Kindle 5th gen bricked after downgrade

September 22, 2020, 12:50 pm

≫ Next: K3 Kindle 3 (keyboard) 3G B006, https broken, alternative to experimental browser?

≪ Previous: PW Considering Jailbreak, questions on functionality

Hello, I've scoured google, reddit, and this forum, but I was unable to find an answer. I was following https://forum.xda-developers.com/ama...-fire-t3899860 and reached the step where it told me, for a 5th gen, I could downgrade to 5.0.1 firmware via adb sideload.

The instructions did say it would brick the device until the process was completed and the following step instructs me to ensure the device is powered off (although honestly, it's 100% bricked and nothing comes on the screen anymore regardless of what I do, so I guess I think it's powered off).

When I attempt the next step of "sudo ./bootrom-step.sh" it fails saying the following: SerialException('write failed: {}'.format(e)) serial.serialutil.SerialException: write failed: [Errno 19] No such device

At this point, I'm really not sure how to continue. I can't proceed with the instructions, apparently, and after trying for the last few hours unsuccessfully, I've been unable to unbrick the device to start over.

Please help

↧

K3 Kindle 3 (keyboard) 3G B006, https broken, alternative to experimental browser?

September 29, 2020, 2:04 pm

≫ Next: unbrick a Kindle Keyboard w frozen screen, works as USB storage

≪ Previous: Kindle 5th gen bricked after downgrade

Most https-sites will not load ("your kindle is unable to load the requested page") or give a "invalid certificate" warning. From what I understand most sites updated from TSL 1.0/1.1 but the experimental browser did not (source).

I've read a couple of threads on this forum about wikipedia no longer working on the K3, but I can't see that there is a fix or a workaround. Therefor I ask now:

1. Is there a fix? Does anyone know if there will be a new firmware upgrade that fixes it, or a downgrade?
2. Is there a work-around? I've found out that using google web lights as a proxy get me to wikipedia, but it is slow and clunky.
3. Is there an alternative? If I jailbreak my Kindle, is it possible to install an alternative browser with TSL 1.2 support? Does such a browser exist yet for the Kindle 3?

My apologies if I've posted this in the wrong sub-forum.

↧

unbrick a Kindle Keyboard w frozen screen, works as USB storage

September 30, 2020, 4:52 am

≫ Next: Help to debrick PW2 stuck on tree screen almost complete loading bar

≪ Previous: K3 Kindle 3 (keyboard) 3G B006, https broken, alternative to experimental browser?

I've done everything I found on the web except attaching to the serial console to try to unbrick a 2011 Kindle Keyboard (wifi) which stopped working.
The system seems to run ok, but the screen is fixed on a book's page and has been on that page for years now. I disconnected the battery, done the reset thing on the circuit board, done all the resets available with the power button, etc.
Symptoms are: Computer can connect, save files, etc. Calibre recognizes it, can also modify it's contents. When charged the green light comes up. Disconnect it from charger and it goes off. Slide the power on and it goes green then turns off. No change on the screen, same book same page. Connect it back to the computer and I see all the contentc.

I even saved one of the jailbreak files on it and it seems to have worked as now I have a "linkjail" folder.

Is there anything else I can try? Is it possible that the screen is just broken even tough it looks fine?

Any advise appreciated.

↧

Help to debrick PW2 stuck on tree screen almost complete loading bar

October 3, 2020, 5:50 am

≫ Next: G000K9 KT3 dead?

≪ Previous: unbrick a Kindle Keyboard w frozen screen, works as USB storage

Hello!

I have a Kindle PW2 for idk how many years now, it is jb and had dual boot with duokan 2015 and I've never had any problem using both boots nor anything.

The thing is that yesterday after a full charge I've tried to use my kindle and the touchscreen had no response what so ever. I've tried hard reset (40s) but the problem persisted.

So, I've read that a factory reset could do the trick if it was not a hw problem and so I've tried the DO_FACTORY_RESTORE file into the USB drive, and reboot. And that's where I've got hung up on this boot, tree screen almost complete loading bar and after a few minutes it loads the screensaver.

And now when I connect the device to the PC, it is recognized as D:/ but I cannot access its files or format the drive. On Device Manager it recognizes that it is a kindle etc.

