Kindle Touch Gets World's Simplest Jailbreak

Nate the greatest writes "Can you play an MP3 file? Then you can jailbreak the new Kindle Touch. A new hack was posted this morning that roots the Kindle Touch/K5 and opens the way for future hacks. The hacker also reveals that the K5 runs on HTML5, which should make it a lot easier to come up with new apps. Epub, anyone?"

World's simplest?

[subreality]

By what metric?

For the user, rooting the iPhone was pretty easy with jailbreakme.com. Go there, click the button.

Or do you mean easy for the developer? On HTC phones you basically say "Jailbreak please" and it says "OK."

Re:Doubleplusgood!

[subreality]

When the GP said "1984 style", they were referring to the fact that Amazon actually revoked some copies of 1984 in a flash of brilliant irony.

Explanation (It's quite clever)

[mshenrick]

for the lazy, the title just contains HTML code to create a button, which runs DD to the MP3 (minus the title tag) to a script, as the author tag is the script source, which is then executed. If you open the properties of the MP3 (OS X's 'get info' works, or you could cat it) the source is pretty well commented

Re:World's simplest?

[Atzanteol]

http://unrevoked.com/ [unrevoked.com]

Plug in phone. Run app. Make tea. Really the last part was the difficult step.

Re:Doubleplusgood!

[sixsixtysix]

in your situation, if there was a recall, the car seller would just come and take your vehicle, and leave a check and any personal items, whenever/wherever they wanted to. parent is saying that, once sold, the car seller should contact the buyers and let them know, and IF they wanted to, they can bring back the car with the faulty battery. you know, because of ownership and all.

Re:I would think that this was a major problem.

[complete loony]

This isn't a buffer overflow, it's a XSS scripting attack. The mp3's meta data is inserted into a HTML document without cleansing it.