[NST] "Security Warning" when using browser - Nook Touch General

Hi everyone, I am trying to use my rooted Nook Simple Touch for the first time since early 2020, and when using the Browser app, I keep getting this warning message
Security Warning
There are problems with the security certificate for this site.
The name of the site does not match the name of the certificate.
Click to expand...
Click to collapse
If I use Opera Mini, this problem doesn't happen. But another app which used to work for me back in early 2020 is now having Network Errors, and I found a comment somewhere in the app's github repo that it downloads data using the main browser. So I suspect that the security warning and and the app's network errors are related?
Does anyone know why this warning is happening or how to fix it? Has something changed with regards to how the NST connects to the internet via the browser since early 2020 which could be causing the issue?

sd156 said:
Hi everyone, I am trying to use my rooted Nook Simple Touch for the first time since early 2020, and when using the Browser app, I keep getting this warning message
If I use Opera Mini, this problem doesn't happen. But another app which used to work for me back in early 2020 is now having Network Errors, and I found a comment somewhere in the app's github repo that it downloads data using the main browser. So I suspect that the security warning and and the app's network errors are related?
Does anyone know why this warning is happening or how to fix it? Has something changed with regards to how the NST connects to the internet via the browser since early 2020 which could be causing the issue?
Click to expand...
Click to collapse
The NST still has a lot of life left in it, but not perhaps as a vehicle for internet browsing. You don't identify the "browser", but about the only two options for the NST at this date that I know of are Opera Mobile (or "Classic"--very similar) and Opera Mini. Of the two, the more practical and satisfying is Opera Mini. This is because the security checks are done by Opera's up-to-date servers before the site content is reformatted and sent off to the browser.
It's not perfect and some sites just won't display or won't display properly, but it's "pretty good" for infrequent and casual browsing.
Opera Mobile has settings for TLS 1.2 but their effect is spotty at best. Security requirements at web sites are a moving target and what worked last month may not work this month. And its rendering of HTML on many sites leaves a great deal to be desired. To be fair, some of the newer "tricks" just won't work with Android 2.1, so it's not all the browsers fault.
An app that uses the browser to download something? Not sure exactly what that means, but if it's using the Android Download Manager then you are probably running into the security issue either because of no TLS 1.2 (B&N only dealt with this issue for their own connection to the device) OR because a certificate in the cacerts.bks file has died since the last time you tried it successfully.
If it's the TLS thing, there's no hope. Like I said, websites and servers tighten rules all the time and there is no way to address that on the NST. If it's an expired certificate, it may be possible to track down which one has died and replace it.
For that, a logcat of a download/login/whatever attempt might be helpful (or not). Or maybe the error message mentions the certificate? If you could reference the github and/or app in question, that might help also.

