Kinda sad that it's 2026 and this data still goes over the internet unencrypted...
RTMP and all the video and audio protocols behind it aren't trivial either - I bet there are hundreds of exploits waiting to be found that any three letter agency sitting on the internet can use to take over your PS5 and all credentials stored within too...
Well, the server just responds with acknowledgement information, the client is doing most of the work and most of the complex parts of RTMP are hand waved and faked by both the client and the server because no one cares about how Flash used to work.
So somewhat unlikely to be able to exploit it but have at it hass.
I'd imagine it'd be easier to exploit the server side, actually.
Yeah, but the server is most likely running the whole thing in a docker container with no permissions to do anything. Big companies security teams tend to require that when opening non-trivial third party code up to the internet.
The client on the other hand I would guess is running it's code as root, or at least something with full GPU access.
Wouldn't this require a man-in-the-middle since the PS5 is transmitting data to a specific server, YouTube or Twitch in the article?
There are extensions to RTMP to use encryption or even just TLS. But do you mean that the risk of fragments of audio and video bitstreams going out unprotected presents a remote code execution risk? That seems less a problem of vulnerability and more one of privacy.
This is how Lightstream Studio has provided stream overlay for consoles[1]. Some years ago Microsoft added them as an official destination using a better protocol and dropped the need for MITM hackery.
I used to work in this space and Lightstream was always doing interesting things, even if they never seemed to find PMF.
PMF… I love how we’ve invented a term which means “customers”. I know it’s not the point of your comment but the acronym in place of a common word will be tougher for folks to follow.
Don't mind me, I'm just sitting here with my HDMI-RX port on rk3588 being happy that is works and I didn't brick the board when doing uboot update to uncurse it.
Maybe I'm missing something but there seems to be a gap between "figure out the REAL hostname" and "we no longer have to worry about the stream never showing up on YouTube"
The live-video.net domain belongs to Twitch. So, from what I can gather, apparently the OP switched back to Twitch streaming and the last-hop RTMP server does not use certificates.
Me too. YouTube was given up, and what the op did was to use Twitch streaming and redirect it before the forward to a TLS-verifed server, bypassing verification:
> redirects the actual stream to the Mac without any certificate issues.
Vote with your $ and get a gaming PC. Don’t let people who remember the 1990s tell you it will be a sweaty experience, install Steam and it won’t be. There are like 15 exclusive games for the PS5, what’s the point?
Linux works quite well for gaming these days. I have a desktop that used to run Windows 11, which is EOL, so I was faced with either upgrading to Windows 12 or trying out Linux on desktop.
So far there have been zero games that have had issues. Granted I've only really had time to play 5 or so games, but I am genuinely impressed with how far it's come.
Bazzite has been the most hands off linux distro I've ever used. I put it on my desktop and I only use it with an xbox controller at the TV. I've never had to plug in a keyboard or use a terminal. I don't even bother checking proton compatibility anymore, everything has just worked.
Playing 20 or so games on my Steam Deck I had to edit one only .INI. The Steam Deck is the only device I've ever seen that pairs perfectly with AirPods every time, it beats Apple devices.
I also have a big gaming PC/AI development with a NVIDIA GPU and, yeah, NVIDIA's app to maintain drivers is a little skeezy but I just download games on Steam and they "just work" though I am not really a day one kind of gamer unless it is a new Dynasty Warriors or Fate game.
I'll grant that kernel anti-cheat sucks, if you play that kind of game and cheating bothers you well then... Maybe a locked down environment like the PS5 is a feature and not a bug.
You kind of undermine your own argument here. The Steam Deck is more a console than a PC, with lots of "just works" baked in either directly or through community support that makes it simple.
In 2026 I still have to mess with game settings, driver issues, and DRM garbage behavior as a primarily PC gamer. PC gaming is still a long way from "just works" and I think you probably just take for granted a lot of things you have to do to make it work vs a typical console experience.
