iLiad How to get 2.7.1 without closing holes

Mike Kostousov · 10-25-2006, 07:29 AM

Hello!

For them, who are really interesed in new patch but still want to have some place to play

I tried to download update without updating. I just canceled update in the right time. I have no time to discover what they have realy done in this patch, but if some body wants - see attachment.

design256 · 10-25-2006, 07:44 AM

Quote:

Originally Posted by Mike Kostousov

Hello!

For them, how are really interesed in new patch but still want to have some place to play

I tried to download update without updating. I just canceled update it in right time. I have no time for discover what they realy done in this patch, but if some body wants - see attachment.

Thanks Mike. You've saved me lots of worry. Loads of ways to leave a backdoor in place now we know what's in it. Major changes look like:

Xfbdev in start.sh now run with -nolisten tcp

main updated files:

browser
connectionMgr
contentLister
downloadMgr
ipdf (replaces xpdf in er_registry - I wonder why...)
mb-applet-icon-container

Mike Kostousov · 10-25-2006, 07:56 AM

Quote:

Originally Posted by design256

ipdf (replaces xpdf in er_registry - I wonder why...)

I see libpoppler in /usr/lib. It is pdf rendering library, it is based on xpdf. poppler team works together with kpdf project, so this library are in develop. ipdf can be quicker..

TadW · 10-25-2006, 08:35 AM

Excellent Mike.

Is the patch everything that is being executed during the update? I don't see any attempt to remote root access again (e.g. by changing passwords, uninstalling dropbear, etc.)...

Mike Kostousov · 10-25-2006, 09:08 AM

It seems that it is everything. But I am not sure, because after this update iLiad can connect to iDS one more time. See ./usr/bin/post_download.sh in patch. It has lines:

Code:

# write flag to reconnect to iDS after reboot
sysset -w -a 153 -l 1 -v 1

Alexander Turcic · 10-25-2006, 09:10 AM

From the announcement:

Quote:

# After connecting to the server you will get a message: Downloading Software Patch v2.7.1 and the progress of the download.
# When the download is complete wait until the screen of the iLiad turns white.
# After this the iLiad will automatically restart itself.
# When the iLiad has restarted, it will reconnect to the iDS to check for any further downloads.
# When there are no additional downloads you will return to the Download history screen, and the installation is complete.

scotty1024 · 10-25-2006, 11:42 AM

As much as I liked Design256's pre-exploit work around,

, I'd rather encourage iRex to post the patches.

I'm quite capable of applying them manually.

CommanderROR · 10-25-2006, 01:17 PM

Should I move this to the development subforum? I think so...any objections?

10-25-2006, 09:08 AM	#5
Mike Kostousov Connoisseur Posts: 50 Karma: 861 Join Date: Aug 2006 Device: Zaurus C1000/iLiad/SE K750i	It seems that it is everything. But I am not sure, because after this update iLiad can connect to iDS one more time. See ./usr/bin/post_download.sh in patch. It has lines: Code: # write flag to reconnect to iDS after reboot sysset -w -a 153 -l 1 -v 1

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Closing The Gap	indie	Self-Promotions by Authors and Publishers	6	09-25-2010 02:04 AM
What is the purpose of the holes on the left side of the device	lunixer	Amazon Kindle	4	09-04-2010 01:43 PM
Closing Threads	tompe	Feedback	21	03-22-2009 10:29 AM
iRex iLiad patch V2.7.1 closes security holes	Alexander Turcic	iRex	11	10-26-2006 11:41 AM
PRS-500 PDF or similar holes?	arivero	Sony Reader Dev Corner	1	10-20-2006 04:25 PM

10-25-2006, 08:35 AM	#4
TadW Uebermensch Posts: 2,583 Karma: 1094606 Join Date: Jul 2003 Location: Italy Device: Kindle	Excellent Mike. Is the patch everything that is being executed during the update? I don't see any attempt to remote root access again (e.g. by changing passwords, uninstalling dropbear, etc.)...

10-25-2006, 11:42 AM	#7
scotty1024 Banned Posts: 1,300 Karma: 1479 Join Date: Jul 2006 Location: Peoples Republic of Washington Device: Reader / iPhone / Librie / Kindle	As much as I liked Design256's pre-exploit work around, , I'd rather encourage iRex to post the patches. I'm quite capable of applying them manually.

10-25-2006, 01:17 PM	#8
CommanderROR eink fanatic Posts: 2,022 Karma: 4924 Join Date: Mar 2006 Location: Germany Device: STAReBOOK, iRex Iliad, Sony 505, Kindle 2	Should I move this to the development subforum? I think so...any objections?

Advert

Advert