Should I upgrade to 5.7.2

TheFattie · 02-09-2016, 09:05 AM

I have the jailbreak, so should I update?

EDIT: I updated. Everything is fine, except the Experimental Browser has a new limit to resource allocation, and more sadly, Collection Manager doesn't work

oblox · 02-09-2016, 09:10 AM

Yes. Its already been shown the jailbreak survives (just some bridge file to run afterwards)

I really like the changes in 5.7.2.

knc1 · 02-09-2016, 09:28 AM

Quote:

Originally Posted by TheFattie

I have the jailbreak, so should I update?

Your choice, just don't use the 5.6.5 web browser on the Internet.

TheFattie · 02-09-2016, 09:30 AM

Quote:

Originally Posted by knc1

Your choice, just don't use the 5.6.5 web browser on the Internet.

Wait, why? I'm using it now(to type this), and it works fine.

HarryT · 02-09-2016, 09:38 AM

Quote:

Originally Posted by TheFattie

Wait, why? I'm using it now(to type this), and it works fine.

Given the fact that your Kindle is already jailbroken, there's no reason not to use the browser.

knc1 · 02-09-2016, 09:48 AM

Quote:

Originally Posted by HarryT

Given the fact that your Kindle is already jailbroken, there's no reason not to use the browser.

Yes, there is.

Now that a complete, working, worked example of how to remotely run arbitrary code on 5.6.5 as root is public -
It is entirely possible that someone will put that to malicious purpose.

I.E: It is a general thing, leveraging a problem in the webkit/javascrpt build used, not specific to jailbreaking.

We have alternate browsers posted, one of which has already been reported as working (skipstone).

HarryT · 02-09-2016, 09:53 AM

Quote:

Originally Posted by knc1

Yes, there is.

Now that a complete, working, worked example of how to remotely run arbitrary code on 5.6.5 as root is public -
It is entirely possible that someone will put that to malicious purpose.

If one browses "safe" websites such as MR, the risk is virtually non-existent, however.

eschwartz · 02-09-2016, 10:46 AM

HarryT,

The reason to not use the browser certainly has nothing to do with whether or not you are already jailbroken.

And saying "Oh, it's OK to use the browser, but only if you know ahead of time you can trust the website in question to not hack your Kindle", is very different from your original statement.
It's also rather limiting, since you don't really know which websites are safe, which ones may get hacked, and in which situations you may fall prey to a man-in-the-middle attack (especially on public WiFi).

...

Using an insecure browser which contains a full-time root exploit is just plain stupid. If Internet Explorer had a publicly known vulnerability that could compromise the administrator account with simple javascript, would you nevertheless continue using Internet Explorer on your PC?
Especially given that Firefox and Chrome exist?

HarryT · 02-09-2016, 10:57 AM

Quote:

Originally Posted by eschwartz

Using an insecure browser which contains a full-time root exploit is just plain stupid.

We must agree to differ. The OP now knows the situation and can make up his own mind. Personally I think the risk of anyone deliberately targeting Kindle owners is minuscule. You may disagree and you're perfectly entitled to do so.

Cinisajoy · 02-09-2016, 06:19 PM

For those of us that are not quite as tech savvy as some of you I have a question.
Please answer in plain English not geek.
Are you saying if I jailbreak my kindle then I should not use the experimental browser because someone else could potentially use my kindle for their own personal reasons?
This is taking into consideration, I do not know if a site is completely safe.
Are you also saying that I could either upgrade to the new firmware version or install a different browser?
Thanks in advance.

knc1 · 02-09-2016, 06:21 PM

Correct on all counts.

eschwartz · 02-09-2016, 07:14 PM

Quote:

Originally Posted by Cinisajoy

For those of us that are not quite as tech savvy as some of you I have a question.
Please answer in plain English not geek.
Are you saying if I jailbreak my kindle then I should not use the experimental browser because someone else could potentially use my kindle for their own personal reasons?
This is taking into consideration, I do not know if a site is completely safe.
Are you also saying that I could either upgrade to the new firmware version or install a different browser?
Thanks in advance.

Wrong.