Can anyone help me on this?
I've found this link https://gist.github.com/TobiasWooldr...ca75190b9a473f

but for the moment I don't have USB TTY device, so I wanted to try anything before getting access to this device.

Thank you very much for your attention and patience!

Attached Thumbnails

Click image for larger version

Name: 95bar.jpg
Views: N/A
Size: 65.4 KB
ID: 182414

↧

G000K9 KT3 dead?

October 9, 2020, 10:56 am

≫ Next: Kindle USB OTG Control for iMX6

≪ Previous: Help to debrick PW2 stuck on tree screen almost complete loading bar

Hello,
I've got probably bricked G000K9 Kindle Basic 2 (2016) KT3. After connecting thru serial port (1,8V) I see only this part of booting process:

Code:

U-Boot 2014.04 (Mar 19 2020 - 22:30:49)



CPU:   Freescale i.MX6SL rev1.3 at 792 MHz

CPU:   Temperature 30 C, calibration data: 0x5774f95f

Reset cause: POR

FRED::: EXTCSD177=0, 179=48FSL_SDHC: 0, FSL_SDHC: 1, FSL_SDHC: 2

Board: Heisenberg

Board Id: P00118077426092X

S/N: G000K90574260B56

I2C:   ready

DRAM:  MR5=0x1,MR6=0x4 512 MiB

No more lines. Nothing.I cannot boot into diags. No "uboot>" prompt.

What can I do next? :help:

↧

Kindle USB OTG Control for iMX6

October 11, 2020, 3:03 pm

≫ Next: How to prevent updates?

≪ Previous: G000K9 KT3 dead?

What is it?
This is a kernel module that allows you to enable and disable USB OTG functionality on Kindle devices using the iMX6 SOC. This functionality is disabled on most iMX6 devices by default; the only working devices are USB sound cards on the PW3 and later devices.

This module is capable of expanding that support to any USB device supported by the 3.0.35-lab126 kernel (as long as the additional kernel modules required by the device are compiled and loaded into the kernel too).

It has been tested on the KT2 and PW3, but will likely work on the KOA, PW2 and KV too.

How do I use it?
First, insert the module into the kernel:

Code:

insmod otg_control.ko

The module can be removed from the kernel like so:

Code:

rmmod otg_control

The module exposes a procfs entry that allows you to:

Enable USB OTG functionality
Disable USB OTG functionality
Set the audio_enumerated variable to 1
Set the audio_enumerated variable to 0

To carry out any of these actions, you will need to write the following values to /proc/usb_otg:

Code:

echo 0 > /proc/usb_otg     # Disable USB OTG functionality

echo 1 > /proc/usb_otg     # Enable USB OTG functionality

echo 2 > /proc/usb_otg     # Set audio_enumerated to 1

echo 3 > /proc/usb_otg     # Set audio_enumerated to 0

On devices that support the Kindle Audio Adapter accessory, you should use the Set audio_enumerated to 1 option - this bypasses the check used by Lab126 to lock out other USB peripherals.

For older devices, use the Enable USB OTG functionality option. This does the same thing as the option above, as well as a couple of additional setup tasks which need to be carried out before USB OTG can be used.

Building from source:
To build this module from source, you will need a cross-compiler toolchain.

Code:

git clone https://github.com/katadelos/linux-3.0.35-lab126.git

cd linux-3.0.35-lab126/

git checkout usb-otg-control 

make ARCH=arm CROSS_COMPILE=arm-kindlepw2-linux-gnueabi- imx60_wario_defconfig

echo "CONFIG_USB_KINDLE_OTG_CONTROL=m" >> .config 

make ARCH=arm CROSS_COMPILE=arm-kindlepw2-linux-gnueabi- modules_prepare

make ARCH=arm CROSS_COMPILE=arm-kindlepw2-linux-gnueabi- M=drivers/usb/otg/

Attached Files

otg_control.zip (2.0 KB)

↧

How to prevent updates?

October 11, 2020, 4:41 pm

≫ Next: Can fonts be replaced on my kindle? Paperwhite 7th

≪ Previous: Kindle USB OTG Control for iMX6

How can I prevent my Kindles from updating?
I use them all the time, so keeping them unregistered or off the wifi won't work.

