Author: Black Hat - Bewertung: 3x - Views:32
Amazon's Kindle is the most popular e-reader on the market, with an extensive ecosystem of e-books. From a security perspective, Kindle devices especially stand out because they are often linked to an Amazon account.
Their complex software stack supports numerous e-book file formats (AZW, MOBI, PDF...), as well as many underlying media formats that increase the attack surface. As such, downloading an e-book from the store may allow an attacker to gain root access to the device, take control of the Amazon account, and steal credit card information.
In this talk, we will dive into the internals of Kindle devices and discuss a $20,000 bug in the parsing of Audible audiobooks which allowed us to take full control of the e-reader. We will also share general insights on fuzzing file formats based on the MPEG-4 standard (ISOBMFF).
By: Valentino Ricotta | Security Researcher, Thales
https://blackhat.com/eu-25/briefings/schedule/?#dont-judge-an-audiobook-by-its-cover-taking-over-your-amazon-account-with-a-kindle-48836
SOCIAL SHARE CARD GENERATOR