SaudiDos ..

the bd-j file currently being shared for ps4 14.00 is originally my private file it was unpacked and redistributed and whoever did it was stupid enough to leave references to my own domain inside it the only reason this file ever left my hands was because someone with devkit and testkit access contacted me and offered to support my research with a testkit dev resources firmware updates and anything i needed in return he wanted access to my jailbreak for testing i agreed because i wanted to study the security differences between retail consoles and dev/test hardware and nothing more later i spent around two weeks researching a separate method related to extracting content_key_seed information for sony packages zeco @notnotzecoxao helped me with some fundamentals corrected some information and gave me some keys and i will never deny that after the method was completed we agreed to keep it private between us after that other people kept asking me for the method and keys and i refused but later i found out the method had been shared outside that agreement and then the same private circle that already had my iso started getting more information too after giving people far too much trust i can say this with confidence in my own work i always wanted to do things the right way and responsibly but mistakes happen and this was one of mine i trusted the wrong people the key extraction vulnerability has now been reported to sony as well :) the report is submitted and sony will also be provided with the list of games they obtained content_key_seed from so they can investigate the full impact i have also provided the relevant technical details and evidence through the proper channels including information that can help them verify where the leaked development material came from i will not publish private mac addresses serial numbers account details or personal information publicly that belongs with sony not social media from this point forward im done with playstation research im not working on playstation anymore and im leaving this shitty scene completely i came here to research build and learn not to deal with leaks lies black market drama and people selling private work behind each others backs goodbye to fpkg updates :) and this is officially the end of the keys business im out

zeco just deleted the whole chat between me and him but the idiot doesnt realize i have a complete backup of the conversation so trust me if anything new leaks from ur side especially the webkit stuff i shared with u i will have everything documented and i will make it very clear where it came from i dont care about playstation enough to play these stupid games and seriously 200 euros bro 😂 u really sell everything for 200 euros

people need to understand this properly before getting excited over a notification popup sony changed libkernel.sprx on the newer firmware in a way that removed the useful kernel facing paths that could actually help you reach sensitive syscalls and kernel functionality and they left only the normal stuff games still need like notifications and basic system functions so yes the lua entry can still work in userland and yes u can send notifications and execute some basic things but that does not mean u bypassed the kernel and it does not mean u suddenly have a kernel exploit libkernel.sprx is basically the bridge used by games and sony stripped the sensitive parts that matter for this kind of exploitation while keeping what normal games still need sending a notification is just sending a notification thats it u cannot take that and claim full kernel bypass on the latest firmware before claiming something like this go read libkernel.sprx properly understand what sony removed understand what is still exposed and understand what actually reaches the kernel and collecting donations while showing public code that gives people the impression u achieved something u didnt actually achieve is not acceptable at all research is fine testing is fine being wrong is fine but misleading people and making big claims around something this basic is not always follow people who show real reproducible technical proof and for u specifically read libkernel.sprx first and understand the path properly before claiming u reached something bigger than what u actually did

oob read is working :) in bdj userland oob write is patched and i think there is way to bypass it let's see for 1420

my userland is close in bdj

check my bugs :)

🔐🔑

crazy how people still give credit to someone who kept a bug private for months maybe only inside their own little circle then when someone else independently finds it reports it gets the bounty and brings it into the open suddenly people get mad and start rewriting the story 😂 now the real reporter is known go check github and somehow the old name is still attached to the bug thats not fair at all credit should go to the person who actually found it reported it and made it public not the person who comes later saying “yeah i had it too” while keeping it hidden the whole time

kinda crazy when a pc game can suddenly put you online with console players even though the servers were never meant to connect the two platforms in the first place sometimes the fun part isnt the game itself its making the network do something it was never supposed to do 👀