Xbox password flaw exposed by five-year-old boy
Kristoffer Von Hassel, from San Diego, figured out how to log in to his dad's account without the right password.
Microsoft has fixed the flaw, and added Kristoffer to its list of recognised security researchers.
In an interview with local news station KGTV, Kristoffer said: "I was like yea!"
The boy worked out that entering the wrong password into the log-in screen would bring up a second password verification screen.
Kristoffer discovered that if he simply pressed the space bar to fill up the password field, the system would let him in to his dad's account.
Kristoffer's name now appears on a page set up to thank people who have discovered problems with Microsoft products.
The company also gave him four free games, $50 (£30), and a year-long subscription to Xbox Live.
Posted:
Related Forum: Xbox Forum
Source: http://www.bbc.co.uk/news/technology-26879185
Related Articles
Comments
FurrohPosted:
Exposing a vulnerability in a multibillion dollar company? I think he should have gotten about 15 games. They could have got ****.
YuiPosted:
Only $50 [30] + Four free games for finding a major flaw like this. Dang, Maybe should get a little more but with the money received + the four games + 1 year membership, maybe the price was right for him. But maybe he should get a little more anyways.
Latest Downloads
- 01. Lara Croft: Tomb Raider - The Angel of Darkness - SaveGame (The game done 100%) [GoG](0)
- 02. My Summer Car: SaveGame (Aggressive satsuma, 6k marks)(0)
- 03. My Summer Car: SaveGame (green BMW E30)(0)
- 04. [EU] ADR1FT Trophies Game Save [CUSA02519](1)
- 05. Tekken 2 100% save game file for Retroarch european version(1)
- 06. My Summer Car: SaveGame (living in an apartment)(0)
- 07. Need for Speed: Most Wanted (2005) - SaveGame (100 cars in the showroom)(4)
- 08. Horizon Forbidden West: SaveGame (100%, before DLC) [1.0.38.0](5)
- 09. DREDGE: SaveGame (The Game done 50%)(0)
- 10. Need for Speed: Most Wanted (2005) - SaveGame (100%, 17 cars)(2)
- 11. Signalis: SaveGame (Before the battle with Falke) [1.2.1](2)
- 12. Wraith of Anias | Final Checkpoint Save(1)
- 13. Jalopy SaveGame (Pumped up LaikaGT)(1)
- 14. Assassin's Creed 3 Save Game (Game completed 8%, until Chapter 4)(0)
- 15. Supermarket Simulator SaveGame (Quick start, 172 day, 65lvl)(2)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(639)
- 02. Russian Pinocchio Quick Trophy Guide(892)
- 03. Venatrix Quick Trophy & Achievement Guide(895)
- 04. Call of the Sea 100% Platinum Walkthrough(885)
- 05. Wire Lips 100% Platinum Walkthrough(961)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(861)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(770)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(680)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(630)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(656)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(842)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(902)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(611)
- 14. Remoteness 100% All Trophies Walkthrough(972)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(697)
"Xbox password flaw exposed by five-year-old boy" :: Login/Create an Account :: 115 comments