Edit: See the "Edit" at the bottom this post... I looked into this more myself and found some answers
_____________________________________________________________________________
Hi @nmyshkin, thanks for your detailed reply.
You don't identify the "browser"
Click to expand...
Click to collapse
The "browser" that I'm referring to is literally the app called Browser which I think came pre-installed on the NST. (Its icon is a circle showing North and South America... let me know if you're still not sure what I'm referring to)
An app that uses the browser to download something? Not sure exactly what that means... If you could reference the github and/or app in question, that might help also.
Click to expand...
Click to collapse
The app I'm using is called Ankidroid. Here's a link to the github repo/comment which mentions using the browser to download. I'm using v2.4.4 (last stable release to support android 2.1):
- https://github.com/ankidroid/Anki-Android/issues/3075#issuecomment-125547244
- https://github.com/ankidroid/Anki-Android/tree/v2.4.4
A logcat of a download/login/whatever attempt might be helpful (or not)
Click to expand...
Click to collapse
Here is the logcat (but I removed all lines which don't contain the app name (anki) in them to remove clutter, so if it looks like something's missing let me know and I can give you the full log)
- https://pastebin.com/Du5rcT04
It looks like the following exceptions are being thrown:
- javax.net.ssl.SSLException: Not trusted server certificate
- java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: TrustAnchor for CertPath not found
Does that mean anything to you?
if it's using the Android Download Manager...
Click to expand...
Click to collapse
I tried searching through the code for DownloadManager, and I was able to find one occurrence, but it's in some xml file. Does this seem like it could be relevant?
- https://github.com/ankidroid/Anki-A...iDroid/src/main/res/values/04-network.xml#L71
... because a certificate in the cacerts.bks file has died since the last time you tried it successfully
Click to expand...
Click to collapse
How can I check if a certificate in cacerts.bks has died and fix it if that's the case?
If it's the TLS thing, there's no hope
Click to expand...
Click to collapse
Hopefully not this then :O
_____________________________________________________________________________
Edit:
I looked into that exception a bit more, and
It looks like the following exceptions are being thrown:
- javax.net.ssl.SSLException: Not trusted server certificate
- java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: TrustAnchor for CertPath not found
Click to expand...
Click to collapse
I found an issue in the github repo which references this same exception
- https://github.com/ankidroid/Anki-Android/issues/6317
A comment says that this is the cause
- https://support.sectigo.com/article...ddTrust-External-CA-Root-Expiring-May-30-2020
And another comment says that the connection won't work on older devices which don't support TLS1.2
- https://github.com/ankidroid/Anki-Android/issues/6317#issuecomment-650341494
There's a workaround mentioned in the comment (installing a sync server) so I'll try that then. Thanks for responding in this thread and helping me identify this issue

sd156 said:
The "browser" that I'm referring to is literally the app called Browser which I think came pre-installed on the NST. (Its icon is a circle showing North and South America... let me know if you're still not sure what I'm referring to)
Click to expand...
Click to collapse
I'm surprised that it worked back in 2020! That old browser is past its expiration date--and then some. I don't even have it on my devices any more.
sd156 said:
The app I'm using is called Ankidroid. Here's a link to the github repo/comment which mentions using the browser to download. I'm using v2.4.4 (last stable release to support android 2.1):
- https://github.com/ankidroid/Anki-Android/issues/3075#issuecomment-125547244
- https://github.com/ankidroid/Anki-Android/tree/v2.4.4
Click to expand...
Click to collapse
Ah. I helped someone with Ankidroid in the past although I can't find the post now.
sd156 said:
Here is the logcat (but I removed all lines which don't contain the app name (anki) in them to remove clutter, so if it looks like something's missing let me know and I can give you the full log)
- https://pastebin.com/Du5rcT04
It looks like the following exceptions are being thrown:
- javax.net.ssl.SSLException: Not trusted server certificate
- java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: TrustAnchor for CertPath not found
Does that mean anything to you?
Click to expand...
Click to collapse
Yes and no. It's clearly unhappy about the SSL but the certificate that appears to be mentioned is not the one used at anikiweb.net.
sd156 said:
How can I check if a certificate in cacerts.bks has died and fix it if that's the case?
Click to expand...
Click to collapse
I went to ankiweb.net on my PC and looked at the certificates they use. One seems to be USERTrust RSA. This is in the most up-to-date cacerts.bks for the device. Did you ever update your cacerts.bks? There is an updated file at the end of the first post in the referenced thread. You don't need to look at all the other stuff (unless you want to). In any caase, this seems to make no difference since mine is updated.
There is a second certificate from Sectigo but I can't seem to extract that from Firefox the way I do others. That's the certificate the old Browser complains about and that certificate is NOT in the cacerts.bks file.
sd156 said:
There's a workaround mentioned in the comment (installing a sync server) so I'll try that then. Thanks for responding in this thread and helping me identify this issue
Click to expand...
Click to collapse
Yeah, I took a brief look at that. Looks a bit intimidating, but perhaps not if you're motivated to get it working.
I installed 2.4.4 just to see what we were talking about. Since Opera Mini is my browser, that's what opened. It looks promising, but like many sites with non-static content, it does not display completely. You go to a topic and all you get is a search bar, not a listing of what exists (like you see on the PC). Opera Mobile simply fails to establish a connection. Not surprising.
Finally I replaced the old Browser app in /system/app and tried that out . You can get past the certificate errors by just saying to "continue" but the eventual display is just like in Opera Mini. Only a search bar appears if you select a category like "Chemistry", no listing of existing shared decks.

