• On CBS MoneyWatch: 7 INAPPROPRIATE Interview Questions
advertisement
January 2, 2008 3:49 PM PST

A reverse engineer finds Kindle's hidden features

by Stephen Shankland

Amazon's Kindle e-book reader.

(Credit: Amazon.com)

A significant amount of skill with a soldering iron and some custom firmware has revealed a number of interesting features Amazon.com hid within its Kindle e-book reader.

Among the ones that hardware hacker Igor Skochinsky uncovered and described on his blog are a basic photo viewer, a minesweeper game, and most interesting, location technology that uses the Kindle's CDMA networking to pinpoint its position. There also are some basic location-based services that call up a Google Maps view to show where you are and nearby gas stations and restaurants.

I confess I was as interested in the reverse-engineering process, documented in three blog postings (first, second, and third).

Skochinsky started by scrutinizing the Kindle source code Amazon publishes. (Some open-source licenses, including the General Public License (GPL) that governs Linux that the Kindle also uses, require source code to be published when a product ships that uses it.) From the source he inferred the Kindle employed console software, which displays text output.

Through methodically testing electrical pins on an external port he eventually found the text output from the Kindle boot process. That showed the machine was using das U-Boot software to handle booting, during which stored software is loaded into memory. U-Boot offers an interactive shell with a command-line interface, and Skochinsky used that to laboriously piece together the Kindle operating system kernel used during its firmware update recovery process. From that he deduced the file format of firmware updates.

Getting a real Linux command line took more work. By looking at the file system, Skochinsky found a root password of "Fiona"--but also found that password had been changed before shipping. Using the firmware update process, he was able to swap in a new shadow file, which stores a garbled byproduct of passwords called a hash, that enabled him to use the hash from the original root password.

On reboot, he was able to control the system and see what processes it runs, what file systems it mounts, and what files are stored in its directories.

He also found that the interface is written in Java. Using the Jad decompiler software, he uncovered the hidden features and a number of keyboard shortcuts.

Stephen Shankland writes about a wide range of technology and products, but has a particular focus on browsers and digital photography. He joined CNET News in 1998 and since then also has covered Google, Yahoo, servers, supercomputing, Linux and open-source software, and science. E-mail Stephen, follow him on Twitter at http://www.twitter.com/stshank, or contact him through Google Buzz.
Recent posts from Underexposed
Nikon app teaches photography on the fly
Smile! Flickr has an official iPhone app
Corel Digital Studio 2010 opens up to consumers
Adobe tests raw support for Olympus E-P1, new Nikons
Adobe's next Lightroom to forsake PowerPC Macs
How Flickr needs to change
Adobe kills low-end Photoshop, urges users online
Toshiba plans 64GB SDXC memory cards for 2010
Add a Comment (Log in or register) (3 Comments)
  • prev
  • next
Hacking the Kindle
by wgilbert5 January 7, 2008 9:41 AM PST
Kinda funny thing happened to me on the way to get a Kindle. The company (Amazon) assured me they were out and would ship one to me when they got them in. That was a month or so ago and I haven't been notified my new Kindle is on the way yet, but they have assured me I can buy the books to put on it and they will let me download them as soon as my new Kindle is in my hands. So, then I read this and realize that, although I can't get one, this fellow can get one to hack and, in effect, cut up, and make a jalopy out of it. How nice! I'm really happy to know what I can do with it when (if?) I get it. Thanks Amazon!
Reply to this comment
Delivery of Kindle's
by cfw123 January 7, 2008 12:01 PM PST
Amazon (i.e. Kindle of course) is one of the most reliable companies when it comes to deliveries -- it does what they say. In this case delivering on a first ordered first delivered basis. But it has been my observation that they actually deliver earlier than they promise as a matter of policy, as it greatly cuts down on the chit chat.

