How to prevent uncommanded updates from amazon - 7" Kindle Fire HD General

Would like to begin a thread to get everyone's suggestions and ideas on how we can stop what happened with 7.2.2. We should have the power to choose when and where we update the devices we paid for, not Amazon. Any suggestions?.
I began by looking at the system files and the two that caught my attention were Amazon.device.client.platform and the download file. I froze both with Titanium.
Sent from my KFTT using xda premium

There's a few suggestions about updates here: /showthread.php?t=1386463

I just renamed the otacerts file.. still 7.2.1

How did you identify that file?
Sent from my SPH-L710 using xda premium

ameswilliam said:
How did you identify that file?
Sent from my SPH-L710 using xda premium
Click to expand...
Click to collapse
it was in another post.... it is in system/ect/security/otacerts.zip i do believe
renamed it and all stayed well with thusfar no updates

Thanks. I'll try this.
Sent from my SPH-L710 using xda premium

Ok, I renamed otacerts.zip.bat. Let's see if it works.
Sent from my SPH-L710 using xda premium

I renamed otacerts.zip yesterday....now I am on 7.2.2 till now. Will see tomorow.
May be this is really the solution for non OTA updates. :highfive:

I don't think renaming it is gonna do anything, i had renamed it prior to the last updated and still got it. However using the droidwall firewall, I have only enabled the apps I want to access the internet. Mainly blocking the system files and I am thinking that its gonna work.

xxsurfacexx said:
I don't think renaming it is gonna do anything, i had renamed it prior to the last updated and still got it. However using the droidwall firewall, I have only enabled the apps I want to access the internet. Mainly blocking the system files and I am thinking that its gonna work.
Click to expand...
Click to collapse
I deleted it rather than rename and have never gotten an update since the device was released.

Xyth said:
I deleted it rather than rename and have never gotten an update since the device was released.
Click to expand...
Click to collapse
Renaming it always worked on the old kindle fire and it seems to work on this one as well. I had renamed it, by placing the word backup right at the beginning and I didn't get the 7.2.3 update. I changed it and renamed it back to the original name and within 20 minutes my kindle had rebooted and updated itself.
If you want to make sure, maybe rename it and move it to another folder. I also did that once and it worked.

jacewt said:
Renaming it always worked on the old kindle fire and it seems to work on this one as well. I had renamed it, by placing the word backup right at the beginning and I didn't get the 7.2.3 update. I changed it and renamed it back to the original name and within 20 minutes my kindle had rebooted and updated itself.
If you want to make sure, maybe rename it and move it to another folder. I also did that once and it worked.
Click to expand...
Click to collapse
I renamed mine otacerts.bak when I did it still on 7.2.1 this was the only ota precaution I took... I have to wonder what the other guy did and what build he was on

Droid Wall
So after being updated to 7.2.2, I installed Droid Wall to block OTA updates instead of renaming the OTACERT file.
Unfortunately my device updated yesterday (to 7.2.3). So I feel the Droid Wall either did not work or the following system apps on the white list allowed Amazon of get access to OTA:
Amazon MP3
Appstore
IMDb
E-mail
Search
Shop Amazon
Download Manager, Downloads, DRM-Protected Content Storage, Media Storage
Silk
Have re-rooted, moved OTACERT file to a backup folder and removed Download Manager & Silk from Droid Wall's White List. Hopefully this should solve the OTA update issue. Though, I do realize that Google Play does not download app's without Download Manager.
Anyone else had similar experiences?