Related

China is blocking Market downloads since cyanogens 4.19 release.. any ideas?

Since I have upgraded to cyanogens 4.19 and later builds using the new market, It seems that 95% of my downloads are unsuccessfull. I am living in China and love my phone but can only deduce that China is blocking downloads. This occurs over both wifi and edge connections.
Any ideas how to get around this??????
Is this because of the new radio required by google? Is this because of the new market? Is this simple a flat out great firewall of china block? Are there any proxies available for the market? Any alternative to market? SSlide is very limited. Thanks
I can synch, but even that is not very stable.
I have used my phone since the dudes long ago and no problems through all roms until the 4.19 series...
Currently on c 4.21 stable... dream G1
Have you tried a different ROM perhaps? Or at the very least wiped/cleared ext3 and put CM back on?
edited your hosts with:
74.125.93.113 android.clients.google.com
203.208.39.104 www.youtube.com
203.208.33.100 gdata.youtube.com
128.121.146.228 twitter.com
168.143.162.101 assets1.twitter.com
168.143.162.101 static.twitter.com
168.143.162.101 assets0.twitter.com
168.143.162.101 assets2.twitter.com
168.143.162.101 assets3.twitter.com
168.143.162.101 assets4.twitter.com
Click to expand...
Click to collapse
74.125.93.113 android.clients.google.com
Click to expand...
Click to collapse
this is real necessary for login google account & market due to damn&f**k GFW of china
I have tried the last 2 or three cyanogen roms. Also I have tried the stock google 1.6 dev rom. I have reformatted my partitions, and wiped several times. Thanks for your reply. Any suggestions are greatly appreciated.
Doesn't China sensor certain things because it's an communist country? I'm not trying to be an ass, but that might be the reason. I think google sensors webpages and searches because of government regulations.
Ayerwin said:
edited your hosts with:
this is real necessary for login google account & market due to damn&f**k GFW of china
Click to expand...
Click to collapse
Great! Can you tell me how to do this! It is so annoying! I am having a problem even using gmail.
It has been a long time since china blocked something.
you can replace your hosts file.
Since you live in china,why not go to
www.androidin.net & www.hiapk.com
I know about these sites... the only problem is I can speak some Chinese, but not read or write it .... I hardly have time to learn so I came here!
Thanks for any ideas.. any one know how to edit the hosts as the posster a couple of posts up described?
AntiNSA said:
Great! Can you tell me how to do this! It is so annoying! I am having a problem even using gmail.
Click to expand...
Click to collapse
upzip attached and copy to /system/etc with SUFBS or RootExplorer.
or use below in windows "CMD"
adb remount
adb push "path of hosts file" /system/etc
try this
extract the 2 files to 1 folder,connect your G1 with your PC
than run push.bat and enjoy it.
You need android usb drivers&adb before doing this.
If mine doesn't work,try Ayerwin's hosts file.
replace mine hosts with his,than run push.bat.
mine method is simpler ^_^
I used the abd method from aryewin first , rebooted and tried to install the speech synthesis files from the market...It is downloading as I type this. Thank you. It is hard to say if it worked yet because 5% of the time downloads work. I will test it using the new hosts file today and report back as soon as I get some time. Thank you so much for your quick help there are so many things I use from the market this can really help if it is successfull.
i am also in china now, if you do a logcat you see that the market cannot estabilish an ssl connection
for me, a reboot (or using wifi with china unicom) fixes the problem
are you on china mobile (edge) or china unicom (umts)?
i think it is just temporary, as for me 90% of download works, and also i managed to buy 5 paid apps using market enabler
edit: putting youtube.com in the hosts file will make youtube work?? it sounds strange, che GFC is so strict in its checks (lol try to go on wikipedia to take a look for freegate, and see the epic fail, the page will load and then "magically" return an error)
i tried on my pc and i get
很抱歉,在 www.google.cn 上没找到您要访问的网页
Click to expand...
Click to collapse
(cannot find google.cn)
this is because google tried to do the smart guy, and put youtube and google on the same ip address (to avoid ip blacklisting)
unfortunately the gfc is not stupid and will do DNS poisoning on some domains...
btw i can do everything with my g1 in china, everything works, gtalk, maps, push gmail, market (except youtube, twitter, facebook, and nimbuzz)
i am using china mobile (cmnet), maybe is that you are using cmwrap+cmwap? it is no wonder that it will fail to connect if you do so...
Checking back in I can say the new hosts file made the market run great the last three hours. Its great to have unlimited access again.
Yes, I am too using cmnet. Its too bad we cant use Chinese 3g with our g1. My phone has also worked great since I got it. The best phone in the world I have ever had.
It has been my experiance that China blocks sites differently in different regions and cities. Using China Mobile here.
If you are having a problem, I would suggest you using the host file in this thread. Has worked so far for me.
cyanogen 4.21
Thanks for everyones help.
(except youtube, twitter, facebook, and nimbuzz)
Click to expand...
Click to collapse
I heard you can access twitter by android platform frome China and have seen people tweet from China using twidroid. I'm not sure if which service provider they use. But this may suggest something else wrong there.
Moreover, try to set your google service as .com instead of .cn. That one's totally useless. Massive amount of keywords are filtered out.
Good luck bro. It's really sad they are doing this do mobile network. Dunno what would happen to the iPhone network tho.
yes, it looks the market it is working good with the new hosts, but i cant tell for sure
adding youtube/twitter on the hosts file has no effect
the GFW does packet sniffing imho, it detects i am going on blogspot even if i am using a proxy!
btw, for the filtered sites, on the pc i don't care, i've setup a VPN from europe for that
you can replace google.cn with google.com, but it is not the same. you can use the automated translator, and the cached page feature only of the chinese website
and the result is the same
if you search for "freegate" on google.cn you get a warning "illegal search"
if you search for that on google.com you get a DNS error that will "kick you out" from all google-owned servers unless you do ipconfig /flushdns
btw there is a chance to use the 3g on the g1 in china, with china unicom (umts)
too bad, i went to 8 different china unicom reseller and none of them were speaking english, so i was "forced" to use china mobile (edge)
the china mobile agent insisted to give me the 30mb/month flat, as 2gb "is too much", and insisted to come back when the limit was reached
she was shocked when i come back the day after "how did you use all of the 30mb in a single day???"
wngmv said:
I heard you can access twitter by android platform frome China and have seen people tweet from China using twidroid. I'm not sure if which service provider they use. But this may suggest something else wrong there.
Moreover, try to set your google service as .com instead of .cn. That one's totally useless. Massive amount of keywords are filtered out.
Good luck bro. It's really sad they are doing this do mobile network. Dunno what would happen to the iPhone network tho.
Click to expand...
Click to collapse
I'm in beijing, people in china must use proxy to visit twitter, like dabr. Market works for me without hosts change on cm4.2.1 and KiNgxKx ROM 2.0. Thanks for these great roms.
I can use china unicom 3g, it's works ok.

