Post · Fedizen

@ChrisPirillo@mastodon.social 45 min. ago

The Shadow Kindle Jailbreak Gets Root Over USB With Decoy Folders, a Leaky File Date and One Extra Parameter

https://lockergnome.com/shadow-kindle-jailbreak-mtp-daemon-dummy-folders-rop-chain/

#kindle #jailbreak #exploits #tech

Pen-and-ink drawing of Chris plugging a USB cable into an e-reader, with a small stack of empty folders beside it and a tiny key glowing on the e-reader screen

The Shadow Kindle Jailbreak Gets Root Over USB With Decoy Folders, a Leaky File Date and One Extra Parameter

A new write-up shows how Kindles that switched to MTP in 2024 can be rooted by talking to the file-transfer daemon alone: leak its address through a file's creation date, then overflow its stack. Amazon patched it in firmware 5.20.1.

#exploits #kindle #jailbreak #tech

0 Boosts

0 Likes

No replies yet

Be the first to share your thoughts.