Technology news and discussion on TalkFuse.
Sony Awarded a Hacker $50,000 for Privately Reporting a PS5 Exploit He Found With AI — Now He’s Public Enemy Number One
A hacker known as Jordy received a $50,000 reward from Sony after using generative AI to find and privately report a security flaw in the PlayStation 5. The report has upset parts of the homebrew community because it closed off a route to running Linux on the console, and prompted security engineer Andy Nguyen, known as theflow0, to say he was abandoning his PS5 Linux work.
The flaw affects PS5 firmware versions 13.60 to 14.00 and could allow kernel code to run, enabling projects such as booting Linux. Nguyen had reportedly found the same bug earlier but kept it secret, hoping to continue his work; Jordy said he reported it after other researchers began finding it with AI. Some users had hoped to dual-boot Linux while retaining the ability to play GTA 6, due for release on 19 November, but the article text cuts off before explaining the firmware requirement in full.
In short
- Sony paid Jordy $50,000 for reporting a PS5 security flaw.
- The AI-discovered bug affects firmware 13.60 to 14.00.
- The report ended a Linux project and angered homebrew users.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Sony can argue that rewarding private disclosure helps it fix a serious flaw before it is widely exploited, protecting players and the security of its network. The researcher may also argue that reporting a vulnerability responsibly is a legitimate contribution, even if a patch closes off uses that some enthusiasts value.
The case against
Homebrew advocates can argue that the patch removes a rare route to running Linux and pursuing independent research on hardware they own, imposing a real cost on legitimate experimentation. They may also question whether rewarding disclosure without a clear account of the trade-offs gives platform security interests too much weight over user control and preservation of existing projects.
Explained simply
The PlayStation 5 is a games console whose system software controls what programs can run on it. A security flaw in that software can sometimes let researchers run their own code, opening possibilities such as installing Linux, an operating system commonly used on computers.
Sony runs a rewards programme for people who privately report security flaws, so the company can fix them before they are widely used. In this case, a researcher using the name Jordy received a $50,000 reward, while security engineer Andy Nguyen, known online as theflow0, had been working on a Linux project for the console.
Some people who modify consoles see this kind of research as a way to expand what their hardware can do; console makers also have an interest in fixing flaws that could undermine security. The dispute matters to PS5 owners because a software update can close off a route to running unofficial programs, and console software versions may affect which features remain available.
AI Cybersecurity Entertainment Gaming Technology