Logmein

Logmein Beta available for a limited time on the market. Grab it while ya can.
FYI!
I was just about to post the same information.
The app works great. I played around with it for a few minutes. I had no issues controlling and navigating my work PC. My monitor at work is 23'' everything shows up just fine on my N1 screen.
Help
Can anyone send me the apk or point me somewhere to download it. I cannot see this app on the market.
Thanks
yeah, could somebody put this up?
Not visible in the market for me.
that rocks. thanks! i'd put up the apk, but i don't know where to find it, as i installed from market.
I'm not sure if this will work but here's the one from my Titanium Backup.
Yeah, works perfectly, thanks man.
First impression is that it's quite a bit slower than phonemypc, but we'll see where it goes from here.
Thanks alot.
Paul22000 said:
I'm not sure if this will work but here's the one from my Titanium Backup.
Click to expand...
Click to collapse
Thanks you a lot
very nice indeed. I love logmein!
Note though, this app expires on 05/31/2010.
Most likely, if they follow the ways of their other mobile platforms, this will be a Pay app on the market with a price in the range of $24.99 or more.
We'll have to see. As much as I love their service (and use it regularly on my PC's), I won't use this app on my phone enough to justify paying for this.
Personally, I'm waiting for TeamViewer app, having nothing but high praise for their application (which I believe to be the best out there - yet to encounter a firewall that would not allow me to connect through it seamlessly - AND free). It's already announced in works for a couple of months.
This works pretty dang good.
aad4321 said:
apparently a hacker has been able to obtain usernames and passwords of users logging into their logmein.com account from android devices due to insufficient encryption methods.
Logmein.com has commented on the situation and takes no accountability due to the fact that the application is still in the beta stages. Logmein.com recommends changing your user account password as soon as possible.
Click to expand...
Click to collapse
So does this mean we should not use the program until further notice?
Did you guys use anything special to install this ZIP? I've tried Astro and AndroZIP and none worked. Sorry for a potentially dumb question.
jlampson said:
Did you guys use anything special to install this ZIP? I've tried Astro and AndroZIP and none worked. Sorry for a potentially dumb question.
Click to expand...
Click to collapse
Unzip and install the .apk file
Duh. I was trying to use the one I copied off of my phone on another phone instead of downloading that file. Thanks for the help and sorry to waste your time!
aad4321 said:
apparently a hacker has been able to obtain usernames and passwords of users logging into their logmein.com account from android devices due to insufficient encryption methods.
Logmein.com has commented on the situation and takes no accountability due to the fact that the application is still in the beta stages. Logmein.com recommends changing your user account password as soon as possible.
Click to expand...
Click to collapse
Good thing I have not used it yet... [Uninstalled]
I've been using the Remote Desktop app for a while now and it works fantastic, and it doesn't have any silly security holes like the lame logmein app.
aad4321 said:
apparently a hacker has been able to obtain usernames and passwords of users logging into their logmein.com account from android devices due to insufficient encryption methods.
Logmein.com has commented on the situation and takes no accountability due to the fact that the application is still in the beta stages. Logmein.com recommends changing your user account password as soon as possible.
Click to expand...
Click to collapse
where did you read this? I can not find anything about this.