I am currently stuck with the most current updates and I would like to be able to jailbreak it sometime in my lifetime. I hate their Kindle Collections and want to use Calibre's plugin for it.

↧

Can fonts be replaced on my kindle? Paperwhite 7th

October 12, 2020, 6:11 pm

≫ Next: How can I edit the margins and the distance between letters and paragraphs?

≪ Previous: How to prevent updates?

Usually reads books in .MOBI format
I already know that I can read them in .Azw3 format and I can modify and install fonts to my liking. But what I want to do is different.
Is there a way to modify the default Kindle fonts? That is, replace the "Open Dislexy" font with some other font or even edit it?
I DO NOT WANT TO MODIFY THE FONTS WITHIN THE .MOBI FILE.
I WANT TO MODIFY THE SOURCES THAT ARE INSIDE THE KINDLE BY DEFAULT.

↧

How can I edit the margins and the distance between letters and paragraphs?

October 13, 2020, 12:00 am

≫ Next: Can you dual-boot on Kindle Oasis 3?

≪ Previous: Can fonts be replaced on my kindle? Paperwhite 7th

I have seen that there are programs called KUAL among others, where one can edit some things. With one of these programs, can I edit the distance between each word, the margins of the edges and the distance between each sentence? I do that on my phone with an App called Moon + Reader to take advantage of more space and to get more words per page. I have a 7 generation Kinlde Papewhite. Can I install a program on it? Is it easy to do it? Is it good for what I need?

↧

Can you dual-boot on Kindle Oasis 3?

October 13, 2020, 2:15 pm

≫ Next: K4 sync reverse engineering

≪ Previous: How can I edit the margins and the distance between letters and paragraphs?

I was wondering if you could find a way to dual boot Duokan on Kindle Oasis 3. I'm pretty new at this so don't judge.

↧

K4 sync reverse engineering

October 14, 2020, 9:01 pm

≫ Next: Is it possible to downgrade a kindle changing the .bin header?

≪ Previous: Can you dual-boot on Kindle Oasis 3?

I imagine this has been tried long ago, but has anyone been able to reverse engineer the sync protocol built into the kindle 4?

Off the top of my head a man-in-the-middle "attack" seems doable involving mitmproxy and changing /etc/hosts (or via DNS) and replacing ssl/tls keys in /etc/ssl/certs/ca-certificates.crt and /usr/lib/java/cacerts.

Doesn't seem too involved with ssh access to the kindle... Does anyone know if this been done before or are there additional protections that prevent reverse engineering this?

↧

Is it possible to downgrade a kindle changing the .bin header?

October 15, 2020, 9:15 am

≫ Next: Change or edit default fonts? Paperwhite 7th

≪ Previous: K4 sync reverse engineering

I have a KT3 with firmware 5.9.2.0.1. I would like to downgrade to version 5.8.0. But, whenever I copy the firmware, it gets deleted. I downloaded (just to try) the 5.13.3 version and examined it with a Hex editor. The first 4 characters are SP01, but in the 5.8.0 version, those are FB02.

Here is the question: can I downgrade changing the FB02 header into SP01?

↧

Change or edit default fonts? Paperwhite 7th

October 17, 2020, 4:03 pm

≫ Next: Change Kindle Paperwhite 7th screensaver without installing programs?

≪ Previous: Is it possible to downgrade a kindle changing the .bin header?

I need to change the size of the bold and other things in the MOBI format. I know that even if I modify the book with Caliber (in mobi format). The changes cannot be seen on my kindle. I wanted to know if the fonts can be modified by connecting my kindle to the pc and editing some settings.
PS: I already know that there are formats like DOCX and AZW3 that give me those options. But I want to know if there is any way I can modify some parameters of the MOBI format from my kindle (bold and other font styles)

↧

Change Kindle Paperwhite 7th screensaver without installing programs?

October 19, 2020, 5:59 pm

≫ Next: KT3 wiped mmc, only uboot

≪ Previous: Change or edit default fonts? Paperwhite 7th

Is it possible to change the screensavers of my kindle paperwhite 7th generation for an image that I like?

Without installing programs, because I don't know how to install them.

↧

KT3 wiped mmc, only uboot

October 20, 2020, 3:52 am

≫ Next: PW3 Paperwhite 3 Behaving Very Strangely

≪ Previous: Change Kindle Paperwhite 7th screensaver without installing programs?

