黑客借助生成式AI发现PS5漏洞 上报索尼获5万美元奖金

该漏洞影响13.60至14.00版固件，可用于执行内核代码，例如在原本不支持相关用途的主机上启动Linux。Google安全工程师Andy Nguyen（theflow0）据称早已发现同一问题，并准备暂缓公开，以继续推进PS5及PS5 Pro的Linux支持。

Jordy表示，自己最初曾与theflow0约定不上报，但后来又有研究者借助生成式AI找到同一漏洞。考虑到领取奖金的窗口可能关闭，他最终改变决定。Jordy还称，家庭压力和母亲病重也是其选择确定奖金的重要背景。

部分玩家原本希望将漏洞保留至《GTA6》11月19日发售，以便更新至游戏要求的固件、正常购买游戏，同时维持Linux双启动能力。提前上报让索尼有机会在游戏发售前修补漏洞，相关用户可能需要在离线保留Linux功能和升级系统之间作出选择。

随着生成式AI加快多人重复发现主机漏洞的速度，自制软件社区长期保留漏洞的做法也更难维持。目前，该漏洞已经提交给索尼，Jordy则获得了5万美元漏洞奖金。

本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。

This loophole affects 13.60 to 14.00 versions of solids, which can be used to implement kernel codes, such as the activation of Linux on a mainframe that did not otherwise support the use. Google security engineer Andy Nguyen (theflow0) is said to have discovered the same problem long ago and is prepared to suspend the release to continue the Linux support of PS5 and PS5 Pro.

Jordy stated that it had initially agreed with theflow0, but that later researchers had found the same loophole by means of the Generating AI. He eventually changed his decision in view of the possibility that the window to receive the bonus would be closed. Jordy added that family stress and the mother ' s illness were also important contexts in which it chose to determine the bonus.

Some of the players would have preferred to keep the loophole open on November 19th to update the game's required solids, normal purchases, while maintaining Linux's dual start-up capability. Advance reporting gives Sony an opportunity to fix the loophole before the game is sold and the user concerned may need to choose between offline retaining Linux functionality and upgrading the system.

The long-term retention of gaps in the home-made software community is even more difficult to sustain as the generation of AI accelerates the recurrence of mainframe gaps by many. At present, the loophole has been submitted to Sony, while Jordy has received a $50,000 gap bonus.

Auto-fetched and translated by AI Gem Box. All rights belong to the original author.