Whether you jailbreak your Kindle or not is irrelevant. In fact, the jailbreak is a perfect example of YOU using your Kindle for your own personal reasons (as opposed to Amazon's).

Either upgrade the firmware or don't use the default browser. Or someone might use your Kindle for their own personal reasons.

Cinisajoy · 02-09-2016, 07:43 PM

Quote:

Originally Posted by eschwartz

Wrong.

Whether you jailbreak your Kindle or not is irrelevant. In fact, the jailbreak is a perfect example of YOU using your Kindle for your own personal reasons (as opposed to Amazon's).

Either upgrade the firmware or don't use the default browser. Or someone might use your Kindle for their own personal reasons.

So jailbreak or no jailbreak,
Update the firmware if you plan to use the browser.

02-09-2016, 09:05 AM	#1
TheFattie Connoisseur Posts: 51 Karma: 10 Join Date: Feb 2016 Device: Kindle 7th gen	I have the jailbreak, so should I update? EDIT: I updated. Everything is fine, except the Experimental Browser has a new limit to resource allocation, and more sadly, Collection Manager doesn't work Last edited by TheFattie; 02-10-2016 at 07:10 AM.

02-09-2016, 10:46 AM	#8
eschwartz Ex-Helpdesk Junkie Posts: 19,421 Karma: 85400180 Join Date: Nov 2012 Location: The Beaten Path, USA, Roundworld, This Side of Infinity Device: Kindle Touch fw5.3.7 (Wifi only)	HarryT, The reason to not use the browser certainly has nothing to do with whether or not you are already jailbroken. And saying "Oh, it's OK to use the browser, but only if you know ahead of time you can trust the website in question to not hack your Kindle", is very different from your original statement. It's also rather limiting, since you don't really know which websites are safe, which ones may get hacked, and in which situations you may fall prey to a man-in-the-middle attack (especially on public WiFi). ... Using an insecure browser which contains a full-time root exploit is just plain stupid. If Internet Explorer had a publicly known vulnerability that could compromise the administrator account with simple javascript, would you nevertheless continue using Internet Explorer on your PC? Especially given that Firefox and Chrome exist? Last edited by eschwartz; 02-09-2016 at 10:49 AM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
And Again: New minor Upgrade upgrade for Muse and Odyssey	Tosch	Bookeen	13	04-22-2015 08:23 AM
Why can’t I complete the Kobo Touch firmware upgrade or Desktop upgrade?	DarrellAtKobo	Kobo Reader	31	08-31-2012 10:45 PM
No matter how many times I upgrade to 1.4 it still asks me to upgrade	djorkboy	Kobo Reader	6	09-06-2010 12:36 AM
Don't upgrade your iPhone 3GS to iOS4, DO upgrade your iPad	Bookbee	Apple Devices	19	07-30-2010 10:10 AM
HanLin V3 can use bebook upgrade package to upgrade it?	geely	HanLin eBook	3	11-21-2008 09:24 AM

02-09-2016, 09:10 AM	#2
oblox Zealot Posts: 135 Karma: 1007000 Join Date: Sep 2013 Device: Kindle Paperwhite (7th Gen)	Yes. Its already been shown the jailbreak survives (just some bridge file to run afterwards) I really like the changes in 5.7.2.

02-09-2016, 06:19 PM	#10
Cinisajoy Just a Yellow Smiley. Posts: 19,161 Karma: 83862859 Join Date: Jul 2015 Location: Texas Device: K4, K5, fire, kobo, galaxy	For those of us that are not quite as tech savvy as some of you I have a question. Please answer in plain English not geek. Are you saying if I jailbreak my kindle then I should not use the experimental browser because someone else could potentially use my kindle for their own personal reasons? This is taking into consideration, I do not know if a site is completely safe. Are you also saying that I could either upgrade to the new firmware version or install a different browser? Thanks in advance.

02-09-2016, 06:21 PM	#11
knc1 Going Viral Posts: 17,212 Karma: 18210809 Join Date: Feb 2012 Location: Central Texas Device: No K1, PW2, KV, KOA	Correct on all counts.

Advert

Advert