it's up to the dev/hacker whether or not they disclose the information. also, I read over sony's stipulations on hacker one. if you were to release something without their consent, you can be banned from their program. and, if you release something that hurts their customers or themselves, you could be sued. though, the hacker one program is a win-win for the most part.