Hijacking the PS5's RTMP Stream

Re:Hijacking the PS5's RTMP Stream by rezonant on Monday September 28, 2026 @03:26PM (#49883136)

Well, the server just responds with acknowledgement information, the client is doing most of the work and most of the complex parts of RTMP are hand waved and faked by both the client and the server because no one cares about how Flash used to work.

So somewhat unlikely to be able to exploit it but have at it hass.

I'd imagine it'd be easier to exploit the server side, actually.

[ Parent | on HN ]

Re:Hijacking the PS5's RTMP Stream by londons_explore on Monday September 28, 2026 @04:17PM (#49883750)

Yeah, but the server is most likely running the whole thing in a docker container with no permissions to do anything. Big companies security teams tend to require that when opening non-trivial third party code up to the internet.

The client on the other hand I would guess is running it's code as root, or at least something with full GPU access.

[ Parent | on HN ]

Re:Hijacking the PS5's RTMP Stream by rezonant on Monday September 28, 2026 @05:32PM (#49884699)

I guarantee the RTMP process on a Playstation 5 is not running as root.

[ Parent | on HN ]