Support NeoGAF

[Bullet Club]

Announcing the PlayStation Bug Bounty Program

In collaboration with security platform HackerOne.

At PlayStation, we are committed to providing gamers all over the world with great experiences. I’m happy to announce today that we have started a public PlayStation Bug Bounty program because the security of our products is a fundamental part of creating amazing experiences for our community.

We believe that through working with the security research community we can deliver a safer place to play. We have partnered with HackerOne to help run this program, and we are inviting the security research community, gamers, and anyone else to test the security of PlayStation 4 and PlayStation Network. Our bug bounty program has rewards for various issues, including critical issues on PS4. Critical vulnerabilities for PS4 have bounties starting at $50,000.

To date, we have been running our bug bounty program privately with some researchers. We recognize the valuable role that the research community plays in enhancing security, so we’re excited to announce our program for the broader community.

We have carefully considered what issues will be in scope at this time. You can find more information about the exact details of the program at our HackerOne page.

Source: Playstation Blog

 

[ManaByte]

They could've used this a few years ago.

 

[hybrid_birth]

 

[Insane Metal]

This is pretty neat

 

[Kenneth Haight]

This is brilliant, opening it up to the public, Hackerone is a great site and some people (smarter than me) make a full time living off big bounties and you can make some serious cash if you’re good enough.

 

[jakinov]

This is pretty neat

It’s a fairly common practice by many large corporations. Microsoft has paid out millions some years in bounties. Some People make a living doing the various bounties by companies.

 

[AnkitDanger]

I know some bugs they are in my house gimme my 50k$

 

[JLB]

This is brilliant, opening it up to the public, Hackerone is a great site and some people (smarter than me) make a full time living off big bounties and you can make some serious cash if you’re good enough.

To tamper expectations of people, you should be REALLY, REALLY, REALLY good at this to get a big bount.

 

[GHG]

What do I win?

 

[Grinchy]

That's interesting. So instead of someone just releasing hacks for things like running pirated software for nothing but internet fame, theoretically they would be smarter to just take the $50,000 and Sony gets to plug a hole?

 

[GHG]

That's interesting. So instead of someone just releasing hacks for things like running pirated software for nothing but internet fame, theoretically they would be smarter to just take the $50,000 and Sony gets to plug a hole?

Yeh it's been going on for almost a decade now:

HackerOne | #1 Trusted Security Platform and Hacker Program

Reduce the risk of a security incident by working with the world’s largest community of trusted ethical hackers. HackerOne offers bug bounty, VDP, security assessments, attack surface management, and pentest solutions.

www.hackerone.com

Lots of money to be made if you're good. I know a few guys who got into cybersec just because of seeing the bounties available on hackerone.

 

[Kenneth Haight]

To tamper expectations of people, you should be REALLY, REALLY, REALLY good at this to get a big bount.

of course. I wasn’t suggesting anyone can just hop in and just start making some cash by doing a few Ion Cannons at PSN’s IP’s and then putting their hands out to Sony.

I work in a blue team for a large telecoms provider, and dabble in red team as well. Looking to make the move fully on to red team within the next year, but there is a lot to learn. I’ve been in IT for about 10 years, mostly in network security so it’s hard to then begin getting deeper in to web applications and the coding behind it all. I am slowly getting there Just takes a lot of self studying, but I also love playing games.......

 

[IbizaPocholo]

PlayStation disclosed on HackerOne: Use-After-Free In...

## Summary Due to missing locks in option `IPV6_2292PKTOPTIONS` of `setsockopt` , it is possible to race and free the `struct ip6_pktopts ` buffer, while it is being handled by `ip6_setpktopt`. This structure contains pointers (`ip6po_pktinfo`) that can be hijacked to obtain arbitrary kernel...

hackerone.com

 

[IbizaPocholo]

PS4 6.72 Jailbreak released by Sleirsgoevy - Wololo.net

PS4 6.72 Jailbreak released, a bit hard to start so far but works PS4 Developer Sleirsgoevy has released a fully working Jailbreak for PS4 6.72, relying on the Kernel exploit revealed by THeFlow...

wololo.net

 

[Kerlurk]

Gaming Discussion

Video game news, industry analysis, sales figures, deals, impressions, reviews, and discussions of everything in the medium, covering all platforms, genres, and territories.

www.neogaf.com

 

[Tschumi]

I don't mean to give anyone any good ideas but what if hackerone conspire to keep one vulnerability hidden ... Daaaahrk thoughts