Glad to see we're having a discussion on this very critical issue. Having a vendor push unauthorized updates is not cool in any way.
I have installed Droidwall and blocked the following system files:
- 32028 Amazon Device Platform (ADCP)
- 32023 Amazon Runtime
- 32026 Docs
- 32030 INCh
- 32030 Kindle Free Time
- 32020 Kindle Setup
- 1013 Media Server
- 32033
- MobileAunthenticationPlatformAndroid
I've also frozen the following system files using Titanium:
- AmazonDeviceClientPlatform
- Amazon Game Circle
- Amazon keyboard
- Audible
- DRM ProtectedContentStorage
- Parent Controls
- Photos
- Silk
- Talk
- Yahoo Sync
Now that I think about it, I bet Amazon is unable to download anything using a third party browser like Dolphin. So disabling Silk should be one of your first steps.
FYI, my fire HD didn't update to 7.2.3 and the "update" button under "device, about" is disabled. My kindle is still running 7.2.2 and everything is running sweet.
Sent from my KFTT using xda premium

xxsurfacexx said:
I don't think renaming it is gonna do anything, i had renamed it prior to the last updated and still got it. However using the droidwall firewall, I have only enabled the apps I want to access the internet. Mainly blocking the system files and I am thinking that its gonna work.
Click to expand...
Click to collapse
I think we can almost safely say that renaming the otacerts file will prevent updates. I, like many other, also did that and my KF7 hasn't been updated for weeks. Seems to be a working method, unlike the various apps people are trying (without much success). Good luck

QwErTy1235 said:
I think we can almost safely say that renaming the otacerts file will prevent updates. I, like many other, also did that and my KF7 hasn't been updated for weeks. Seems to be a working method, unlike the various apps people are trying (without much success). Good luck
Click to expand...
Click to collapse
I'm inclined to agree. I have two KF7-HD devices. Both had been rooted when on 7.1.1; I had disabled most Amazon items that made sense in Droid Wall and I received the 7.2.2 update. I re-rooted successfully on 7.2.2. In addition to the Droid Wall, I renamed the OTAcerts file and I pointed the host name s3.amazonaws.com at 127.0.0.1 in the hosts file. I have not received any new updates as yet on either of the Kindles.
To take this a step further, I don't think Droid Wall will have any bearing on it from a logical point of view. From my recollection of the previous updates I saw happen, there was a push from Amazon during the bootup of the device --- it was booting and the boot would take extra long when a screen would then proceed to say updating; in this scenario, it never got to the first screen where one moves the pad lock. Logically, that tells me that Droid Wall never had an opportunity to start and prevent anything at all. Any prevention of "pushed" updates has to take place as the system is starting up. That means certain system files need to be disabled or it has to be prevented from even being able to see the update server.

I noticed today I had the 7.2.3 file in downloads directory... otacerts must have stopped it from installing
Sent from my KFTT using xda app-developers app

Yes that does make sense but weird since I got the update even when I had changed the otacerts extension.
Sent from my KFTT using XDA Premium HD app

xxsurfacexx said:
Yes that does make sense but weird since I got the update even when I had changed the otacerts extension.
Sent from my KFTT using XDA Premium HD app
Click to expand...
Click to collapse
I changed the otacerts FILENAME, not the extension. (otacerts-bak.zip) The update may search for a filename called "otacerts" regardless of extension.

What will happen if I get an ota update? Will I just lose root?