New swype beta update

Anyone one else get the email for this?
Version 1.56
Haven't seen any new stuff, but haven't really had a chance to play with it yet
Rellikzephyr
-------------------------------------
Sent via the XDA Tapatalk App
RellikZephyr said:
Anyone one else get the email for this?
Click to expand...
Click to collapse
NOPE Any chance you could PM me a dload link? Thanks
logger said:
NOPE Any chance you could PM me a dload link? Thanks
Click to expand...
Click to collapse
ditto
10char
Link in email is
https://beta.swype.com/android/get/
At work, but will try get apk uploaded to share, via pm of course, can't be naughty
Rellikzephyr
-------------------------------------
Sent via the XDA Tapatalk App
Ooh, got the email too. Gonna go play with it.
Edit: Ok, the beta swype link does not recognize my phone as an android phone if I'm using Dolphin Browser HD... had to use the stock browser to download the installer.
Got the email couple of hours ago, and just updated right now. Doesn't seem much has changed. Anyone else know whats new in this version?
Thnks, email Link is just to the installer which needs a Beta username and PW to run so no use for non beta members. But a link to the actual APK via PM would be great. Cheers.
New features/fixes are:
Added better context sensitivity for the “magic button” (go/search/enter/smiley)
Added automatic apostrophe insertion for contractions (e.g. won't, don't, wasn't, etc)
Added the Italian language dictionary
Improved sensing of field type to prevent the display and addition of passwords to the UDB (user dictionary)
Improved suppression of auto-spacing in fields such as URLs and email addresses
Updated the built-in dictionary to include several common words that were previously missing
Rewrote some settings descriptions to be more clear on their functionality
Fixed licensing issue causing “Limited Functionality” errors when rebooting devices running Android 2.0 and later
Fixed licensing issue causing some users to receive an “Incorrect ID” error when installing Swype
Fixed a bug where manually typing some words with word-prediction enabled would cause Swype to crash
Fixed a bug which caused some words added to the UDB to erroneously override other words when word-prediction is enabled
Many other minor bug fixes!
Click to expand...
Click to collapse
Source AndroidGuys
LevitateJay said:
New features/fixes are:
Improved suppression of auto-spacing in fields such as URLs and email addresses
Source AndroidGuys
Click to expand...
Click to collapse
That alone would warrant an upgrade. Text entry in URLs and emails is the reason I gave up on Skype beta. So looks promising.
Gimee gimee.
Wow! Works very VERY well
Can I uninstall the installer after I've upgraded?
I see there is a link to the APK over here if anyone else is after it.
http://forum.xda-developers.com/showpost.php?p=6740224&postcount=234
On my N1, I still had to go into Swype settings and tutorial to actually activate it. Straight away I can see the URL stuff is better. So back to using Swype for me. Yee ha...
uansari1 said:
Can I uninstall the installer after I've upgraded?
Click to expand...
Click to collapse
Sure. You dont need it at all.
logger said:
Sure. You dont need it at all.
Click to expand...
Click to collapse
Thanks bro...
The word recognition is so much faster than the original beta.
I got the email about 4 hours ago (on my N1), downloaded the software and installed it. You have to remove both Swype and the older installer else it fails. I am sure there are tons of underneath the hood improvements, but the one that I saw immediately was when you enter numbers, they show up in the suggestion list in blue.
...and pecking keys is now so much more do-able. ie when you want to enter a non word such as a password. THANK YOU Swype devs for listening and fixing those two major bummers that were there before and are fixed now. Good Stuff.
Actual swiping doesnt work for my N1 on Froyo, all stock - any thoughts? - Only outlines the texting field in blue on the edges and then no text shows up - only allows me to type like normal - this is with the 1.56
Thanks for the heads up. I did not receive the email yet but downloaded it anyways. It seems much faster so far. I guess we will see how well they did after a few days of testing.
Thanks heaps!

[MAYBE SOLVED] Turn off automatic update?

