Firmware Update 5.16.7 out

[Quoth]

Originally Posted by j.p.s

I think the current remote deletion problem isn't remote explicit commands to to delete, but that database syncs cause the kindle itself to conclude that the user used the web site to order removal from device. Or the kindle date is wrong and the book never got entered in the server database is considered newer than the on kindle database. Of course the book info should be propagated to the server, but bugs happen.

Oh, the book deletion thing is certainly a bug.

[Strether]

Looks like the update deactivates your font ramp, if you have one. But if you delete it and reinstall it and restart the Kindle, it's activated again.

Jim

[monoxdd]

Originally Posted by JSWolf

Doesn't matter. Amazon should not be removing side loaded eBooks regardless of what firmware is in use or what Kindle it is.

Why not?

[GeorgeYellow]

This change in 5.6.7 looks mighty suspicious ...

mesquite/browser/javascripts/fileManager.js   2024-02-09 17:54:56.000000000 -0800

+/*
+ * Changes html content to text content
+ */
+function htmlToText(string) {
+    const div = document.createElement('div');
+    div.appendChild(document.createTextNode(string));
+    return div.innerHTML;
+}
+
 /**
  * Manages Browser file upload and download requests
  */
@@ -30,7 +39,8 @@

         // get dialog message
         var mf = new MessageFormat(b.strings.messages.downloadConfirm);
-        var message = mf.format({ filename: request.filename });
+        var filename = htmlToText(request.filename);
+        var message = mf.format({ filename: filename });

I don't suppose there's a way to trigger a download confirmation prompt from a "file:///mnt/us/exploit.html" URL by any chance, or does this require enabling WIFI ?

[JSWolf]

Originally Posted by monoxdd

Why not?

Do you actually want Amazon to remove side loaded eBooks from your Kindle when you turn on WiFi?

[monoxdd]

Originally Posted by JSWolf

Do you actually want Amazon to remove side loaded eBooks from your Kindle when you turn on WiFi?

i don´t sideload.

[HackerDude]

Originally Posted by GeorgeYellow

This change in 5.6.7 looks mighty suspicious ...

mesquite/browser/javascripts/fileManager.js   2024-02-09 17:54:56.000000000 -0800

+/*
+ * Changes html content to text content
+ */
+function htmlToText(string) {
+    const div = document.createElement('div');
+    div.appendChild(document.createTextNode(string));
+    return div.innerHTML;
+}
+
 /**
  * Manages Browser file upload and download requests
  */
@@ -30,7 +39,8 @@

         // get dialog message
         var mf = new MessageFormat(b.strings.messages.downloadConfirm);
-        var message = mf.format({ filename: request.filename });
+        var filename = htmlToText(request.filename);
+        var message = mf.format({ filename: filename });

I don't suppose there's a way to trigger a download confirmation prompt from a "file:///mnt/us/exploit.html" URL by any chance, or does this require enabling WIFI ?

p e r h a p s
might work on ARMHF toolchain today...

[JSWolf]

Originally Posted by monoxdd

i don´t sideload.

But others do. So would you want others to lose eBooks because Amazon deletes side loaded eBooks?

[j.p.s]

Originally Posted by Quoth

Oh, the book deletion thing is certainly a bug.

That has been the consensus for some time. The question is, what is the nature of the bug?

[jonathan2022]

Originally Posted by jhowell

I examined the Scribe firmware and there are a lot of small changes compared with the previous release. As usual most changes in the firmware that affect the user interface do not take effect until enabled remotely by Amazon. Here is a partial list:

• Per-page Scribe notebook templates and an advanced notebook template selector.
  
• Enhanced Manga navigation: "For faster navigation, press-and-hold page turning in Manga has been replaced by Page Flip. To use Page Flip, tap the icons in the bottom navigation toolbar."
  
• Pinyin deprecation, affects reader and Aa menu.
  
• Changes related to book synchronization. (Why they haven't been able to get it right after all this time is a mystery.)
  
• Changes related to the handling of page numbers.
  
• Possible selective export of notebook pages.
  
• Updates to chromium web browser.
  
• Changes to asset management related to types of content on the device and its organization.
  
• A process named Minerva for recording and reporting metrics to Amazon.
  
• An app watchdog for the main interface application, possibly to help detect failures.

Do you see all these from looking at code or is there a somewhere that lists changes. Because like everyone else I only see it saying the usual bug updates. Is there one that lists android updates too

[jhowell]

Originally Posted by jonathan2022

Do you see all these from looking at code or is there a somewhere that lists changes. Because like everyone else I only see it saying the usual bug updates. Is there one that lists android updates too

I compare the code to the previous release looking for changes.

[jonathan2022]

Originally Posted by jhowell

I compare the code to the previous release looking for changes.

I thought I was missing something. Thanks for posting these. It is very annoying how vague they are. One of the updates actually had something helpful to me. Not that they all aren't. But it enabled voiceview to continue where it left off when stopped. Not restart the who page.

[nabsltd]

Originally Posted by GeorgeYellow

This change in 5.6.7 looks mighty suspicious ...

mesquite/browser/javascripts/fileManager.js   2024-02-09 17:54:56.000000000 -0800

+/*
+ * Changes html content to text content
+ */
+function htmlToText(string) {
+    const div = document.createElement('div');
+    div.appendChild(document.createTextNode(string));
+    return div.innerHTML;
+}
+
 /**
  * Manages Browser file upload and download requests
  */
@@ -30,7 +39,8 @@

         // get dialog message
         var mf = new MessageFormat(b.strings.messages.downloadConfirm);
-        var message = mf.format({ filename: request.filename });
+        var filename = htmlToText(request.filename);
+        var message = mf.format({ filename: filename });

All this is doing is sanitizing a filename for display.

It looks like there was some exploit where the filename contained actual HTML (e.g. "<p>stuff</p>.ext") and this was just appended to the HTML output. Now, it gets converted to text and stuffed into a div (e.g. "<div>&lt;p&gt;stuff&lt;/p&gt;.ext"</div>).

[tomsem]

I was having an issue downloading a 'PDF'. Scribe was still on 5.16.6.1, I was just curious if would ever update automatically. Thought I would try updating to 5.16.7 and the download worked as expected.

[davedeacon]

Originally Posted by DenS

The same thing happened here. I had to turn on the Wi-Fi and the settings menu was updated.

Maybe if I wait long enough, with WiFi enabled, my font size will increase too...