Notice from Amazon

[nasser]

Hello All!

Haven't been active on this forum for more than an year.
However, today, I got a mail from Amazon:

Important update required for your Kindle e-reader
Dear customer,

Your Kindle Paperwhite (5th Generation) requires an important software update to continue downloading e-books and using Kindle services.

This important update applies to Kindle e-readers released prior to 2014. Visit our Help page for a complete list of impacted devices: https://www.amazon.in/ku2016?ref_=deveng_eicert

Follow these steps to receive the update:

1. Plug your Kindle in to charge during the update.
2. Connect to Wi-Fi.
3. From the Home screen of your Kindle, select Menu or tap the Menu icon. Then choose Sync and Check for Items.
4. Leave your Kindle connected to both power and Wi-Fi overnight, or until the update is complete.

The software update will download and install automatically, even if your device is asleep. Your device may restart multiple times during the update process. You will get a final confirmation letter on your device when the update is complete, which can be found in your Kindle Library.

If you do not update the device software by March 22, 2016, you will no longer be able to access Kindle services or get the update via connecting to a wireless network. To resume access, you will need to manually update the software on your Kindle. Please visit our Help page for more details on how to update automatically: www.amazon.in/ku2016?ref_=deveng_eicert

!-----

Frequently Asked Questions

What if I no longer have or use my Kindle e-reader?
If you no longer have or use your Kindle e-reader, deregister it from your account today. After logging into your Amazon account, click on the Your Devices tab and select the Kindle e-reader you want to deregister. Click Deregister.

How do I connect to Wi-Fi?
You can find out more about connecting to Wi-Fi on our Help page (www.amazon.in/ku2016).

How can I get help updating my Kindle e-reader?
For more information, visit our Help page (www.amazon.in/ku2016).

!-----

Thank you for reading with Kindle, and be sure to connect your device to Wi-Fi regularly to receive all future software updates.

Sincerely,

The Amazon Kindle Team

What does this mean?
I'm still on 5.3.6 with a PW1.
I've done the jailbreak, installed KUAL and stuff.

[Josieb1]

It means there must be a later version of the software that you need to let download via WiFi to your PW1. If you don't update your Kindle won't be able to access the Kindle store.

I checked, the latest version is 5.6.1.1.


http://www.amazon.co.uk/gp/help/cust...deId=201064850

[knc1]

Be certain to install the most recent PW-1 jailbreak before updating.
Since there is no jailbreak for PW-1, version 5.6.1.1.
The jailbreak will survive the update.

[Josieb1]

Sorry I completely missed that you had jail broken your kindle.

[nasser]

I meant whether this is an anti hacking measure from Amazon.

[knc1]

Originally Posted by nasser

I meant whether this is an anti hacking measure from Amazon.

Nope -
It is revenue stream protection by Amazon.
I.E: Impulse purchase at their store directly from the device.
Without the update, you can still purchase from their store (with time to think) on another device and side-load your purchases.

Although in the case of the PW-1 - - it will prevent you from jailbreaking it once it upgrades to 5.6.1.1
So jailbreak it now, before upgrading.
Even if you have no use for the jailbreak now because you will not be adding it in the future.

Older devices than the PW-1 can still be jailbroken.
Newer devices than the PW-1 can be jailbroken while running firmware 5.6.5

There is no firmware 5.6.5 for the PW-1
There is no software jailbreak for 5.6.1.1 on the PW-1 (or the PW-3, but that one will run 5.6.5).

The DX(F) devices are a special case - still to be fully determined.
DX(F) == The Frankenstein version 3 firmware installed on the version 2 devices.

[eschwartz]

Amazon wants to make sure all devices are updated by the time they upgrade their storefront to modern crypto.

Otherwise as knc1 said your Kindle won't be able to verify it has a secure connection to Amazon and the Kindle Store will stop working.
That is bad because it means a degraded convenience to users and it is in Amazon's best interest to make it easier for you to spend money in their store.