Related

How to disable Verizon's OTA updates

I'm sure there are some frustrated Incredible owners here that are upset after the last OTA update and really don't want to go through this again until they know for sure what is in the update, so I did some searching and found out how to disable future updates in your Dinc. I understand that you don't have to run the update but the constant nagging from the update and waiting for the solution to disable it is frustrating so. I found this on CDMA GURUS
Edit: 11/26/11 This new method comes from iowabowtech and so far this has worked. Thank you iowabowtech!
-Open Root Explorer and make sure you're mounted as Read/Write.
-Navigate to /system and long press on build.prop, then select the "Open in text editor" option and look for a similar line that specifically includes the xxxxxx:/user. Edit that line to this:
ro.build.fingerprint=verizon_wwe/inc/inc/inc:2.3.4/GRJ22/222219:user/release-keys
This should make the phone think it's up to date. That said though, I doubt there will be any more updates to this phone.
Alternate method
This method had been known to make the data run constantly so I suggest that you freeze your downloads with a program called "anttek". If you go to download something to your phone, you will have to unfreeze downloads first. This seems to improve battery life also.
To turn OFF future OTA updates, there is a file in the /system/etc/security folder. The file is named "otacerts.zip". Rename it "otacerts.zip.bak", or whatever you want. That will prevent future updates.
You can change that filename using ADB, the root explorer app, or a terminal emulator app of choice right on your DROID. I use root explorer because it is easy and fast. But that's just me...
Using Root Explorer... If you are using Root Explorer to do this and it says "the file system is read only" Just touch the white button at the top that says "mount r/w" and then try it again.
If you are here trying to figure out how to disable the notification for the update you already have (for Froyo) but have not installed yet, then that's in another thread. Here it is... http://forum.xda-developers.com/showthread.php?t=836120
thanks for the tip! i tried using root explorer like you, but its telling me the .zip (and anything pertaining to security folder for that matter) is read only and denying me access to rename. how'd you get past this?
heathhandsome said:
thanks for the tip! i tried using root explorer like you, but its telling me the .zip (and anything pertaining to security folder for that matter) is read only and denying me access to rename. how'd you get past this?
Click to expand...
Click to collapse
You have to click the Mount R/W up in the top right
heathhandsome said:
thanks for the tip! i tried using root explorer like you, but its telling me the .zip (and anything pertaining to security folder for that matter) is read only and denying me access to rename. how'd you get past this?
Click to expand...
Click to collapse
Not a problem!
Thanks for the tip..quick and easy!
Sent from my ADR6300 using XDA App
BigEaredMonkey said:
Thanks for the tip..quick and easy!
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
Yep! I haven't had any notifications for an update at all! Just gotta get this in before the update reaches you.
any other methods to do this? I dont have RE or ADB. Can I use astro? Sorry noob here
Sent from my ADR6300 using XDA App
TokedUp said:
any other methods to do this? I dont have RE or ADB. Can I use astro? Sorry noob here
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
If you are new to this, then the easiest way to do this is with Root Explorer. It's only a few bucks and it is WELL WORTH IT!!! You can do so many things with RE.
This could come in handy right about now.
Thanks for the tip!
TokedUp said:
any other methods to do this? I dont have RE or ADB. Can I use astro? Sorry noob here
Click to expand...
Click to collapse
Another noob asks: adb is free, right? (or Android Commander for windows) I want to save my precious bucks to donate to ROM authors.
ps. OP is 2010--seems like the 2011 fix is the same. Correct?
ADB is free. Since I can't post links, if you Google "what is adb and how to install it" the first hit should be an addictivetips article that got me started.
As for a free app that will do the job right on the phone, ES File Explorer is free and works well for me.
So this is definitely useful, except there are threads that claim this messes with battery life as the phone will continually download the update, it will fail whatever check otacerts.zip does, and try again.
- http://androidforums.com/droid-all-things-root/60085-otacerts-zip-bak-will-drain-battery-life.html
- http://forum.xda-developers.com/showthread.php?t=700577
This says it didn't block a recent OTA on the Thunderbolt:
http://teambamf.net/showthread.php/2571-Does-renaming-otacerts.zip-block-ota
If I keep ignoring for now, will it come to a point where VZW can force the push and mess up my root?
So just for clarification, does this prevent it from downloading the update or just prevent it from notifying you?
americalexander said:
So just for clarification, does this prevent it from downloading the update or just prevent it from notifying you?
Click to expand...
Click to collapse
It prevents the download. The post up above says that your phone will try to download the update over and over if you rename the otacerts and I have actually experienced this. I downloaded an app called "anttek" and fixed this issue by freezing downloads. Whenever I go to download something, I have to unfreeze downloads but that is no big deal because I hardly ever download anything to my phone. Also, I have experienced better battery life with the downloads frozen, up time is at 18 hours and I still have 25% battery left on a standard battery.
ejdavis72 said:
It prevents the download. The post up above says that your phone will try to download the update over and over if you rename the otacerts and I have actually experienced this. I downloaded an app called "anttek" and fixed this issue by freezing downloads. Whenever I go to download something, I have to unfreeze downloads but that is no big deal because I hardly ever download anything to my phone. Also, I have experienced better battery life with the downloads frozen, up time is at 18 hours and I still have 25% battery left on a standard battery.
Click to expand...
Click to collapse
Surely there is a better solution than this. As it stands I can't use my AOSP rom (inc deck) because of the constant battery drain induced by the constant downloading. I dont find the above solution a compelling one, and considering there's no real way to accept an update on AOSP roms it looks like I'm going back to sense for now.
Sent from my Droid Incredible using the XDA app.
Div033 said:
Surely there is a better solution than this. As it stands I can't use my AOSP rom (inc deck) because of the constant battery drain induced by the constant downloading. I dont find the above solution a compelling one, and considering there's no real way to accept an update on AOSP roms it looks like I'm going back to sense for now.
Sent from my Droid Incredible using the XDA app.
Click to expand...
Click to collapse
I'm sure there is a better solution, but I don't know it.
-Open Root Explorer and make sure you're mounted as Read/Write.
-Navigate to /system and long press on build.prop, then select the "Open in text editor" option and look for a similar line that specifically includes the xxxxxx:/user. Edit that line to this:
ro.build.fingerprint=verizon_wwe/inc/inc/inc:2.3.4/GRJ22/222219:user/release-keys
This should make the phone think it's up to date. That said though, I doubt there will be any more updates to this phone.
thanks! wish I'd read this about 4 days ago!
I am using Redemption ROM 2.3 and changing that line did nothing for me. I still get the nag. I've rebooted twice and dismissed the update at least 10 times.
Anyone?

