![]() |
#1 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
Fake Registration
Hi,
I have a pw2 with fw 5.4.2.1. I applied the following mods: 1) Jailbreak 2) Usbnet 3) prevent automatic updates by placing update.bin.tmp.partial folder on user partition 4) Fake registration /var/local/java/prefs/reginfo 5) Block Amazon's ip for fake registration modify /etc/sysconfig/iptables iptables -I OUTPUT -m iprange --dst-range 23.0.0.0-23.15.255.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 50.16.0.0-56.19.255.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 72.21.192.0-72.21.223.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 107.20.0.0-107.23.255.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 184.72.0-184.75.255.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 204.246.160.0-204.246.191.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 205.251.192.0-205.251.255.255 -j DROP iptables -I OUTPUT -m iprange --dst-range 207.171.160.0-207.171.191.255 -j DROP 6) Change store button to call browser instead: modifiy /usr/share/webkit-1.0/pillow/javascripts/search_bar.js 7) Enable native drawing app: add /usr/bin/draw.sh modify /usr/share/webkit-1.0/pillow/debug_cmds.json My question is: Does mod #5 also prevent automatic updates and Big Brother, doesn't it ?? so I can remove mod #3... I got the instructions from the fake registration thread which is for fw 5.2.0 but it's working. I don't want to install KUAL for the moment I only want these few mods Thanks Last edited by alberiv; 04-26-2014 at 11:58 AM. |
![]() |
![]() |
![]() |
#2 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
|
|
![]() |
![]() |
Advert | |
|
![]() |
#3 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
thank you very much knc1, I'm glad I asked before doing something wrong.
And what about BB ? Am I safe with those rules ? Last edited by alberiv; 04-26-2014 at 12:38 PM. Reason: grammar error |
![]() |
![]() |
![]() |
#4 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
If that list comes from the KUAL Firewall/BBB filter script - that is the most recent listing that I have. |
|
![]() |
![]() |
![]() |
#5 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
ok thanks so it's only a matter of blocking the right address ranges
|
![]() |
![]() |
Advert | |
|
![]() |
#6 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
for the sake of knowledge I updated the ip list, removed the update.bin.tmp.partial folder, reset iptables counters and rebooted, because I want to get rid of version 5.4.2.1 anyway.
After keeping wireless on for 30 mins I got this: PHP Code:
There are no update files in user partition, registration is ok. I'm located in Italy. Let's see what happens in the next few days. Last edited by alberiv; 04-26-2014 at 09:31 PM. |
![]() |
![]() |
![]() |
#7 |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
PHP Code:
|
![]() |
![]() |
![]() |
#8 | |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
Quote:
Maybe there are other addresses going through the firewall, but it seems the ones pw get updates from are among those blocked. What I would like to know ultimately is if I can block registration, updates and bbb in one shot by simply adding some firewall rules. Last edited by alberiv; 04-26-2014 at 10:14 PM. |
|
![]() |
![]() |
![]() |
#9 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
Longer answer: The firmware for the Kindles is missing many of the iptable modules you would want to use. For instance my using the "drop" target when the "reject" target would be much more appropriate (no time-out waits done by sender). The "reject" target module is one that wasn't included with the Kindle builds. ![]() Duh. . . . . Thanks to Lab126, again. I did build (nearly complete) sets of iptable modules for the common most Kindle kernels (at the time I built them). There is a set of them attached to one of my threads somewhere here. And more information about the process in a public repo. (My Internet connection is semi-dead at the moment, I will add links once I can check them.) |
|
![]() |
![]() |
![]() |
#10 | |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
Quote:
Using only netstat I found out a strange thing: the phd and todo processes contacted a local (italian) third party server ![]() 212.52.97.15:53 phd 217.171.163.134:443 todo I can't explain this Last edited by alberiv; 04-27-2014 at 12:08 PM. |
|
![]() |
![]() |
![]() |
#11 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
Amazon must not trust us all that much. ![]() whois -H ip will give you the CIDR to block for your list. The add-in modules are part of the Kual-System project. https://bitbucket.org/twobob/kual-system/overview The /extensions sub-tree is of the pre-built binaries (as they would appear on the Kindle in this plan). The /tools sub-tree has supplemental files - .config files, scripts to set the environment variables for the cross-compiler that was used, etc. There should be a thread or two around here on the "KUAL-System" project also. **Nothing** done in the project for the PW2 kernel/firmware. It is one of those (many) public projects that will continue when someone gets the time and interest to continue it. ![]() twobob has approximately 0.00% hobby time now; I have just barely enough to answer a few questions on this forum. |
|
![]() |
![]() |
![]() |
#12 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
before going through the 5.4.0 downgrade procedure I updated to 5.4.3.1 to give it a try...first impressions surely better than 5.4.2.1, I'll keep it for now.
Jailbreak survived. After that I was able to log (and block) this bastard through my router: after a reboot it keeps contacting the following 2 ip addresses (forever) which are third party unknown addresses (maybe amazon has some mirrors local servers housed at those providers) PHP Code:
I set the wireless off after that and kept the router drop rules, new firmware never had a chance to go out on the internet yet. Last edited by alberiv; 04-27-2014 at 03:06 PM. |
![]() |
![]() |
![]() |
#13 |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Those are DNS requests.
Perhaps modify resolv.conf (or re-direct in router) those to your local DNS server. |
![]() |
![]() |
![]() |
#14 |
Junior Member
![]() Posts: 8
Karma: 10
Join Date: Apr 2014
Device: Kindle PW2
|
jesus christ I must be crazy those are my ISP's dns
![]() I didn't realize because dhcp usually gives router's address as dns and relay queries.. Well, after letting through those 2 dns addresses things get even stranger: I left the wireless on for 30 mins and rebooted a few times, the only traffic generated was towards 1 of the 2 addresses and goes on and on. Usually registration is checked on reboot (sorry I forgot about firewall rules on kindle ![]() so the BBB list is complete and I guess it should prevent registration, updates and BB Sorry to keep this thread long you can delete some messages Last edited by alberiv; 04-27-2014 at 09:15 PM. |
![]() |
![]() |