On: The First PS4 Kernel Exploit: Adieu

[K0nserv]

Am I reading it correctly that it's possible to invoke syscalls from Javascript? That seems like a monumentaly bad idea...

[GranPC → K0nserv]

No, that's just a library they made that uses a WebKit exploit to invoke a ROP chain to run syscalls.

[DSMan195276 → K0nserv]

Not directly. The exploit referred to by the title is a kernel exploit, but to execute the kernel exploit you need to be able to already run user code. They're using a Webkit exploit to run their user code.