In my own case, I ordered on Nov. 16th when it was first announced, but my order didn't make the five hour and a half period it took to ship out their first year's supply. But I did get it on Dec. 4th, and have really loved it ever since I got it. My son didn't order his until I got mine, and is still waiting, but expects his by the end of next week. I did hear that it is taking a month from order to delivery at this time, and it will be June before they can ship immediately upon receipt of an order. Personally I think this is very optomistic, since the orders should really zoom once enough get delivered and other people can see how great it is. And I expect businesses will really order them in bulk like they do the blackberry for their roving marketeers in order to keep them up to date, and provide handouts without going to Kinko's for meetings. Charles Wilkes, San Jose, Calif.
meanwhile use your phone
by avagee January 7, 2008 1:34 PM PST
While you are waiting for Kindle you could give <a class="jive-link-external" href="http://www.booksinmyphone.com" target="_newWindow">http://www.booksinmyphone.com</a> a try. They give away books that are packaged to be readable on regular 'dumb' cell phones. The screen size is fine for prose. You can browse and install direct to the phone from the mobile version of the site.
(3 Comments)
  • prev
  • next
advertisement
CNET River
  • jetscott: Hey Jets haters, shelve those fantasies: Revis is coming back.

  • caro: Just spotted Fish and Chips @ Liberal Cup on @Foodspotting http://bit.ly/b6qzu7

  • raygun01: Arrive home and power up my Mac Pro to find it spontaneously rebooting. Sometimes after a full OS bootup, others repeatedly at Apple logo.

  • caro: BURGERS!!!! RT @EmilyGannett Finished with @caro's boot camp - 6m run followed by a 7.6m hike. Now, what's for dinner?!?

  • jetscott: iPhone 4 browsing gets crazy at such high resolutions. My thumb needs tiny fingers.

  • jetscott: Migraine has destroyed my afternoon. Living in a dark room, trying to make peace with the pain.

  • stshank: Rebates for a few days on seven Tamron lenses: http://bit.ly/bnzmu1

  • mollywood: Q: are no-contract phone prices even remotely based in reality? I mean, does a Droid 2 really cost more to make than an iPad? Rant brewing.

  • caro: Rainbow visible from summit (4170 ft) (@ Old Speck Mountain) http://4sq.com/cvyqU9

  • antgoo: Jeez, any time you save by driving in this city is immediately lost looking for parking... And then some!

  • jetscott: Talking Apple TV on WGN Chicago radio in just a few minutes.

  • raygun01: Lucy is cutting four teeth at once... and we are flying cross country all day. If ever we needed a miracle, now would be the time.

  • stshank: Ha! RT @diveintomark: PING: YOUR FRIEND HAS BEEN REJECTED BECAUSE SHE DUPLICATES THE FUNCTIONALITY OF AN EXISTING FRIEND.

  • stshank: What happened to fast user switching from Windows XP to Windows 7? It takes *forever* now. It had been a real advantage over Mac OS X.

  • stshank: .@jnack If you want to blow off steam about the garbage that is Star Wars prequels, I recommend RedLetterMedia: http://bit.ly/cquHAx

  • danackerman: Saturday's conversation about new Android tablets, including the Samsung Galaxy Tab, on MSNBC: http://t.co/b383pO3

  • caro: I made it! RT @ohhleary: Last course of dinner: Icebox Chocolate Cake with Bar Harbor Cadillac Mountain Stout http://plixi.com/p/43341618

  • loricnet: Or at least raw+JPG RT @Photocritic: Friends don't let friends shoot JPG. pick up your camera right now, switch it to RAW, never change it.

  • jetscott: Take a look at the Patriots' final roster, then tell me how exactly they're supposed to win the AFC East.

  • danackerman: At the Film Forum, about to see The Tinger, presented in original "Percepto" format http://yfrog.com/4blmscj

  • caro: Time for an authentic @ohhleary local beer tasting http://twitpic.com/2lbp82

Chrome reshapes the browser market

The influence that Google's browser has had on the market is broader than its actual use. On Chrome's second anniversary, Google releases the sixth stable version.

Apple rolls out new iPods, social iTunes

A new version of Apple TV is also coming soon, as Apple follows its usual September playbook in refreshing its iPod lineup and the iTunes software.
• Roundup: New iPods, iTunes, TV?

About Underexposed

This blog sheds light on digital photography subjects such as cameras, photo editing, and Web sites. Shankland joined CNET News in 1998 after a five-year stint as a science writer. He's a lab rat who grew up in Los Alamos, N.M., and graduated from Harvard.

Contact Stephen at Stephen.Shankland@cnet.com

Add this feed to your online news reader

Underexposed topics

advertisement

Inside CNET News

Scroll Left Scroll Right