In what sense is the steam deck more console than pc? I agree that there's convenience in it being a single target for people to work on, but it lets you run anything you want even on the stock operating system, and you can trivially replace that at will
Look, in the 1990s I was horrified of PC gaming because I was always dealing with kids who thought they were having fun with their PC whereas they were really fighting with an ugly plastic oversized joystick that fell apart two times during a level and had to be recalibrated three times. Or that it was a sweaty battle with the keyboard and mouse that reprises the sweaty battle with the keyboard and mouse I have at work and with my productive hobbies.
I got into console gaming in the late 00's and had a few portables and an Xbox 360 and a PS 3 just after they became obsolete and played through the libraries. My favorite games were games for the PS Vita from Japanese publishers like Altus, Idea Factory and Acquire. When Sony and the publishers quit investing in the Vita those games went right to Steam. And my experience with Steam is, "click on the Steam icon", pair the Xbox controller, use the controller to pick a game, and sit back. Like yeah, there still are sweaty keyboard-and-mouse games and I might even play one once in a while, but I'd say my experience on the big machine is "console like" with the condition that the kind of games I play are "console like" games.
I haven't had a driver issue other than 'you didn't upgrade your drivers lately' on a gaming PC in years and years. The problem now with pc gaming is the cost to enter the market with the GPU, RAM and storage prices.
you'll be voting with a lot of dollars, look at the 4090 pricing these days? hell even the 4070 is north of a grand, JUST FOR THE GPU, now check the DDR5 prices...
Honestly the DNS trick in this post is neat but I'm not setting up dnsmasq just to share my screen. This is the kind of thing where Sony could just let you stream to anything and they don't, and it's annoying
Debatable, but historically quite a few consoles and handhelds have been popped wide open by leveraging defects or vulnerabilities in how media is handled. Without looking at an exhaustive list, I believe tif files have claimed the most victims with the next two being split between videos and then media within browsers. I'm aware this is more about out than in, but a gap is a gap and gamers will use whatever they can find.
Both YouTube and Twitch allow you to do non public streams. And someone can get the stream key and stream over you. With the twitch model where stream keys don't get replaced you can imagine a secondary market place selling access to stream content on compromised channels.
PS5 uses DNS to resolve where to send RTMP stream. The author found out that they cannot spoof the main server since that server uses TLS and it's not possible to make the PS5 trust self made certificate. The author then runs a real Twitch stream and monitors DNS requests and finds DNS of the server that receives the RTMP stream and spoofs only that final server. It's more of a problem with RTMP protocol/Twitch security rather than the PS5.
If sony wanted the ps5 to only send to twitch, they could absolutely enforce TLS authentication of the server, but they don't, so i guess send your video wherever.
Kinda sad that it's 2026 and this data still goes over the internet unencrypted...
RTMP and all the video and audio protocols behind it aren't trivial either - I bet there are hundreds of exploits waiting to be found that any three letter agency sitting on the internet can use to take over your PS5 and all credentials stored within too...
Well, the server just responds with acknowledgement information, the client is doing most of the work and most of the complex parts of RTMP are hand waved and faked by both the client and the server because no one cares about how Flash used to work.
So somewhat unlikely to be able to exploit it but have at it hass.
I'd imagine it'd be easier to exploit the server side, actually.
Yeah, but the server is most likely running the whole thing in a docker container with no permissions to do anything. Big companies security teams tend to require that when opening non-trivial third party code up to the internet.
The client on the other hand I would guess is running it's code as root, or at least something with full GPU access.
I guarantee the RTMP process on a Playstation 5 is not running as root.
Wouldn't this require a man-in-the-middle since the PS5 is transmitting data to a specific server, YouTube or Twitch in the article?
There are extensions to RTMP to use encryption or even just TLS. But do you mean that the risk of fragments of audio and video bitstreams going out unprotected presents a remote code execution risk? That seems less a problem of vulnerability and more one of privacy.
I think everyone is just hardcoding a template RTMP conversation and not implementing it beyond looking for certain markers.
