Will Javscript embedded in a HTML document execute when sent to my Kindle
Fire as a document?
I'm basically trying to run some javascript that will help me locate my
lost/stolen Kindle Fire (html5 geolocation based on wifi access points,
then an ajax request to a hosted PHP which sends me an email).
It all boils down to, if someone was to open a document that I send to it,
which contains javascript – will the javascript execute, or will it just
fail?
Amazon provides no way to locate a lost device via GPS or other means so I
am trying this. Anyone have experience trying to do something like this? I
wish I had another device to test on but I don't. The security
implications of this exploit are kind of interesting — if it's even
possible — although Kindle does expect any emailed documents to come from
an email that is in a 'trusted' list managed through your amazon account.
No comments:
Post a Comment