Kindle 3.1 Jailbreak

[montalex]

Originally Posted by yifanlu

Unrelated, but I'm too lazy to make a new thread. I'm a bit caught up in this Kindle craze and I while I'm interested, I want to do something else for the community. So, I finally found the files to the project I was working on a few months ago. I was trying to port Kindle 3.0 to Kindle 2/DX. I got as far as actually getting 3.0 to load on the K2 with a slow browser and a buggy PDF reader (and no TTS). However, after buying a Kindle 3, I sold my K2 and forgot about the whole thing. It seems now, a lot of people want 3.0/3.1 on their old Kindles, so I can continue this project if someone donates their broken kindle 2/dx to me. I don't need a working screen.

Boy, that would be great! I wish I had a Kindle 2 to send you!

[orlok]

Originally Posted by maverixxx

Not sure if this went right, had the old JB on 3.02 along with custom screensavers.

installed 3.1 straight over everything without bothering to uninstall. I can be a bit reckless with things.

Checked that screensavers are still working which they are so haven't bothered with the most recent JB. Is that right ?

This is fine as long as you don't want to install any other hack or remove the hacks you have installed. If and when you do, then you will need to apply the 3.1 jailbreak. Until then, the screensaver hack you already have will work just fine.

[SunLight]

Originally Posted by yifanlu

If you look in the duokan thread, I've converted the duokan installer to 3.1. If you want to use it, don't install the jailbreak yet, but install duokan first. The installer is untested though because I do not use duokan personally.

So, if I want to run Duokan on 3.1, I would have to use an unofficial installer? The thing is, I prefer the initial Duokan English release, because in pdf mode, it fills the entire screen compared to the later releases where there is a progress bar and thus doesnt fill the entire screen

Would it be possible to use the exploit to use your exploit on this initial release

http://netzbeben.de/dl/duokan/Duokan...2010_11_06.rar

It would mean a ton when I do upgrade to 3.1, thanks a billion

[test011]

yifan.lu is online right?
Strange, I can't connect to it right now.
==> solved. my bad. some dumb DNS problem.

Thanks yifanlu.

BTW, wouldn't Amazon try to closed the exploit in, say, 3.1.1? I mean, since it wouldn't take much to fix (break in my view, of course) the bug, only a couple of double quotations would do. (It's a dumb question, I know )

[dsmid]

Originally Posted by test011

BTW, wouldn't Amazon try to closed the exploit in, say, 3.1.1? I mean, since it wouldn't take much to fix (break in my view, of course) the bug, only a couple of double quotations would do. (It's a dumb question, I know )

Shh !!! Don't give them any hints

[timfrost]

Just to thank the developers. I now have 3.1 and my own screensaver! All very easy.

[Snakey]

Is there a point in uninstalling the screen saver hack on my 3.0.3 before uninstalling the old jailbreak? My plan is to update to 3.1, then install this new jailbreak, then reinstall the old screen saver hack. I'm just not sure if uninstalling and then reinstalling the SS hack is necessary or would that just be redundant? Thanks for your efforts, everyone involved.

[niimand]

problem with updating..
i had jb-ed kindle, then i installed new jb - then i tried update to 3.1 (with that hack file deleted) but no luck, so i uninstalled new jb, old jb and tried again, no luck..
i says succesful, then it restart, then on the right-down side of screen it shows stage 1 of 2 and then it fails.. dunno what to do, pls hlp

[quasiv]

I only used the jb/ss hack a week or so ago and have been following this topic with interest since I got the email about 3.1

Was getting a headache reading the thread, so I finally decided to bowl in with the "cautious" approach: uninstall old jb and ss, delete linkss folder, update with 3.1, install yifanlu's new jb and then reinstall NiLuJe's ss hack.

It's actually easier done than said and 3.1 itself is by far the longest part of the process. Looking back, uninstalling the old hacks seems redundant, but what do I know?

Anyway, mine's working fine and I'll press on with the font hack next. Many thanks to everyone who contributed to this happy outcome!

[ApK]

Originally Posted by yifanlu

It seems now, a lot of people want 3.0/3.1 on their old Kindles

You wouldn't happen to be working on a way to get the K2 browser on a K3, would you? I would like that.

Yifanlu,you mention you have at-your-own-risk packages for older Kindles.
How high would you estimate the risk to be?

Lastly, Kudos. Very impressive work on this stuff. You Real Hacker types make my job in business software development seem really dull.

ApK

[yifanlu]

Originally Posted by ApK

You wouldn't happen to be working on a way to get the K2 browser on a K3, would you? I would like that.

Yifanlu,you mention you have at-your-own-risk packages for older Kindles.
How high would you estimate the risk to be?

Lastly, Kudos. Very impressive work on this stuff. You Real Hacker types make my job in business software development seem really dull.

ApK

I'm working on getting the K3 browser (and framework) to K2, not the other way around. That would be redundant.

The package for older Kindles are untested. In theory they should work, but I don't have a Kindle to test with. However, if you need to jailbreak a kindle 2/dx, use one of the old jailbreaks as they've been tested.

I'm not really a "real hacker". I'm just a programmer with some linux knowledge.

