A quick clarification.
I'm here as a security researcher. My goal is to discover and responsibly report vulnerabilities, not to build or release jailbreaks, exploits, or public PoCs.
Whenever I verify something through my own testing (including UART), I may share limited proof that the research is real, while intentionally censoring anything that could expose the technical details. That's done to protect the research until the disclosure process is complete.
If a finding is accepted, my intention is to have it publicly disclosed through the official PlayStation HackerOne disclosure process after the issue has been resolved.
As for the current research, my testing indicates that 13.50 is affected, and I'm continuing to evaluate newer firmware, including 13.52.
I have nothing to prove beyond conducting solid research. Believe it if you want, question it if you want—that won't change how I work. I'll continue testing, reporting, and sharing only what can be shared responsibly.
One more clarification.
I've completely stopped relying on other people for testing. I now have everything I need to verify my own research and reproduce my findings independently.
From this point forward, whenever I discover something worth sharing, I'll post only limited and sanitized evidence here. Anything that could reveal the technical details or interfere with the responsible disclosure process will remain private until the appropriate time.
So please don't expect frequent updates or promises. Research doesn't work on a schedule, and I won't announce something until I've personally verified it.
Regarding my previous exFAT research, many of you already know what happened. After Sony released the fix,
@Jose Coixao analyzed the kernel changes and confirmed the patch. Only then did I publicly confirm that I was the original reporter by sharing my HackerOne report. That wasn't about seeking attention it was simply to establish authorship and prevent others from falsely claiming the discovery.
As for everything I'm working on today, the final proof will come in time. Once the responsible disclosure process is complete and Sony approves public disclosure, the HackerOne reports will speak for themselves. Until then, my focus remains on research not on convincing people.