'random' digits and letters), all of the same length (the names) and the same file length (the data) of 388 bytes. Upon searching the web for info about this, I found this page that talks about the Protect folder and DPAPI (Data Protection Applications Programming Interface):
http://technet.microsoft.com/en-us/l...8WS.10%29.aspx
Anyway, the most recent of those 388 byte files was created with the exact same time/date stamp as the Kindle for PC installation, and the Preferred file in that same folder had also been modified with the same time/date stamp.

So, I suspect that Kindle for PC is using the Windows Data Protection API to encode and scramble the Kindle PID and store it in the kindle.info file. But I don't have any experience with the DPAPI layer, and know even less , so figured I would leave it to other more cryptographically-minded folks to puzzle it out.

Last edited by ekaser; 11-17-2009 at 10:03 AM.
ekaser is offline   Reply With Quote