Amazon's CEO Jeff Bezos apologizes for Kindle ebook deletion [LWN.net]

Amazon's CEO Jeff Bezos apologizes for Kindle ebook deletion

Posted Jul 28, 2009 1:43 UTC (Tue) by MarkWilliamson (guest, #30166)
In reply to: Amazon's CEO Jeff Bezos apologizes for Kindle ebook deletion by dlang
Parent article: Amazon's CEO Jeff Bezos apologizes for Kindle ebook deletion

'it is not that hard to modify the binaries on the kindle, so they do not have the absolute control over the software there that you assume that they have.'

Interesting ... to what extent, though? Can you, e.g. modify the kernel? Modify the code that does the remote deletion? If so then there's a fairly straightforward fix waiting for some hacker out there to come up with. I'd be moderately surprised if they hadn't locked down their core components though - surely if they're using remote delete to implement refund they're going to want to verify that the deletion really did happen?

to post comments

Amazon's CEO Jeff Bezos apologizes for Kindle ebook deletion

Posted Jul 28, 2009 2:07 UTC (Tue) by dlang (guest, #313) [Link]

the update mechanism appears to be well understood, and with that people have modified things like the web browsers, the screen savers, and the fonts, as well as installing new applications that run int he background (file format converters) and released 'update bundles' to allow script-kiddie level people to do the changes

others have reported going in and getting root shell access.

the code to allow amazon to delete books in not in the kernel, it's in the userspace applications.

I've seen at least one report of someone going in and doing much more drastic changes (putting their own linux distro on the box), at the time they didn't have the display and several of the keys working, and since those have explicit support in the kindle kernel patches, this indicates that they probably replaced the kernel along with everything else. but I don't know for sure.

remember that users can mount the kindle as a UDB drive and copy documents to/from the device, so even if amazon issued the command to delete the file, they can't prevent you from copying the file back onto the kindle later.

and taking the approach of blacklisting a filename and deleting it any time it's seen is a _very_ dangerous thing to do, just from a reliability point of view. I would be surprised if they had done so.

as for them locking things down, the Tivo and game console hackers have shown that that sort of thing isn't going to stop the people who are determined to go in and change things, Amazon seems to just be putting up enough of a roadblock to stop casual changes (and to protect themselves from applying the wrong update to the wrong system), but not going to great lengths to try and stop people.

as I understand it, even the DRM they use for their books is something that has been broken quite a while ago. again, it's enough to stop casual copying, but not determined abuse.