Greetings fellow Kindle-unbrickers, I need some advice in a desperate situation! :help:

The subject is my KT3 with official 5.12+ firmware, what I want to break free.
Upon serial jailbreak process I accidentally pressed "4" and started to wipe the MMC. Now it says "ERROR: Can't get kernel image!" for normal boot.
I haven't made any backups from the device to load back, so now I am stuck.

Where to go from here? My plan B is to buy an exact same device and backup the mmc content from there to load back to the bricked device.

All advice appreciated!

↧

PW3 Paperwhite 3 Behaving Very Strangely

October 23, 2020, 12:55 am

≫ Next: PW4 Blocked Kindle: There is something legal to do?

≪ Previous: KT3 wiped mmc, only uboot

I recently decided to jailbreak my Paperwhite 3 because I haven't used it very much in a while, and I figured I'd be able to get a bit more use out of it. Anyways, it was on too new of a firmware version (5.10.1.1), so I couldn't use a totally software-based method, I had to do a serial mod. I'm not very good at soldering, so I screwed up quite a bit at first. I tore a solder pad off so I had to find an alternate point of access compared to normal, specifically points TM800 and TM801 on the back of the motherboard. Since I'm uncomfortable soldering to tiny pads, I decided it would be a bright idea to solder to some RF shielding. When I finished with the jailbreak, and I was desoldering the wires, I spilled a little bit of flux around the RF shield. Specifically, it got around near where the SIM card would go. I cleaned it up the best I could, but I suspect some got in the RF shielding. At first, everything was fine, but of course, once I got the kindle fully reassembled and was messing around with SSH, it reset and got stuck on the same screen indefinitely, with the LEDs going full blast. I decided to bust the thing open again and reconnect to the UART so I could see what's going on in more detail. The following is what I got from that.

Code:

U-Boot 2009.08-lab126 (Oct 12 2018 - 06:10:48)



CPU: Freescale i.MX6 family TO0.0 at 996 MHz

Temperature:   35 C, calibration data 0x5a05225f

mx6sl pll1: 996MHz

mx6sl pll2: 528MHz

mx6sl pll3: 480MHz

mx6sl pll8: 50MHz

ipg clock     : 66000000Hz

ipg per clock : 24000000Hz

uart clock    : 80000000Hz

cspi clock    : 60000000Hz

ahb clock     : 132000000Hz

axi clock   : 198000000Hz

emi_slow clock: 22000000Hz

ddr clock     : 396000000Hz

usdhc1 clock  : 198000000Hz

usdhc2 clock  : 198000000Hz

usdhc3 clock  : 198000000Hz

usdhc4 clock  : 198000000Hz

MMC:  FSL_ESDHC: 0,FSL_ESDHC: 1,FSL_ESDHC: 2

Board: Muscat WFO

Boot Reason: [ POR ]

Boot Device: NAND

Board Id: XXXXXXXXXXXXXXXX (I blanked these out since I'm fairly certain they're specific to my kindle and it's not really necessary)

S/N: XXXXXXXXXXXXXXXX

I2C:   ready

DRAM:  512 MB

Using default environment



In:    serial

Out:   serial

Err:   serial

Quick Memory Test 0x80000000, 0x1fff0000

Memory error at 80000000, wrote 00000000, read ffffffff !

POST done in 9 ms

Battery voltage: 4080 mV



Hit any key to stop autoboot:  0 

Unknown command 'panic' - try 'help'

uboot >

It acted like this for a few hours. I thought I bricked my kindle by frying the NAND chip, so I started writing this post and I got the urge to reset the processor in uboot to see what the battery voltage was after so long, but to my surprise, it booted normally! Then, after a few hours of normal operation, the same thing as before started happening. Anyone have any idea what could be causing this? My only guess is that there's flux under the RF shielding shorting something out, but I don't really have the skill or equipment to remove it without damaging anything.

↧

PW4 Blocked Kindle: There is something legal to do?

October 23, 2020, 5:46 pm

≫ Next: PW KUAL-KDK-2.0.azw2 not shown on my KPW1

≪ Previous: PW3 Paperwhite 3 Behaving Very Strangely

Hello!

I bought the Kindle PW4 in june and it came with a defect in lighting that does not prevent reading, but makes it a little difficult.

