Skip to content

Security: NathanNeurotic/PS2-Servers

SECURITY.md

Security Policy

Project security posture

PS2 Servers is an open-source local-network tool for PlayStation 2 homebrew use. It starts small LAN server processes so Open PS2 Loader and compatible forks can load files from a PC.

The packaged Windows executable is unsigned. Antivirus products may flag unsigned network tools heuristically, especially when they open local server ports or ask for Windows Firewall rules.

The GUI uses a lightweight Tkinter skin. It does not use Electron, Qt, a webview, or a heavyweight browser-based interface.

The project maintains a public antivirus transparency note in docs/antivirus-transparency.md, including stable vendor identity, executable/package names, network ports, firewall behavior, and false-positive review status.

Administrator rights

PS2 Servers is designed to launch normally without administrator rights. Normal custom-port SMB mode, UDPFS, UDPBD, folder browsing, and log viewing do not need the whole launcher to run elevated.

The launcher may request administrator rights only for Windows actions that need them:

  • creating or refreshing PS2 Servers Windows Firewall allow rules;
  • removing PS2 Servers Windows Firewall rules;
  • using the advanced SMB port 445 mode.

The GUI shows whether it is currently running as administrator and provides a manual Restart as administrator button. This is intentionally not automatic on launch, because always running local network servers as administrator increases risk and makes antivirus heuristics more suspicious.

Windows SMB behavior

The SMBv1/RiptOPL server does not enable or depend on Windows' built-in SMB1 optional feature tree.

Normal SMB mode uses PS2 Servers' own small SMB/CIFS implementation and listens on a custom TCP port, by default 1111 (ports below 1033 are discouraged, as Windows can reserve or block low ports). OPL connects to this program directly. Windows file sharing does not need to expose SMB1.

The advanced "Take port 445" option is different:

  • it is optional;
  • it requires administrator rights;
  • it temporarily pauses Windows File Sharing / LanmanServer while the PS2 Servers SMB server is running;
  • it does not enable Windows SMB1;
  • it does not permanently disable Windows file sharing.

Windows Firewall behavior

When needed, the launcher may ask for administrator rights to create inbound Windows Firewall allow rules named with the prefix:

PS2 Servers -

The GUI can also remove PS2 Servers' own firewall rules without requiring the user to type PowerShell commands. The cleanup action removes only rules whose display names start with PS2 Servers -.

Firewall changes require user action and consent. The app does not silently add, remove, or modify firewall rules on launch.

Manual cleanup from an elevated PowerShell prompt remains available for advanced users, scripts, or emergency repair:

powershell -ExecutionPolicy Bypass -File .\tools\remove-windows-firewall-rules.ps1

or:

Get-NetFirewallRule -DisplayName "PS2 Servers - *" -ErrorAction SilentlyContinue |
  Remove-NetFirewallRule

Release verification

Release assets are built by GitHub Actions from this public repository.

Automatic releases (built on every push to main) include:

  • packaged Windows/Linux/macOS assets — for Windows the recommended download is the standalone portable build (the single-file .exe can trip antivirus heuristics; the portable build comes up clean), plus a single-file build per OS and a standalone portable build for Linux (PS2Servers-linux-x64-portable.tar.gz);
  • a portable source ZIP;
  • SHA256SUMS.txt for release asset checksums;
  • GitHub artifact attestations for build provenance.

Tagged vX.Y.Z releases include a per-asset <asset>.sha256.txt checksum file for each asset, plus GitHub artifact attestations.

GitHub artifact attestations can be verified with the GitHub CLI. Example:

gh attestation verify PS2Servers-windows-x64.zip -R NathanNeurotic/PS2-Servers

Checksums verify file integrity, and attestations verify build provenance. They do not prove that a program is harmless. Users who want the lowest-trust path should inspect the source and run from source instead of using the unsigned packaged EXE.

Antivirus false-positive review

PS2 Servers has been submitted to Avast/Gen Threat Labs for false-positive review.

The application is open source and built from the public GitHub repository. It is a PS2 homebrew utility for user-controlled local server setup and does not contain malware, credential collection, persistence, adware, browser modification, or crypto-mining behavior.

Repository: https://github.com/NathanNeurotic/PS2-Servers

Reporting a security issue

Please open a GitHub issue if the report can be public.

For malware or antivirus false-positive reports, include:

  • the exact release asset name;
  • the release tag or commit SHA;
  • the detecting product name and version;
  • the full detection name;
  • a VirusTotal or vendor report link if available.

You can (and should) also report the false positive directly to your antivirus vendor — the official per-vendor submission portals are listed in docs/antivirus-transparency.md. Vendor reports are what actually clear a detection for everyone.

Do not upload third-party private samples or user data to the issue tracker.

There aren't any published security advisories