It’s the second time this year hackers have shown how to take control of a Kindle device to potentially gain access to an Amazon account.
... [+]Your Amazon Kindle and your Amazon account could be hacked by just opening a single ebook, according to research published Friday as part of theOnce the malicious book is opened, a remote hacker could delete all books on the device and could steal the authentication token used to get into an Amazon account, according to the proof of concept attack developed by researchers at Israel-based cybersecurity company Check Point.
Balmas was able to create a evil ebook that took advantage of a flaw in the Kindle operating system that meant when parsing images from the book it wasn’t limiting the amount of code that could be written to the device, known as a heap overflow bug. That flaw allowed him to overwrite parts of memory. To get complete control of the Amazon device, he discovered another flaw that allowed him to grant himself root user rights.
Amazon, however, has fixed the issue and users who are running the latest Kindle software should be safe from attacks. The issues were reported to Amazon in February 2021 and fixed in the 5.13.5 version of Kindle’s firmware in April, the patched software installed automatically on internet-connected devices. Amazon hadn’t responded to a request for comment at the time of publication.
But the research brings to light questions about how much a Kindle user can trust books self-published on Amazon’s marketplace, or ebooks downloaded from any platform. It’s also the first example of a hack getting complete remote control over a Kindle with a malicious book.
Deutschland Neuesten Nachrichten, Deutschland Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
The 8 best beds under $1000 that reviewers on Amazon loveIf you're in the market for a new mattress, check out the top 8 Amazon beds approved by reviewers.
Weiterlesen »
‘Lightyears’: Amazon Sci-Fi Series Adds Beth Lacke, Stephen Louis Grush, And Cass BuggéEXCLUSIVE: Amazon Studios has added Beth Lacke (Chicago Med, Hope Springs Eternal), Stephen Louis Grush (Chicago P.D., The Alienist), and Cass Buggé (Better Things, Yes Day) to its upcoming sci-fi …
Weiterlesen »
Amazon launching free same-day delivery in six cities, grocery delivery fees in other citiesAmazon.com Inc. undefined said Wednesday that it will add six cities to those offering same-day delivery on millions of items. Baltimore, Chicago, Detroit,...
Weiterlesen »
Democrats urge Amazon, Facebook to stop campaigning for FTC Chair Khan's recusal in antitrust casesThe lawmakers said the petitions 'add to the perception that you are attempting to bully your regulators.'
Weiterlesen »
25 Best Dresses You Can Buy on Amazon for the End of SummerAnd transition into fall.
Weiterlesen »
Amazon Just Secretly Took Up To 50% Off These Super Cute Sports Bras And LeggingsIt includes Nike and Alo Yoga.
Weiterlesen »