This is how Lightstream Studio has provided stream overlay for consoles[1]. Some years ago Microsoft added them as an official destination using a better protocol and dropped the need for MITM hackery.
I used to work in this space and Lightstream was always doing interesting things, even if they never seemed to find PMF.
1: https://support.golightstream.com/hc/en-us/articles/38643168...
PMF… I love how we’ve invented a term which means “customers”. I know it’s not the point of your comment but the acronym in place of a common word will be tougher for folks to follow.
Thanks, I had no idea what it meant (presumably “product market fit”). “Pull My Finger” was going to be my best guess.
Feel like there's a few parts missing that I'm not getting.
The author mentions that the PS5 uses RTMPS to push video up to twitch - but suddenly it just uses plain RTMP?
because he switched to it's youtube integration which doesn't support RTMPS...
Don't mind me, I'm just sitting here with my HDMI-RX port on rk3588 being happy that is works and I didn't brick the board when doing uboot update to uncurse it.
Lucy, esplain please.
rockchip something-or-other that's on the KiwiPi 5B. iirc it can strip hdcp and all that jazz, too? one of the ports is labeled "HDMI RX" for input.
https://kiwipi.com/blog/rk3588-hdmi-in-test/
Man, that article has _all_ the AI smells. Here's the only interesting part:
I guess it just has an HDMI capture chip on-board. If you have a spare USB port, these are under $20 everywhere.> I guess it just has an HDMI capture chip on-board. If you have a spare USB port, these are under $20 everywhere.
Any decent ones? I own a few that I use for managing (semi)headless machines and they all manage maybe 2-3fps
This is fantastic. Not being able to share my gameplay with friends on Discord is one of my biggest gripes.
I'd kill for a Bluetooth peripheral workaround. I've a Clicks Power Keyboard that'd be great to use with the PS5.
Maybe I'm missing something but there seems to be a gap between "figure out the REAL hostname" and "we no longer have to worry about the stream never showing up on YouTube"
The live-video.net domain belongs to Twitch. So, from what I can gather, apparently the OP switched back to Twitch streaming and the last-hop RTMP server does not use certificates.
twitch doesnt actually require tls. it uses plain rtmp over port 1935 and rtmps over port 443.
Me too. YouTube was given up, and what the op did was to use Twitch streaming and redirect it before the forward to a TLS-verifed server, bypassing verification:
> redirects the actual stream to the Mac without any certificate issues.
excited to try this! i’ve had this exact same want from streaming to discord on ps5
Vote with your $ and get a gaming PC. Don’t let people who remember the 1990s tell you it will be a sweaty experience, install Steam and it won’t be. There are like 15 exclusive games for the PS5, what’s the point?
I'd rather eat poison than use Windows.
Linux works quite well for gaming these days. I have a desktop that used to run Windows 11, which is EOL, so I was faced with either upgrading to Windows 12 or trying out Linux on desktop.
So far there have been zero games that have had issues. Granted I've only really had time to play 5 or so games, but I am genuinely impressed with how far it's come.
https://store.steampowered.com/steamos/
Valve's brought almost all games to Linux.
Don’t use Windows. Try CachyOS or Bazzite.
Bazzite has been the most hands off linux distro I've ever used. I put it on my desktop and I only use it with an xbox controller at the TV. I've never had to plug in a keyboard or use a terminal. I don't even bother checking proton compatibility anymore, everything has just worked.
Depending on what you play, you don't have to. But if you play draconian anti-cheat games then fair point.
I vote with my time by not maintaining drivers, setting profiles, and evading anticheat rootkits. Also, M$ is cancer.
I just click "Install" and then "Play" in Steam on my non-Windows machine. I guess you can't play Fortnight or whatever, but it works great for me.
Playing 20 or so games on my Steam Deck I had to edit one only .INI. The Steam Deck is the only device I've ever seen that pairs perfectly with AirPods every time, it beats Apple devices.