[knc1]

The Amazon Kindle Bookstore is already running TLS1.2:

  0.385818  192.168.0.2 -> 54.239.26.128 TCP 1514 [TCP segment of a reassembled PDU]
  0.385837  192.168.0.2 -> 54.239.26.128 TLSv1.2 1084 Application Data

and

  1.239265  192.168.0.1 -> 192.168.0.2  DNS 197 Standard query response CNAME dk9ps7goqoeef.cloudfront.net A 54.230.123.173 A 54.230.123.231 A 54.230.123.223 A 54.230.123.149
  1.241844 54.230.123.223 -> 192.168.0.2  TLSv1.2 1514 Server Hello
  1.241854  192.168.0.2 -> 54.230.123.223 TCP 66 59615 > https [ACK] Seq=206 Ack=1449 Win=17504 Len=0 TSval=47226446 TSecr=664413038
  1.243790 54.230.123.223 -> 192.168.0.2  TLSv1.2 1514 Certificate
  1.243798  192.168.0.2 -> 54.230.123.223 TCP 66 59615 > https [ACK] Seq=206 Ack=2897 Win=20400 Len=0 TSval=47226446 TSecr=664413038
  1.245757 54.230.123.223 -> 192.168.0.2  TCP 1514 [TCP segment of a reassembled PDU]
  1.245763  192.168.0.2 -> 54.230.123.223 TCP 66 59615 > https [ACK] Seq=206 Ack=4345 Win=23296 Len=0 TSval=47226447 TSecr=664413038
  1.246405 54.230.123.223 -> 192.168.0.2  TLSv1.2 479 Certificate Status, Server Key Exchange, Server Hello Done
  1.246411  192.168.0.2 -> 54.230.123.223 TCP 66 59615 > https [ACK] Seq=206 Ack=4758 Win=26192 Len=0 TSval=47226447 TSecr=664413038
  1.254459  192.168.0.2 -> 54.230.123.223 TLSv1.2 192 Client Key Exchange, Change Cipher Spec, Hello Request, Hello Request

The thing is, it will (now) still respond to TLS1.0 (A.K.A: SSLv3) and it is the SSLv3 protocol that is broken.

My guess - they are going to stop accepting the TLS1/SSLv3 combination protocol.

And if you check:
https://www.mobileread.com/forums/sho...15&postcount=1
You will see that the current BBB filter is not blocking:

NetRange:       54.224.0.0 - 54.239.255.255
CIDR:           54.224.0.0/12
NetName:        AMAZON-2011L
NetHandle:      NET-54-224-0-0-1
Parent:         NET54 (NET-54-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS16509
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2012-03-01
Updated:        2012-04-02
Ref:            https://whois.arin.net/rest/net/NET-54-224-0-0-1

(A lot of the page objects have also moved to cloudfront.net - another change not accounted for.)

= = = =

If any user of the old (and still the present) BBB filter is concerned about that access to the store -
The ruleset is in USB storage (see the directions) and you can add the CIDR above to the rule list in the obvious places.

Meanwhile, back on the home front -
busy, busy, busy

[Nephiel]

I just received the same e-mail from Amazon.
I have a jailbroken Kindle Keyboard (K3) with KUAL, a terminal, and some custom screensavers. Does that get lost after the update?

[eschwartz]

No, it should be fine.

[Cinisajoy]

Originally Posted by eschwartz

No, it should be fine.

He may have to reinstall the screen savers but the jailbreak will be fine.

[eschwartz]

Originally Posted by Cinisajoy

He may have to reinstall the screen savers but the jailbreak will be fine.

Or he may not.

The K3 is one of the older devices, from before Amazon started shipping full system images.
IOW, nothing you change is reverted by the update. Any actual clashes with Amazon's changes merely result in a failed update.

[Nephiel]

Good to know, thanks. I'll attempt the update and report back. There's always Kubrick if something goes awry...

[Nephiel]

K3 updated to v. 3.4.2 using WiFi.
The screensavers, KUAL and terminal are still there and working.