Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Definitely not Windows (Win 11 parody) (definitelynotwindows.com)
    39comments
  2. Pirating the Pirates (mubi.com)
    56comments
  3. So long Google, and thanks for all the nudes (lecaro.me)
    18comments
  4. Hijacking the PS5's RTMP Stream (yashgarg.dev)
    14comments
  5. GrapheneOS – When an App Is Slow (wirelessmoves.com)
    —discuss
  6. Claude Sonnet 5.5 (anthropic.com)
    122comments
  7. Show HN: HN.watch – Videos of all Hacker News posts (hn.watch)
    16comments
  8. Who Wrote Elizabeth I's Most Scathing Letters? (smithsonianmag.com)
    1comments
  9. Parley: Federated, decentralised chat that speaks plain IRC (mills.io)
    123comments
  10. When did Google get so weird? (sancho.bearblog.dev)
    938comments
  11. Launch HN: Vespper (YC F24) – SOTA Docx MCP (vespper.com)
    2comments
  12. The Teen Portraits That Captivated Sofia Coppola (newyorker.com)
    1comments
  13. What Heraldry and Mon Can Teach Us About Building Visual-Identity Generators (benovermyer.com)
    13comments
  14. MongoDB CEO resigns to join Meta (reuters.com)
    175comments
  15. I made a visual workspace for AI Automations (biom.dev)
    4comments
  16. Cf: The Agentic CLI for the Cloudflare API (cloudflare.com)
    15comments
  17. Kids turned low-traffic NPR Spotify comments into a secret group chat (thisamericanlife.org)
    90comments
  18. 37,500 border drawings: a map of the world as people remember it (habibicode.org)
    31comments
  19. OpenAI still doesn't seem to have a handle on all of its rogue AI activity (techcrunch.com)
    54comments
  20. Show HN: PaperMono, e-ink fridge magnet shopping list with mobile web page (github.com/seamusc)
    45comments
  21. The problem is not AI code, but not knowing about system architecture or intent (ssp.sh)
    189comments
  22. What Would a Serious AI Product Look Like? (glyph.im)
    23comments
  23. Coding Is Not Solved (alexewerlof.com)
    349comments
  24. Footguns with Postgres “at time zone 'UTC'” (bookofrevenue.com)
    85comments
  25. Solving a corn puzzle with CP-SAT (thill.me)
    4comments
  26. Show HN: Destroy Any Website with Stickman (spritefusion.com)
    6comments
  27. Owed a billion dollars in Nvidia stock (colo.to)
    427comments
  28. Show HN: Free alternative to graphics design giants (scissor.studio)
    31comments
  29. Ember-1 (fireworks.ai)
    243comments
  30. Nissan's third generation e-POWER powertrain (nissan-global.com)
    333comments

Hijacking the PS5's RTMP Stream

89 pointsby 3h agoyashgarg.dev
14 comments
2h agoHN ↗

Maybe I'm missing something but there seems to be a gap between "figure out the REAL hostname" and "we no longer have to worry about the stream never showing up on YouTube"

2h agoHN ↗

Me too. YouTube was given up, and what the op did was to use Twitch streaming and redirect it before the forward to a TLS-verifed server, bypassing verification:

redirects the actual stream to the Mac without any certificate issues.

1h agoHN ↗

The live-video.net domain belongs to Twitch. So, from what I can gather, apparently the OP switched back to Twitch streaming and the last-hop RTMP server does not use certificates.

1h agoHN ↗

Another crypto mistake by Sony this time leaving traffic completely unencrypted.

56m agoHN ↗

is it truly a security issue here? Especially relative to the machine's effort to encrypt the stream.

1h agoHN ↗

PS5 uses DNS to resolve where to send RTMP stream. The author found out that they cannot spoof the main server since that server uses TLS and it's not possible to make the PS5 trust self made certificate. The author then runs a real Twitch stream and monitors DNS requests and finds DNS of the server that receives the RTMP stream and spoofs only that final server. It's more of a problem with RTMP protocol/Twitch security rather than the PS5.

1h agoHN ↗

Don't mind me, I'm just sitting here with my HDMI-RX port on rk3588 being happy that is works and I didn't brick the board when doing uboot update to uncurse it.

1h agoHN ↗

You can combine the last two steps the nginx and mpv with obs and gstreamer, or just gstreamer really.

12m agoHN ↗

Vote with your $ and get a gaming PC. Don’t let people who remember the 1990s tell you it will be a sweaty experience, install Steam and it won’t be. There are like 15 exclusive games for the PS5, what’s the point?

2m agoHN ↗

Don’t use Windows. Try CachyOS or Bazzite.

1m agoHN ↗

Depending on what you play, you don't have to. But if you play draconian anti-cheat games then fair point.