Hi!
I've updated my Kindle Fire manually to 6.2 since I read it improves performance and was still rootable. However, I've also read several reports about the Kindle Fire automatically updates itself without any user's choice of yes/no.
My question is therefore: Is there any way to disable automatic updates? If Amazon releases 6.3 and 'fixes' rooting, I probably don't want to upgrade immediately. I guess when ICS ROMs enter the scene this won't be a problem, but until then...
Update 20/12: Various reports about these suggested solutions so far. It seems like solution 2, renaming OTASilentInstall.apk, is a method many have had success with so far. Not too sure about solution 1 yet.
Solution 1
Add this line to your host file:
127.0.0.1 s3.amazonaws.com
Click to expand...
Click to collapse
It will reroute connections trying to reach s3.amazonaws.com to localhost, and therefore won't connect to the Amazon servers.
Solution 2
Rename system/app/OTASilentInstall.apk to OTASilentInstall.apk.bak or something like it.
Well, I have, and the only thing I found was this post, which suggest to de-register the Kindle. I was hoping for a more 'elegant' solution.
I find many threads discussing the 6.2 update itself, but I'm not able to find much information about disabling the automatic update feature - while keeping it online with a registered Amazon account.
That means there's still no solution for this, you can use a cooked rom, or deal with it peacefully.
Installing CM7 disables automatic updated
If search doesn't yield an answer, there isn't one. Best bet is to find what address/ip it tries to connect to for it and block it on your router or hosts file on the kindle.
Or, install a diff rom.
Wow I am surprised how often people get flamed in this forum. Treating people with an elitist snippy attitude when they ask a question degrades the quality of this forum.
Added: I read somewhere that if you rename system/app/OTASilentInstall.apk to OTASilentInstall.apk.bak that could do the trick.
Glasairmell said:
Wow I am surprised how often people get flamed in this forum. Treating people with an elitist snippy attitude when they ask a question degrades the quality of this forum.
Added: I read somewhere that if you rename system/app/OTASilentInstall.apk to OTASilentInstall.apk.bak that could do the trick.
Click to expand...
Click to collapse
Thank you so much! That's really worth a try. I'm glad someone finally answered to this thread with the main goal of helping Good to know that it's allowed to ask questions.
Appreciate it!
hachiueno said:
Hi!
I've updated my Kindle Fire to 6.2 manually since I read it improves performance and was still rootable. However, I've also read several reports about the Kindle Fire automatically updates itself without any user's choice of yes/no.
My question is therefore: Is there any way to disable automatic updates? If Amazon releases 6.3 and 'fixes' rooting, I probably don't want to upgrade immediately. I guess when ICS ROMs enter the scene this won't be a problem, but until then...
Click to expand...
Click to collapse
Use the sqlite method as explained for the nook tablet. Look for the Kindle fota.mode value and change from automatic to manual. Here is the thread.
http://forum.xda-developers.com/showpost.php?p=10973887&postcount=1
Keep it nice and friendly.
Thread cleaned
Glasairmell said:
Added: I read somewhere that if you rename system/app/OTASilentInstall.apk to OTASilentInstall.apk.bak that could do the trick.
Click to expand...
Click to collapse
That is not proven yet to actually work yet. Won't know until the next update.
Thanks a lot for your help! I updated the first post with your hints so that it should be easier to find for the next guy searching for this.
Your help is appreciated! Looks like my Kindle is ready for the future... at least its rooting
Curious that this is marked as Solved.
Solution 1
Thanks to hwong96 for this link. It's a working solution for the Nook Tablet, and obviously work for the Fire as well. However, as hwong96 wrote, the name of the fota file will differ from the BN.
Click to expand...
Click to collapse
Did you actually try this. I'm curious where you found the fota file since I don't see a similar file on the Kindle Fire. What was the fota file named and what database was it in that you found that had this option in it?
