bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io
hackerone.com/reports/1379975
hackerone.com/reports/1379975
Fixed on PS4 FW 9.50 and PS5 FW 5.00
I used a BD Burner and BD-RE discs from Verbatim. Do not buy BD-R discs as are only writable once.
I wanted to clarify: Without a kernel exploit, you won't be able to run any pirated games (which would have worked on the PS4 only anyways), because we don't have enough RAM in the bd-j process and there are some other constraints. It was only a theoretical impact.
Advantages of bd-jb compared to WebKit exploit:
- Works on both PS4/PS5
- 100% reliable
- Firmware-agnostic (ROP-less code execution)
- Bigger kernel attack surface
- JIT for executing payloads, so you can write a kernel exploit in C (on PS4 only)
- Works on both PS4/PS5
- 100% reliable
- Firmware-agnostic (ROP-less code execution)
- Bigger kernel attack surface
- JIT for executing payloads, so you can write a kernel exploit in C (on PS4 only)
I decided to upload the slides of the talk already: github.com/TheOfficialFlo…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
