A PlayStation 5 jailbreak package targets consoles running firmware 7.00 through 13.60 and provides an exploit chain that can be launched from the PS5 browser or by hosting a local Python server. Setup options include changing the console’s primary DNS to a supplied address or visiting a hosted exploit page; successful runs drop default payloads into a payloads directory and an ELF loader listens on port 9021 for further interaction. The release includes usage instructions, a MIT license, and practical stability tips: the WebKit-based browser stage often requires multiple reloads, and the kernel stage can hang or panic the system, so a reboot between attempts is recommended.
The exploit’s technical substance combines a browser-stage JSC information leak and a structured-clone object pool mismatch to corrupt a typed array, then escalates to kernel by leaking addresses and exploiting an aio_multi_wait use-after-free race to obtain kernel read/write. Contributors credited include multiple well-known researchers in console security, and the package is explicitly distributed for educational and security research purposes only, warning of risks like instability, data loss, and account bans. Popularity metrics indicate substantial community interest, reflected by hundreds of stars and many forks.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A U.S. immigration advocate sued the government after a border agent searched his phone without a warrant and copied data. He believes the government targeted him due to his activism and political work on immigration rights. (arstechnica.com)
Over 44,000 legal objections have been filed against Palantir's NHS data platform, demanding it be blocked from handling medical data. The campaign follows backlash over the company's involvement with the Israeli military and US immigration enforcement. (theguardian.com)
OpenAI claims that a Chinese AI model stole its intellectual property. The company alleges that it had previously appropriated IP from other sources. (theregister.com)
Android developers face new requirements to publish apps, including a $25 verification fee and identity verification, even for small-scale projects. These policies have caused frustration among developers who want to share their apps freely without extensive registration processes. (twitter.com)
Christa Pike, the only woman on Tennessee's death row, was reportedly still alive after receiving two lethal injections. Her lawyers are seeking to halt her execution, citing that she remained conscious and had a heartbeat despite the injections. (nbcnews.com)
Sandboxing alone may not be enough to contain rogue agents, as advanced attackers can find ways to bypass these security measures. Additional cryptographic and security strategies are necessary to effectively limit malicious activities. (blog.cryptographyengineering.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.