I also have a big gaming PC/AI development with a NVIDIA GPU and, yeah, NVIDIA's app to maintain drivers is a little skeezy but I just download games on Steam and they "just work" though I am not really a day one kind of gamer unless it is a new Dynasty Warriors or Fate game.
I'll grant that kernel anti-cheat sucks, if you play that kind of game and cheating bothers you well then... Maybe a locked down environment like the PS5 is a feature and not a bug.
You kind of undermine your own argument here. The Steam Deck is more a console than a PC, with lots of "just works" baked in either directly or through community support that makes it simple.
In 2026 I still have to mess with game settings, driver issues, and DRM garbage behavior as a primarily PC gamer. PC gaming is still a long way from "just works" and I think you probably just take for granted a lot of things you have to do to make it work vs a typical console experience.
In what sense is the steam deck more console than pc? I agree that there's convenience in it being a single target for people to work on, but it lets you run anything you want even on the stock operating system, and you can trivially replace that at will
Look, in the 1990s I was horrified of PC gaming because I was always dealing with kids who thought they were having fun with their PC whereas they were really fighting with an ugly plastic oversized joystick that fell apart two times during a level and had to be recalibrated three times. Or that it was a sweaty battle with the keyboard and mouse that reprises the sweaty battle with the keyboard and mouse I have at work and with my productive hobbies.
I got into console gaming in the late 00's and had a few portables and an Xbox 360 and a PS 3 just after they became obsolete and played through the libraries. My favorite games were games for the PS Vita from Japanese publishers like Altus, Idea Factory and Acquire. When Sony and the publishers quit investing in the Vita those games went right to Steam. And my experience with Steam is, "click on the Steam icon", pair the Xbox controller, use the controller to pick a game, and sit back. Like yeah, there still are sweaty keyboard-and-mouse games and I might even play one once in a while, but I'd say my experience on the big machine is "console like" with the condition that the kind of games I play are "console like" games.
I haven't had a driver issue other than 'you didn't upgrade your drivers lately' on a gaming PC in years and years. The problem now with pc gaming is the cost to enter the market with the GPU, RAM and storage prices.
get an immutable linux distro
you'll be voting with a lot of dollars, look at the 4090 pricing these days? hell even the 4070 is north of a grand, JUST FOR THE GPU, now check the DDR5 prices...
Do you actually need one?
Sorry, already own a PS5 and the money for replacements is spoken for.
I think that was the point?
To be fair with the current RAM prices I don't want to replace any device right now!
Honestly the DNS trick in this post is neat but I'm not setting up dnsmasq just to share my screen. This is the kind of thing where Sony could just let you stream to anything and they don't, and it's annoying
You can combine the last two steps the nginx and mpv with obs and gstreamer, or just gstreamer really.
Imagine if they just let you specify your own RTMP destination. Crazy thought, I know.
Another crypto mistake by Sony this time leaving traffic completely unencrypted.
is it truly a security issue here? Especially relative to the machine's effort to encrypt the stream.
Debatable, but historically quite a few consoles and handhelds have been popped wide open by leveraging defects or vulnerabilities in how media is handled. Without looking at an exhaustive list, I believe tif files have claimed the most victims with the next two being split between videos and then media within browsers. I'm aware this is more about out than in, but a gap is a gap and gamers will use whatever they can find.
My video stream sent to a public streaming audience might be seen by the public in transit!
Both YouTube and Twitch allow you to do non public streams. And someone can get the stream key and stream over you. With the twitch model where stream keys don't get replaced you can imagine a secondary market place selling access to stream content on compromised channels.
PS5 uses DNS to resolve where to send RTMP stream. The author found out that they cannot spoof the main server since that server uses TLS and it's not possible to make the PS5 trust self made certificate. The author then runs a real Twitch stream and monitors DNS requests and finds DNS of the server that receives the RTMP stream and spoofs only that final server. It's more of a problem with RTMP protocol/Twitch security rather than the PS5.
If sony wanted the ps5 to only send to twitch, they could absolutely enforce TLS authentication of the server, but they don't, so i guess send your video wherever.