Hacks SSH tunnel on Kindle

[stvs]

N00b q: I'm a few hours into my new Kindle, and thanks to this forum, have successfully have it JB'd, run ~usbNetwork, ssh root:fiona@192.168.2.2, mntroot rw, passwd and changed my root password, and can log in as root over WiFi. Thanks you! -- that was very easy!

Now I'd like to apply this capability and run an ssh tunnel from my Kindle to my server for secure http/https, and set my Kindle browser's proxy settings to localhost:8080.

How do you execute the ssh tunnel command

ssh -p 22 -L 8080:localhost:3128 -l user hostname.com -f -C -q -N
Then how do you browse securely through the proxy tunnel established at localhost:8080?

Are there any options yet for setting up a VPN tunnel to a VPN server?

[stvs]

*bump*

I don't have a solution for changing the proxy settings on a K3 yet, but some relevant links and more questions.

Does the K3 proxy all wifi traffic through the amazon proxy at fints-g7g.amazon.com? This page says about the K2,

One slightly terrifying thing I noted in the NetFront configuration file on the Kindle 2 - All traffic is proxied through fints-g7g.amazon.com, Amazon's Kindle web proxy. HTTP and HTTPS alike are proxied on port 80. Amazon can see what you're downloading, even if you "use SSL." (As could anybody who could sniff your EVDO traffic, but I'm told that's something that's only easy if the attacker is running MovieOS). I know there are solid technical reasons for this decision on Amazon's part. It doesn't exactly make me comfortable.

Is this actually true for K3 wifi browsing?!! I'm having trouble with a wifi tcpdump, so I haven't been able to verify this.

Confusingly, I also cannot figure out how or where the K3 sets its proxy settings or even User Agent. The K3 file "/opt/amazon/ebook/config/browser_wv.conf" sets up the UA "Mozilla/4.0 (compatible; Linux 2.6.22) NetFront/3.4 Kindle/2.2", but when I browse to whatsmyuseragent.com, it says "Mozilla/5.0 (Linux; U; en-US) AppleWebKit/528.5+ (KHTML, like Gecko, Safari 528.5+) Version/4.0 Kindle 3.0 (screen 600x800; rotate)". And grepping for ''Mozilla/5.0" on the entire K3's file system turns up nothing.

Peter Hannay has some great tips in his talk "Hooray for Reading: Hacking the Kindle", but how to set up a non-Amazon proxy still isn't clear.

Is Amazon proxying all Kindle wifi traffic, including HTTPS? If true, this is very disturbing and highly insecure. Does Amazon have a stated privacy policy about such traffic? Does Amazon state if they log or track web traffic from Kindles?

Does anyone have any ideas how to set up a Kindle browser to use a secure wifi proxy?

[Tiersten]

Originally Posted by stvs

Does the K3 proxy all wifi traffic through the amazon proxy at fints-g7g.amazon.com?

No. Only 3G.

Originally Posted by stvs

The K3 file "/opt/amazon/ebook/config/browser_wv.conf" sets up the UA "Mozilla/4.0 (compatible; Linux 2.6.22) NetFront/3.4 Kindle/2.2",

That is the old Kindle browser on the older Kindles. No idea where it is for a K3/v3 firmware.

Originally Posted by stvs

Is Amazon proxying all Kindle wifi traffic, including HTTPS?

No. WiFi is direct.

[3bayjunkie]

Question: can you set the Kindle 3g up like a 3g phone where the phone can share internet with other WiFi devices IE: a computer.

[Tiersten]

Originally Posted by 3bayjunkie

Question: can you set the Kindle 3g up like a 3g phone where the phone can share internet with other WiFi devices IE: a computer.

No. You can't make the Kindle into a hotspot.

Even if you could, everything has to go through the web proxy servers that stvs mentioned. Your Kindle ID which is specific to that Kindle unit is sent as part of the proxy authentication and if Amazon notice you then it is possible that you'll end up with a $189 paperweight all to get "free" 3G. Its against the terms of use for the Kindle and the associated Whispernet service.

[travfar]

Originally Posted by Tiersten

No. You can't make the Kindle into a hotspot.

Even if you could, everything has to go through the web proxy servers that stvs mentioned. Your Kindle ID which is specific to that Kindle unit is sent as part of the proxy authentication and if Amazon notice you then it is possible that you'll end up with a $189 paperweight all to get "free" 3G. Its against the terms of use for the Kindle and the associated Whispernet service.

Sorry to bump an ancient thread, but this is wrong. You can use the Kindle as a "hotspot" for your computer. You can tether a Kindle like you would a cell phone. I found this out when tryng to figure out if the Kindle's web browser was private. It's not by the way.

[kranu]

[Edit: Nvm]

[yifanlu]

Originally Posted by travfar

Sorry to bump an ancient thread, but this is wrong. You can use the Kindle as a "hotspot" for your computer. You can tether a Kindle like you would a cell phone. I found this out when tryng to figure out if the Kindle's web browser was private. It's not by the way.

Are you talking about tethering or reverse tethering? Aka: who broadcasts the signal? What do you mean by "private" web browser? If you mean that all data passes through the fints proxy, then no, nothing's private.

[kranu]

Originally Posted by yifanlu

Are you talking about tethering or reverse tethering? Aka: who broadcasts the signal? What do you mean by "private" web browser? If you mean that all data passes through the fints proxy, then no, nothing's private.

I believe he's saying that you connect the Kindle to the computer, and use the Kindle 3G to access the web from computer.

[travfar]

Originally Posted by yifanlu

Are you talking about tethering or reverse tethering? Aka: who broadcasts the signal? What do you mean by "private" web browser? If you mean that all data passes through the fints proxy, then no, nothing's private.

Tethering. Using the Kindle as your "modem" to get internet access. It's been done on the K2 and people have adapted that to the K3. As far as Amazon is concerned, it's all coming from your Kindle. But the huge increase in traffic and multiple simultaneous connections would be a giveaway.