Wololo

it is, the following comment on the twitter thread takes you to https://wololo.net/2022/10/03/released-ps5-kernel-exploit-webkit-vulne… which at the end has the github linked here in this thread

It runs via an exploit found about a year ago in WebKit [1] , and allows running custom code. It does not enable piracy, as that would require greater system access. It allows running simple applications, with severe limitations (can't use native video out or controllers; workarounds employed are using an HTML Canvas for visual output and a Nintendo DS for control). It is a very basic SDK right now, it is still in development and has a long way to go. Considering the exploit to run code only works on FW 1.76 (~1 year old), there presumably aren't many people able to run code anyway. [1] http://wololo.net/2014/10/24/webkit-exploit-confirmed-to-run-on-ps4-fi…

The kotaku story is following in the steps of the older stories and is somewhat inaccurate. This was a much more interesting read by one of fail0verflows devs Marcan. http://wololo.net/2012/10/25/clarifying-the-confusion-on-the-ps3-devel…

Dates, et al, all line up. To make it easier for others to find: https://wololo.net/2024/04/03/playstation-portal-theflow-confirms-expl…

Can you explain how it works? I read a bit here. https://wololo.net/2024/01/10/it-appears-team-xecuter-are-back-with-th… it seems you can use different game certs to make it launch.

FWIW, there's a path to downgrade PS4 to the previous firmware, see https://wololo.net/2022/12/06/it-is-apparently-possible-to-revert-your…

The ports work because the Vita has an Arm v7 processor and Android games can run on the bare metal. The developers figured out that they just needed to patch some methods (presumably IO, gpu calls, and OS methods) to work on the Vita’s OS. https://wololo.net/2022/11/10/ps-vita-android-ports-30-games-milestone…

I can only find one source on this that isn't extremely recent[1]. It seems like it would only brick the device if you pirated and used an illegitimate copy of the custom firmware. [1]: https://wololo.net/2018/06/25/nintendo-switch-team-xecuters-sx-os-has-…

The PCMag article is quoting this article which has much more information: https://wololo.net/2023/01/05/youre-killing-your-ps5-by-using-it-verti… The original article however was very slow for me, so I used the PCMag link to avoid the HN "hug of death."

The kernel exploit has been fully published: https://wololo.net/2022/10/03/released-ps5-kernel-exploit-webkit-vulne…

It's a use-after-free in FontFaceCache (https://wololo.net/2021/10/14/use-after-free-webkit-vulnerability-impa… and https://github.com/Cryptogenic/PS5-4.03-Kernel-Exploit/blob/cafa1527c7… not a JIT bug. Funnily enough, I think the CVE they're saying it is is wrong? The link to the project zero itw tracking page is for CVE-2021-30858 which is an IndexDB UAF, which is a completely seperate bug; the MITRE tracking page for CVE-2021-30858 just has the boilerplate "a malicious page can cause an exploit" from Apple, and doesn't say if it's for the IndexDB or FontFaceCache bug, so I think the Jailbreak people are just confused on this one.

In case you didn't find out yet: You can now give the Vita longer useful life via jailbreak. Plus there's SD adapters to circumvent the ridiculously expensive original memory cards. https://wololo.net/vita-cfw4dummies/

There is an experimental PS4 emulator that ran using QEMU, taking advantage of the fact that the PS4 is x86. Something similar could be done for M1 and ARM. https://wololo.net/2021/09/08/release-spine-ps4-emulator-v-20210901-ps…

Better translation from: [0] > It means ultimately that decrypted firmware files will be available for hackers. This would make reverse engineering of the PS5 firmware possible, and from there, open possibilities for finding future exploits and/or write custom firmwares or Homebrew enablers. [0] https://wololo.net/2021/11/08/ps5-exploit-fail0verflow-show-decrypted-…

Looks like the dream isnot completely dead: https://wololo.net/2019/09/24/a-look-at-udk-ultimate-a-modified-unreal… (Also, talk about putting the whole story in the URL...)

The apex of the scene's pettiness has to be this http://wololo.net/2015/03/18/total-noobs-response-to-latest-tn-x-debat… (tl;dr the custom firmware checks if a certain user is using it, if so it formats their memory card)

The embedded video here[1] is removed too. I have a feeling there's something more to this. [1]: http://wololo.net/2017/12/29/nintendo-switch-kernel-exploit-34c3-prese…

Looking around, this appears to be a hobbyist news and discussion site. Here's the news portion: http://wololo.net/category/news/ Even if this were the New York Times talking about an exploit, I'd expect their reporters to, well, report, not necessarily directly verify something themselves. And this is quite clear that it's unconfirmed. What he does do is report what the developer is saying, adding sufficient context for non-experts to understand, and giving links so those interested can learn more. Presumably once it's verified, there will be another article saying so. Given that, it seems like perfectly fine amateur journalism. Why do you expect it to be something else?

This seems to be a hoax[1] [1] http://wololo.net/2013/12/01/is-this-ps4-hack-real-fake-ps4-exploit-se…

Yes and no. The gaming industry serves as an illustrative example because we know the Sony Playstation 4 and 5 are both based on FreeBSD[0]. Compare Sony PlayStation Network[1] Monthly active users on PlayStation Network reached 123 million as of June 30, 2025. with Valve's Steam[2] Valve reported 132 million active monthly players (that is, they used Steam within the month, as opposed to being logged in at exact the same time) at the end of 2021... This isn't scientific, but if the same ratio of active monthly to peak concurrent users held through to today, back of the napkin math would put Steam's current active monthly users at 221.5 million With an optimistic estimate of current Monthly Active Users, if gaming on Linux grew overnight from 2.5% to 50% of total players on Steam, then it would still be slightly behind half of the people who are currently gaming on FreeBSD-based Playstation. FreeBSD code is also in iOS and macOS via Darwin, the Nintendo Switch, and the Microsoft Windows networking stack. Evidently BSD is a go-to choice for consumers today, but many don't realize it, and those of us who do often do not think about it. That's because the BSD license and the companies that use it result in products that bear no resemblance to the BSD we know. A similar situation occurred with Minix - to the extent that it's creator Andrew Tannenbaum had no idea it's install base was arguably bigger than Linux until 2017. Intel had put Minix into the Management…