Solution 2 Yet to be proved?
Thanks to Glasairmell for this solution. However, someone said it's still to be tested until the next update is out, so not sure yet.
Click to expand...
Click to collapse
Many have made this change, but until the next update, nobody will really know.
There is no sure fired way that I've seen to prevent the next update.
Actually, there is a sure fire way... just turn off your WiFi connection. Without that, you can't get the update. Makes the device a bit useless at that point, but...
Did you actually try this.
Click to expand...
Click to collapse
Nope, thought he was sure about his advice. That's why I also wrote obviously, as I'm not sure. Maybe I should add it later after I've tried.
Many have made this change, but until the next update, nobody will really know.
Click to expand...
Click to collapse
Yes? Isn't that exactly what I wrote?
Actually, there is a sure fire way... just turn off your WiFi connection.
Click to expand...
Click to collapse
Without WiFi my Kindle would be... totally useless. No browsing, no news, no downloading... can't see the reason anymore. If I had to choose, I would rather loose root and have WiFi
Yes krelvinaz is correct. Some of the solutions above are not really proven solutions until we see what happens with the next update.
I heard that when somebody did that while off of wifi before the update, it didn't work.
Sent from my Kindle Fire using Tapatalk
Could we find the source of the update alerts/files and block them via the hosts file?
EDIT: looks like updates come from https://s3.amazonaws.com/kindle-fire-updates/update-kindle-6.2_D01E_3003020.bin
So, if we add s3.amazonaws.com, we should block the update from downloading.
Edit 2: added to my own hosts. Now we wait.
Sent from my Kindle Fire using xda premium
I'm about to receive an un-sealed KF next month, that means it's still on 6.1 (I guess), so can you guys recommend the most effective solution to disable update ? I will try and report later (if 6.3 has't come out yet)
So, if we add s3.amazonaws.com, we should block the update from downloading.
Click to expand...
Click to collapse
Excuse me, but how can I do this ?
mr_gem said:
I'm about to receive an un-sealed KF next month, that means it's still on 6.1 (I guess), so can you guys recommend the most effective solution to disable update ? I will try and report later (if 6.3 has't come out yet)
Excuse me, but how can I do this ?
Click to expand...
Click to collapse
You must have root. Use your favorite root file viewing tool, navigate to /etc, open the hosts file in the text editor and add a new line at the bottom of the file that contains the following
Code:
127.0.0.1 s3.amazonaws.com
What this does is redirect any requests to s3.amazonaws.com to 127.0.0.1, aka localhost (your kindle), causing a timeout.
EDIT: alternatively, you could use an application such as AdAway and add it to the blacklist through such a app as well. Most android ad blockers work by modifying the hosts file.
Sent from my Kindle Fire using xda premium
kjwalker said:
You must have root. Use your favorite root file viewing tool, navigate to /etc, open the hosts file in the text editor and add a new line at the bottom of the file that contains the following
Code:
127.0.0.1 s3.amazonaws.com
What this does is redirect any requests to s3.amazonaws.com to 127.0.0.1, aka localhost (your kindle), causing a timeout.
EDIT: alternatively, you could use an application such as AdAway and add it to the blacklist through such a app as well. Most android ad blockers work by modifying the hosts file.
Sent from my Kindle Fire using xda premium
Click to expand...
Click to collapse
i did this then opened a browser and put in s3.amazonaws.com and it still loaded... rebooted, same thing so i would say this doesn't work
screwyluie said:
i did this then opened a browser and put in s3.amazonaws.com and it still loaded... rebooted, same thing so i would say this doesn't work
Click to expand...
Click to collapse
I am skeptical that this will prevent the OTA (simply could come from another source), but when I added this to the hosts file, the site will not load using that URL.
In the silk browser... Web page no available.
In Opera Mini... Network problem loading site.
So I am guessing you didn't do something. ??

