Kindle will receives at least four years security updates

xxyzz · 08-27-2021, 08:09 AM

https://www.amazon.com/gp/help/custo...3LDHSB5YM9BYF7

I found this document by reading this article: https://goodereader.com/blog/kindle/...-on-the-kindle

binaryhermit · 08-27-2021, 10:03 AM

To be pedantically accurate, that's at least 4 years from when it's last sold on amazon.com.

Quoth · 08-27-2021, 10:21 AM

And compared with a mac, windows, Linux, tablet or phone it's meaningless. Especially if you don't use the browser.

binaryhermit · 08-27-2021, 10:22 AM

Outside of someone somehow compromising a kindle via, say, a hypothetical bug in the wireless driver, and using that as a foothold to attack more useful targets on your network

tomsem · 08-27-2021, 10:59 AM

Quote:

Originally Posted by Quoth

And compared with a mac, windows, Linux, tablet or phone it's meaningless. Especially if you don't use the browser.

There was a security hole that only involved downloading infected document, potentially allowing someone to get your Kindle data.

https://www.techrepublic.com/article...ol-the-device/

This was patched with the 5.13.5 update.

binaryhermit · 08-27-2021, 11:10 AM

Also, depending on what services a Kindle runs (stuff like a sshd, a httpd, etc) accessible by other devices on the same wifi or possible wwan connection, it might be possible to compromise one of those and gain remote code execution from a device on the same network then use that to compromise more valuable targets.

But in practice this is likely to be highly theoretical rather than something that actually happens, especially if you don't connect to public wifi networks.

binaryhermit · 08-28-2021, 02:06 PM

And that goodereader article is the wrong take.

It's that security updates are guaranteed at least 4 years from when it was last sold new, then on a best effort basis, not "4 years, then there might be feature updates but no new security updates"

But since when does goodereader actually get it right?

08-27-2021, 08:09 AM	#1
xxyzz Evangelist Posts: 442 Karma: 2666666 Join Date: Nov 2020 Device: none	Kindle will receives at least four years security updates https://www.amazon.com/gp/help/custo...3LDHSB5YM9BYF7 I found this document by reading this article: https://goodereader.com/blog/kindle/...-on-the-kindle

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
ADE Security Update & Security of Old Versions	bookmarked	General Discussions	9	03-09-2016 09:40 PM
Man Receives Tumor instead of Kindle	kennyc	News	16	01-14-2016 08:46 AM
Kindle Security	jbcohen	Amazon Kindle	5	05-21-2012 12:11 PM
Security of the Kindle Store	Marc Mertens	Amazon Kindle	16	06-19-2011 04:43 PM
Kindle 2 Security	Jasoon Carey	Amazon Kindle	18	08-01-2009 11:35 AM

08-27-2021, 10:03 AM	#2
binaryhermit Grand Sorcerer Posts: 5,732 Karma: 20469902 Join Date: Oct 2014 Location: Lockport, IL Device: Kindle PW4, Kindle Paperwhite Signature Edition	To be pedantically accurate, that's at least 4 years from when it's last sold on amazon.com.

08-27-2021, 10:21 AM	#3
Quoth Still reading Posts: 14,106 Karma: 105211945 Join Date: Jun 2017 Location: Ireland Device: All 4 Kinds: epub eink, Kindle, android eink, NxtPaper	And compared with a mac, windows, Linux, tablet or phone it's meaningless. Especially if you don't use the browser.

08-27-2021, 10:22 AM	#4
binaryhermit Grand Sorcerer Posts: 5,732 Karma: 20469902 Join Date: Oct 2014 Location: Lockport, IL Device: Kindle PW4, Kindle Paperwhite Signature Edition	Outside of someone somehow compromising a kindle via, say, a hypothetical bug in the wireless driver, and using that as a foothold to attack more useful targets on your network

08-27-2021, 11:10 AM	#6
binaryhermit Grand Sorcerer Posts: 5,732 Karma: 20469902 Join Date: Oct 2014 Location: Lockport, IL Device: Kindle PW4, Kindle Paperwhite Signature Edition	Also, depending on what services a Kindle runs (stuff like a sshd, a httpd, etc) accessible by other devices on the same wifi or possible wwan connection, it might be possible to compromise one of those and gain remote code execution from a device on the same network then use that to compromise more valuable targets. But in practice this is likely to be highly theoretical rather than something that actually happens, especially if you don't connect to public wifi networks.

08-28-2021, 02:06 PM	#7
binaryhermit Grand Sorcerer Posts: 5,732 Karma: 20469902 Join Date: Oct 2014 Location: Lockport, IL Device: Kindle PW4, Kindle Paperwhite Signature Edition	And that goodereader article is the wrong take. It's that security updates are guaranteed at least 4 years from when it was last sold new, then on a best effort basis, not "4 years, then there might be feature updates but no new security updates" But since when does goodereader actually get it right?

Advert

Advert