How $266 and four AI models rooted an Amazon Fire HD tablet

An engineer who used a 2021 Amazon Fire HD 10 as a permanently powered wall dashboard has published a detailed account of rooting the tablet so that Amazon's software would stop shutting it down, using four different AI models and $266.15 of model usage.

A kiosk that kept switching itself off

The Fire HD 10 (11th generation) was bought new and sealed on eBay on 29 November 2022 for $114.26, and ran Fully Kiosk Browser with a Home Assistant dashboard around the clock. In November 2025 it began performing full shutdowns, sometimes twice a day; telemetry pointed to a software shutdown requested by something holding shutdown permissions. Five Amazon services with reboot and shutdown rights were disabled, which held for a few months — but three protected packages, including the OTA updater com.amazon.device.software.ota, could not be disabled without root, and no root method existed for this model.

Four models, five months, one unpatched bug

Claude Code spent five months on diagnosis before safeguards started flagging the sessions; the author records that it was blocked even from summarising its own earlier work on his own device. On 13 August he switched to opencode with Moonshot AI's Kimi K3, which extracted the kernel from Amazon's OTA image and checked the known Mali GPU bugs against it. One was still open: CVE-2022-38181, a use-after-free in Arm's Mali kernel driver found by Man Yue Mo of GitHub Security Lab, fixed by Arm in October 2022 and patched by Amazon only in June 2024. His tablet ran Fire OS 7.3.2.6.

That session ran 621 messages and cost $164.25; the memory-write primitive worked, but most of more than 500 attempts ended in kernel panics. GLM-5.2, at $21.90, worked overnight, found a fatal design error and then hit what it believed was a hardware wall — no CPU-GPU cache coherency on the chipset. A ChatGPT consultation agreed; both were later proved wrong.

One day with GLM-5.3

Z.ai shipped GLM-5.3 on Friday 14 August under the tagline “Frontier Coding with Emergent Cyber Capabilities”. On an $80 monthly Coding Plan the handoff was passed on 16 August at 8:26 AM with the instruction “finish the job”. By the afternoon the model had found the real fault: the offsets were not randomised but shifted, because the device's kernel build differed from the OTA image and MediaTek lays out the Mali driver's page tables differently from Arm's reference source. At 4:34 PM SELinux was permissive; by 6:54 PM it reported that the owner had the device back.

Root then removed roughly a hundred Amazon packages with pm uninstall --user 0, including every package holding reboot or shutdown rights. The removals live in user data, so they survive restarts, and the model refused anything that risked bricking the tablet. The kiosk has not shut down since.

Why it matters

The author, twenty years in engineering and infosec, frames the result around ownership and who is allowed to help whom: US frontier models refused several times, while Chinese models reasoned their way to proceeding. Rooting a tablet you own falls under the US DMCA exemptions through October 2027, nothing in the exploit chain is novel, and the only unusual thing about his unit was that it never received the 2024 patch.