Sony Bug Bounty Program Works: A Programmer Found a Way to Run Pirated Games on PS4
A few weeks ago, Sony and the HackerOne platform announced a bug bounty program for detecting vulnerabilities in the PlayStation Network and PlayStation 4 security systems.
The company provided everyone with the opportunity to check the protection of PlayStation Network and PlayStation 4. Depending on the threat's severity, the reward amount ranges from $100 to $3,000 for vulnerabilities in the PlayStation Network. While with PlayStation 4, the maximum reward for critical vulnerabilities reaches $50,000.
Information security specialist Andy Nguyen discovered a critical vulnerability in the software of the PlayStation 4. The vulnerability was eliminated four months ago. The hacker did not publicize it, but addressed to Sony instead, and received a reward of $10,000.
He told about his discovery on Twitter under the nickname @theflow0.
Here you are, https://t.co/cdVyvdqGZ6, PS4 kernel exploit for FW 7.02 and below. Vulnerability discovered on 2019-06-09.
— Andy Nguyen (@theflow0) July 6, 2020
This must be chained together with a WebKit exploit, for example https://t.co/1BYe1aFGCe for FW 6.50.
Nguyen found an exploit in version 7.02 that allows you to hack the PlayStation and launch pirated games. Besides, using the WebKit exploit after hacking, it became possible to manipulate user data.
The search for and elimination of vulnerabilities PlayStation 4 does not end there. Sony noted that the company is ready to continue to pay for bugs and malfunctions, and the amount of the fee depends on the complexity and criticality of the error found.