Drama Around A PS5 Exploit, AI-Coding, Linux, And GTA 6 Has One Popular Hacker Calling It Quits
The PlayStation 5 modding community is in the midst of a significant fracture after a prominent researcher announced his abrupt departure from the scene. According to reporting from Kotaku, veteran hacker TheFlow has ceased all work on bringing Linux to the PS5, a project that would effectively transform the console into a high-performance Steam Machine. This decision follows a dispute over the disclosure of a critical hypervisor exploit, a vulnerability in the console's security architecture that was central to the Linux porting effort. The conflict has left the future of the modding initiative in limbo and sparked intense debate regarding the ethics of bug bounty reporting within the hardware hacking sphere.
The core of the disagreement centers on an agreement that allegedly prevented the public or corporate release of the exploit until after the launch of Grand Theft Auto VI. TheFlow had previously demonstrated a successful Linux installation on older PS5 firmware, showcasing the ability to run Grand Theft Auto V with ray tracing enabled. His goal was to extend this functionality to newer hardware, including the PS5 Pro, and ensure compatibility with the latest system updates. The strategy relied on keeping the underlying hypervisor bug secret, as Sony would inevitably patch such a severe security flaw once it became known to their security teams.
This situation is inextricably linked to the upcoming release of Rockstar Games' long-awaited title, which is anticipated to arrive in 2026 for PlayStation 5 and Xbox Series X|S consoles. GTA VI marks the first mainline entry in the franchise since 2013, returning players to a reimagined Vice City and the fictional state of Leonida, where protagonists Jason and Lucia navigate a new criminal underworld. Because the game is expected to be digital-only, players will be required to update their consoles to the most recent firmware to access the PlayStation Store and purchase the title. This mandatory update would have closed the security window that the Linux modders were exploiting, creating a narrow but crucial timeframe for TheFlow to finalize his work before the industry's focus shifts entirely to the new Rockstar release.
The tension escalated when another researcher, identified as Jordy, reported the same hypervisor exploit to Sony through the HackerOne platform. Jordy, who utilizes AI tools in his hacking processes, claimed he discovered the vulnerability independently rather than through TheFlow’s shared research. He stated that he had been asked to withhold the information until after GTA VI's release, but he felt compelled to act after a third party also found the bug. Jordy cited a financial motivation, noting that his mother is suffering from a terminal illness and that the potential bounty for a verified exploit could provide necessary support. TheFlow alleges that Jordy broke a promise made just a day prior to the report, arguing that the action derailed months of careful planning.
TheFlow’s reaction was swift and absolute, as he stated, "I am stepping away from the PS5 scene and stopping all my work on PS5 Linux." He expressed deep disappointment, describing how his plans to complete PS5 Pro support with a 2027 release were "all down the sink." The researcher criticized the current state of the community, lamenting that it has shifted from a group of skilled researchers to individuals using large language models to generate code they do not fully understand. He specifically mentioned that what he called "slop kiddies" found the last remaining hypervisor bug, which he had identified earlier, and chose to report it to Sony, thereby undermining the collective effort to preserve the exploit for a specific window of opportunity.
This incident highlights a growing friction within the hardware hacking community as artificial intelligence becomes more accessible to newcomers. The reliance on AI-generated code has lowered the barrier to entry, but it has also introduced a layer of unpredictability where less experienced individuals may discover critical vulnerabilities without fully grasping the implications of their findings. For Rockstar and Take-Two, this drama occurs at a sensitive moment; while their primary focus is on delivering a stable and secure environment for GTA VI, the patching of this exploit ensures that their digital storefront remains protected from unauthorized access. The closure of this security gap, driven by the bug bounty report, aligns with Sony’s standard practice of tightening system security ahead of major title launches, effectively ending the era of this particular Linux integration for the foreseeable future.
Ultimately, the fallout from this dispute serves as a cautionary tale for the modding scene, illustrating how individual financial needs and ethical disagreements can unravel years of collaborative technical achievement. TheFlow’s departure signals a potential loss of institutional knowledge in the PS5 hacking landscape, leaving the project to stall exactly when the gaming world is preparing for the most significant console launch in over a decade. As players brace for the arrival of GTA VI, the underlying technical ecosystem of the PlayStation 5 continues to evolve, with security hardening taking precedence over the experimental freedoms that the modding community once enjoyed.