[ApK]

Originally Posted by yifanlu

I'm working on getting the K3 browser (and framework) to K2, not the other way around. That would be redundant.

Not redundant for me. It would give me a simpler, cleaner browser for the stuff I do most, and it would let me open images and follow links in GMail.
But I know, Sorry.

Thanks!
ApK

[otichy]

Sorry if this is a bit out of topic, but seeing this is the most active thread about fw 3.1

Apparently, the latest firmware does something to openssl libraries or directly to the wpa_supplicant so that the connection to an enterprise wpa no longer works (at least not through the old wpa_supplicant hack).

The log looks like:

110224:163502 Starting AP scan (SSID: eduroam)
110224:163504 Wireless event: SCAN_RESULTS: Success
110224:163504 Trying to associate with xx:xx:xx:xx:45:20
(SSID='eduroam' freq=2442 MHz signal=-85) reassociate=0 oldSSID=''
110224:163505 Associated with xx:xx:xx:xx:45:20
110224:163505 CTRL-EVENT-EAP-STARTED EAP authentication started
110224:163505 CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
110224:163505 OpenSSL: tls_connection_handshake - Failed to read
possible Application Data error:00000000:lib(0):func(0):reason(0)
110224:163505 EAP-MSCHAPV2: Authentication succeeded
110224:163505 EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed
110224:163505 CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
110224:163505 WPA: Key negotiation completed with xx:xx:xx:xx:45:20
[PTK=CCMP GTK=TKIP]
110224:163505 CTRL-EVENT-CONNECTED - Connection to xx:xx:xx:xx:45:20
completed (auth) id=8 ssidLen=7 ssid=eduroam

The OpenSSL error seems to be the culprit - the connection succeeds, but disconnects almost immediately. I'll try adding "fast_reauth=0" parameter to wpa_supplicant as recommended on some linux forum, but meanwhile - could somebody verify that the libssl.so or the wpa_supplicant itself are of a different versions in 3.1?

I seem to have libssl: OpenSSL 0.9.8j and wpa_supplicant says:

wpa_supplicant v0.5.10
Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi> and contributors
Wi-Fi Protected Setup Reference Application,
Version 'sony_r5.7', modified by Sony.
Copyright (c) 2007, Sony Corporation and contributers
Copyright (c) 2007-2009, Atheros Communications

I'd be very much obliged for any insights!

[yifanlu]

Originally Posted by otichy

Sorry if this is a bit out of topic, but seeing this is the most active thread about fw 3.1

Apparently, the latest firmware does something to openssl libraries or directly to the wpa_supplicant so that the connection to an enterprise wpa no longer works (at least not through the old wpa_supplicant hack).

The log looks like:

110224:163502 Starting AP scan (SSID: eduroam)
110224:163504 Wireless event: SCAN_RESULTS: Success
110224:163504 Trying to associate with xx:xx:xx:xx:45:20
(SSID='eduroam' freq=2442 MHz signal=-85) reassociate=0 oldSSID=''
110224:163505 Associated with xx:xx:xx:xx:45:20
110224:163505 CTRL-EVENT-EAP-STARTED EAP authentication started
110224:163505 CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
110224:163505 OpenSSL: tls_connection_handshake - Failed to read
possible Application Data error:00000000:lib(0):func(0):reason(0)
110224:163505 EAP-MSCHAPV2: Authentication succeeded
110224:163505 EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed
110224:163505 CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
110224:163505 WPA: Key negotiation completed with xx:xx:xx:xx:45:20
[PTK=CCMP GTK=TKIP]
110224:163505 CTRL-EVENT-CONNECTED - Connection to xx:xx:xx:xx:45:20
completed (auth) id=8 ssidLen=7 ssid=eduroam

The OpenSSL error seems to be the culprit - the connection succeeds, but disconnects almost immediately. I'll try adding "fast_reauth=0" parameter to wpa_supplicant as recommended on some linux forum, but meanwhile - could somebody verify that the libssl.so or the wpa_supplicant itself are of a different versions in 3.1?

I seem to have libssl: OpenSSL 0.9.8j and wpa_supplicant says:

wpa_supplicant v0.5.10
Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi> and contributors
Wi-Fi Protected Setup Reference Application,
Version 'sony_r5.7', modified by Sony.
Copyright (c) 2007, Sony Corporation and contributers
Copyright (c) 2007-2009, Atheros Communications

I'd be very much obliged for any insights!

libgnutls-openssl.so.26.14.11 was modified
wpa_supplicant was modified
wpa_cli was modified

[FF2]

Originally Posted by yifanlu

I'm working on getting the K3 browser (and framework) to K2, not the other way around. That would be redundant.

The package for older Kindles are untested. In theory they should work, but I don't have a Kindle to test with. However, if you need to jailbreak a kindle 2/dx, use one of the old jailbreaks as they've been tested.

I'm not really a "real hacker". I'm just a programmer with some linux knowledge.

As APk indicated - it might not be redundant - apparently the k2's browswer allowed one to open local files on the kindle using the

file:\\ format whereas that appears to have been eliminated in k3's browser.

As for not being a "real hacker" - you could have fooled me!

But thanks for your efforts.