[Q] Buying apps from Android Marketplace

I've checked as well as I could in KF forum and haven't run across this problem. When I try to download select apps Google Play it tells me they aren't compaible with my device. One was Draw something and I could use an .apk I got from 4shared before they updated it so I know it works. Is there a known solution to this. I've read about changing a file in \system but as far as I can tell that dir doesn't exist. I would think KF would have to have that, I just can't get to it.
Also what exactly does the Replace Framework-res in the KFU do? Does in just replace everything if you screw it up?
I remember when I had my nook color I was able to change some txt file to make the nook appear as a another device allowing more access to apps I didn't have before. I believe Paul O'Briens rom currently does that. Not sure how its being down now but you might find something there.
Sent from my Amazon Kindle Fire using xda premium
Yeah I figured out the whole \system business and feel retarded from that. Ill try editing tomorrow and if that's too much ill just check out that mod. Thanks for the help.

How do i fix netflix app that's there but isn't?

New Android ver. 4.1 installed but I made mistake and uninstalled Netflix app. I tried to download new version of Netflix but system said it was already installed so it won't download it for me. Apparently, when I uninstalled Netflix it took out the app but didn't delete it from some app table or internal index that Android uses. How do I overcome this problem?
jborchel said:
New Android ver. 4.1 installed but I made mistake and uninstalled Netflix app. I tried to download new version of Netflix but system said it was already installed so it won't download it for me. Apparently, when I uninstalled Netflix it took out the app but didn't delete it from some app table or internal index that Android uses. How do I overcome this problem?
Click to expand...
Click to collapse
I'll take a wild guess that the Netflix app came with your tab pre-installed? If this is the case, it more than likely is located in /System/App. So to remove it, you will have to root your device, and get system RW access. Otherwise, it and the rest of the pre-installed bloat apps, will be there forever more.
MD
Moscow Desire said:
I'll take a wild guess that the Netflix app came with your tab pre-installed? If this is the case, it more than likely is located in /System/App. So to remove it, you will have to root your device, and get system RW access. Otherwise, it and the rest of the pre-installed bloat apps, will be there forever more.
MD
Click to expand...
Click to collapse
I got lucky and found, I'm not sure how, a down-loadable new version for 4.01 that didn't have a problem with replacing the old version, if it was actually still there. So I am back in business. Thanks for taking the time to help. I'm lucky because I do not have any idea how to root the device.
jborchel said:
I got lucky and found, I'm not sure how, a down-loadable new version for 4.01 that didn't have a problem with replacing the old version, if it was actually still there. So I am back in business. Thanks for taking the time to help. I'm lucky because I do not have any idea how to root the device.
Click to expand...
Click to collapse
Can you either post the link to the netflix version or post the apk?