I contacted Amazon support requesting the repair or exchange of the product.

They informed me that they had no means to repair it and therefore gave me credit on Amazon for the purchase of a new device.

They also informed me that the old device would just block, since Amazon have no interest in returning it (They haven't an official suport in Brazil, so it would be more expansive for Amazon get the device back).

So, I currently have the new device, which works properly registered and an old device that is locked.

My question: is it possible to use the locked kindle for some other function? I know it is not possible to register it again, but I think it would be environmentally incorrect to just throw it away. I would like to reuse it in some way.

Obviously, i do not want any illicit means. I would just like help in understanding if it has any use.

Can I send files via USB and read? Would that be the only feature?

↧

PW KUAL-KDK-2.0.azw2 not shown on my KPW1

October 26, 2020, 6:06 am

≫ Next: Entering USB HID/Serial Download mode on KT2

≪ Previous: PW4 Blocked Kindle: There is something legal to do?

Hi Guys,

I need some help here.

My firmware version was 5.3.*, and I upgraded to 5.6.1 and found that to jb I need to downgrade to 5.4.4 and then upgrade to 5.6.1.
But sadly after JB (the words showed up after successful JB), I copied the KUAL-KDK-2.0.azw2 to documents folder and eject the usb, but the launcher didn't show up at all.
I tried for several versions of FW, but nothing worked.

Please give me some hints on what should I do next. Thanks a million!

↧

Entering USB HID/Serial Download mode on KT2

October 27, 2020, 3:34 pm

≫ Next: Jailbroken Kindle won't accept a legit .bin update file

≪ Previous: PW KUAL-KDK-2.0.azw2 not shown on my KPW1

After reviewing the iMX6SL reference manual + datasheets and the PW3 PCB photos provided by @bcm310 within this thread, I was able to establish that the boot control pins needed to enter USB Serial Download mode are broken out to test pads on the back of the PW3 PCB at these locations:

BOOT_MODE_0 - TM401
BOOT_MODE_1 - TM402

Both of the pads listed above are also present on the KT2 and I was able to enter USB Serial Download on this device by pulling TM401 up to 3.3v. The KT2 appears with the product name "SE Blank MEGREZ" and VID:PID 15a2:0063, and a u-boot image can be loaded using imx_usb_loader with this config:

Code:

KindleTouch2

#hid/bulk,[old_header,]max packet size, dcd_addr, {ram start, ram size}(repeat valid ram areas)

hid,1024,0x910000,0x70000000,256M,0xF8000000,128K

↧

Jailbroken Kindle won't accept a legit .bin update file

October 28, 2020, 12:29 pm

≫ Next: Hardware "Inkplate" an open source project using recycled kindle screens for custom devices

≪ Previous: Entering USB HID/Serial Download mode on KT2

Hello everybody,

I have just jailbroken a very recent pw4, serial number G000 PP13...
It came with fw 5.12.4, so I used the latest method.
I won't enter in details for safety, anyway I got to the downgraded factory firmware 5.10.1.3 and I was able to apply the jailbreak, the hotfix, install kual and all needed hacks, and now everything is running fine.

I also prevented otav3 and otaupd to run so I am now safe against OTA upgrades.

However... I am still running with the factory firmware, the kindle is not recognizing newer firmware.
I mean, I have fw 5.11.1 on my personal pw4, and it is ok, so I went to Amazon website, copied the link for latest update for Kindle Paperwhite 10th Generation, and then modified it to download version 11.1.
The file I have downloaded has the name:

update_kindle_all_new_paperwhite_v2_5.11.1.bin

So, I copied it to root folder of the kindle and I clicked the button "Update your Kindle", which was "black". The update started, ran for a while and then... "The update failed for unkown reason" (or something like that) "press the power button to restart kindle".
So I did, and it got back to the factory 5.10.1.3 automatically

I tried again putting the bin file into the kindle root folder and this time... Nothing! :blink:
I mean, not only the "Update kindle" stays grayed out as if the .bin file was invalid, but it also does not remove the .bin file from root folder like it should if it reckoned it was an incorrect firmware.
I tried downloading it again, same result.

How can the above be explained??
If there a way I can "force" the update? And why it could go wrong in the first place??

Thanks

↧

Latest Images