PlayStation 5 firmware update version 14.20 has reportedly patched a significant exploit that would have enabled the native execution of pirated games. Counterintuitively, this development is being celebrated by the PS5 homebrew community.
Over the past year, hacker Ark Sama had been developing an exploit designed to allow users to run "fake" PKG files, which could include unauthorized game copies, directly on the PS5. Current methods for running unofficial PKG files on the console often require complex workarounds that result in suboptimal performance. Ark Sama's exploit promised a more seamless and efficient way to run these files.
The reason for the community's positive reaction to the exploit being patched lies in Ark Sama's stated release strategy. The hacker had indicated an intention to release the exploit only after Sony had officially patched it. This approach aligns with HackerOne's Vulnerability Disclosure Standards, a platform Sony utilizes for bug bounty programs. Under HackerOne's mutual agreement disclosure settings, vulnerabilities can be made public once they have been fixed by the vendor.
With firmware update 14.20 now released and the exploit patched, Ark Sama is expected to release their findings. This means that any PS5 users who have not yet updated to firmware version 14.20 will be able to take advantage of the exploit once it is publicly disclosed. Concurrently, Ark Sama is eligible to receive a bounty payment from Sony for reporting the vulnerability through the official channels. This situation is described as a beneficial outcome for all parties involved, enabling the public disclosure of a significant security finding while allowing users on older firmware versions to benefit from it.