SnowMOD: Custom ROM for Black and White Ereaders. [STILL NEED DEVS AND BETA TESTERS]

Alright, this mod is dedicated to mariog, who helped me to not give up on this idea.
Now, on to the MOD...
This mod is a ROM that gives the NST an experience that is as-close-as-possible to legitimate Android. This mod will be flashed using the CWM for NST. There's one problem, I had a release ready, but when I tested it, well that's another story. The point is, I deleted alpha-1 in a fit of rage over it not working, so, I need more devs to help me build this, because A.) I can't dedicate my every waking hour to this. (I'm in school most of the time) B.) Because my first attempt failed even though I looked it over like a Trillion times. Obviously I'm doing something wrong.
In the future, I hope to branch this mod out to other black and white Readers, But at this point, I'm just worried about the NST.
THE MOD WILL INCLUDE:
-The best homescreen possible for the NST (Was using stock 2.1 Eclair launcher, not sure what is best. Launcher 7 looks good)
-Barnes & Noble stock reading apps
-B&N OOBE. (Modified?)
-Android Market/Gapps
-Dropbox included in install
-No bloatware (ie: phone.apk etc)
-Best NST internet browser (opera mini) installed as default browser
-"Chef's freezer" app (look it up)
-Probably more.
-I will also include a minimalistic version. (No: dropbox, browser, freezer, Gapps other than Gmail)
All I need is devs willing to devote just a little bit of their time to this project.
Note: ROM based on android 2.1, I will try to do 2.3 once CM7 support is made for the NST.
Note2: All you readers will be lucky if I get any sort of release anytime soon. Don't rush me. If you want to get this fast, then you can help me! I need beta-testers and devs anyways. No unofficial releases will be made to non beta-testers. If you want them, become a beta-tester!
Origins of SnowMOD
Original Thread: .
First betatester of course.
And I have made progress! Couldn't unzip the stock update file in Mac or Raspbian Linux. (yes I code with a R-PI) Now, I have borrowed my friends windows machine and success! But, it is slow, and not a permanent fix. How do I unzip the update in Linux or OSX? When I try in OSX the .zip file unzips to .tar.gz and THAT unzips to .zip and so on. I am using the regular OSX unarchiver. In Linux, the unarchive just fails. (Any suggestions on that? I'm good with android, but OSX is a mystery to me)
Anyway, I have most of /system/app done, and I am REALLY exited. It looks like this project isn't going to fail, but I NEED MORE DEVS!!!
Mineturtle33 said:
And I have made progress! Couldn't unzip the stock update file in Mac or Raspbian Linux. (yes I code with a R-PI) Now, I have borrowed my friends windows machine and success! But, it is slow, and not a permanent fix. How do I unzip the update in Linux or OSX? When I try in OSX the .zip file unzips to .tar.gz and THAT unzips to .zip and so on. I am using the regular OSX unarchiver. In Linux, the unarchive just fails.
Sent from my NookColor using xda app-developers app
Click to expand...
Click to collapse
It might be because the B&N zips are signed and that causes problems with some unzip programs. Stripping the first 0x1a3 (419) bytes off the start of the file takes the signature off and turns it into a unsigned zip that most unzip programs don't have problems with.
I can become a beta tester
Sensation / Tapatalk
I forgot to say thanks for the dedication
Don't mention it, its only fair.
Sent from my NookColor using xda app-developers app
straygecko said:
It might be because the B&N zips are signed and that causes problems with some unzip programs. Stripping the first 0x1a3 (419) bytes off the start of the file takes the signature off and turns it into a unsigned zip that most unzip programs don't have problems with.
Click to expand...
Click to collapse
Cool, what program can I use to perform this action? BTW winrar is working on windows, but I don't have permanent access to that computer.
Sent from my NookColor using xda app-developers app
Mineturtle33 said:
Cool, what program can I use to perform this action? BTW winrar is working on windows, but I don't have permanent access to that computer.
Sent from my NookColor using xda app-developers app
Click to expand...
Click to collapse
dd if=signed.zip of=unsigned.zip bs=419 skip=1
YES! Thank you. i will try that.
Getting to work now... Using my Raspberry Pi.
Sent from my NookColor using xda app-developers app
If you still need beta testers
Or a designer, i would like to help out!
I've decided to stick with reader only mode for a while after I accidentally triggered a wipe with the NookColor Tools application, but I'll reroot and test as well if needed when the time comes.
Mimefly: yes, I still need testers, and by designer, I'm guessing you mean dev.
Neoman: OK, I'm including NC tools unless you know of a different way to enable 3rd party apps.
Sent from my NookColor using xda app-developers app
Mineturtle33 said:
unless you know of a different way to enable 3rd party apps.
Click to expand...
Click to collapse
Code:
adb pull /data/data/com.android.providers.settings/databases/settings.db settings.db
sqlite3 settings.db
update secure set value=1 where name='install_non_market_apps';
.q
adb push settings.db /data/data/com.android.providers.settings/databases/settings.db
Thank you Renate NST.
Now I just want to know, how many people want NookColor Tools in this?
How many people want an alternative?
Sent from my NookColor using xda app-developers app
NCT is quite useful, just also useful to know that certain options within it trigger a no confirmation reset to stock. I wasn't intending to deride it. Haven't rerooted since I realized the only tablet mode features I'd been using with any regularity were replacing the screensaver banner with an "if lost, contact" message and a persistent battery bar, with occasional use of a third party reader to download new books without connecting it to the computer
I was already aware of this issue with factory resets. That is why I am wary of including NCT in the ROM.
PROGRESS:
After getting tons of help from friends, I am pleased to announce that release #1 is coming VERY soon. Lots of help has significantly sped up the development process.
What I did:
-adb pushed my modified /system/app (Everything worked great!)
Release will include:
-Launcher7
-Amazon App Store. (No Android Market YET, sorry)
-ADB Konnect.
-Device Registrator
-Opera Mobile
What I don't have working YET:
-Bloatware still exists in /system/app (ie: Phone.apk, Messaging.apk) I don't yet know if it is safe to simply delete them. Release #2 will include a fix.
-No Chef's Freezer. (I have no excuse, sorry)
-No NookColor Tools. (3rd party apps is enabled)
-I don't think that this will be CWM flashable. It will probably be a dd .IMG file, but I am currently not sure.

Where is the OTA update located (folder) on a FireHD 10 (2019)?

I've just rooted my FireHD 10 (2019) using the Bootless Root Method and whilst it's only partial root it's enough for me to disable the OTA update stuff via ADB (using the Amazon Fire Toolbox V6.5).
I also installed IceBox and disabled a bunch of other stuff that the Amazon Fire Toolbox V6.5 doesn't do.....
I've installed a new launcher and everything works fine
However during the setup I had to connect to Wifi and it did a background OTA update...
It offered me to update at some point during setup which I (obviously) declined.
I also checked background app usage and it showed that OTA app download about 450mgs which i assume is the update.
Although I have disabled all the OTA stuff I would prefer to get rid of the file.
Does anyone know where it is located?
Thanks
It is probably in '/cache'.
MontysEvilTwin said:
It is probably in '/cache'.
Click to expand...
Click to collapse
Thanks, unfortunately it wasn't there.
However I just systematically went through the folders large enough to house it...
I eventually found it in /data/ota-package/ it was a 400mg or so bin file called update-maverick-diffxxx.bin .
I made a backup in case I was wrong and then deleted it.
On inspecting the backup... it is indeed a zip file containing an ota.prop with a version_name=Fire OS 7.3.1.2.

Categories

Resources