Strange popup

Hi guys
I was on Reddit News app yesterday and just about to click on one of the articles when this popup appeared. Well it seems to have got my phone correct even though it is a poor judge of the battery.
I didn't click on the OK button but just pressed the back key. I've run several apps to detect any malware and my phone seems to be clean.
Any idea what this is?
Oh and i've checked out that odd looking website and it says "Forbidden" but it does exist because after doing some tests it seems to be located in Lansing(Michigan) in America.
If it isn't virus, it's malware for sure
Which apps you ran to detect the malware? I want to know so I don't have to install them.
It looks like a malware, but server seems to be misconfigured. I can't get past the error page.
sametkck said:
It looks like a malware, but server seems to be misconfigured. I can't get past the error page.
Click to expand...
Click to collapse
You mean the error page for the website which shows this?:
Forbidden
You don't have permission to access / on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Click to expand...
Click to collapse
I should also add that there's no mention of it in google, which seems odd.
votinh said:
If it isn't virus, it's malware for sure
Which apps you ran to detect the malware? I want to know so I don't have to install them.
Click to expand...
Click to collapse
I used Lookout and Zoner, and also avg now. None of them picked up anything.
The website com-2.me has the IP 209.59.143.234 and is associated with 2 other websites, both of which have been labelled as suspicious on Net Valuator so that doesn't seem good

Categories

Resources