Skip to main content
  1. News
  2. Top News

Xbox password flaw: Leave it to a 5-year-old to expose an Xbox security flaw

See also

An Xbox password flaw has been revealed by 5-year-old gamer Kristoffer Von Hassel, who exposed an Xbox system loophole that could allow a user to log into another player’s profile absent using the required password.

Microsoft received a big assist discovering a security flaw on its Xbox One from an unlikely source: a five-year-old boy,” said USA Today on April 4.

How did the Ocean Beach, Calif. youngster discover the back-door error? He was logged into his dad’s account, blasting away on some blood and guts games that were age restrictive.

Explains USA Today:

The flaw was discovered after Kristoffer's father found out he had been playing inappropriate video games on the Xbox One. When his dad, Robert Davies, asked him how he accessed the console, Kristoffer showed him the exploit.

Here's how it worked: After typing an incorrect password, the console jumped to a password verification screen. After typing the space keys a few times then hitting enter, Kristoffer was able to access his father's Xbox Live account.

Ironically, Davies works in the computer security field. Perhaps that’s why he didn’t seem upset by the fact Kristoffer was playing adult games.

“How awesome is that!” Davies said of his initial reaction. “Just being 5 years old and being able to find a vulnerability and latch onto that. I thought that was pretty cool.”

The flaw was elevated to Microsoft, who released a statement: “We're always listening to our customers and thank them for bringing issues to our attention. We take security seriously at Xbox and fixed the issue as soon as we learned about it."

According to USA Today, Microsoft also honored Kristoffer as a security researcher on their website, and sent him a gift package with four games, $50 and a year-long subscription to Xbox Live from Microsoft.

Advertisement

News

  • Gaza conflict
    Israel official: Ceasefire and expanding Gaza conflict are both being discussed
    Video
    Video
  • Air Algerie crash
    Conflicting reports about the Air Algerie disappearance begin to emerge
    Top News
  • Arizona execution
    A Senator familiar with torture denounces Joseph Wood's botched execution as such
    US News
  • Ray Rice suspended
    Ravens' running back Ray Rice is suspended for two games for a domestic violence arrest
    Sports
  • Amazon tribe falls ill
    An Amazonian tribe catches influenza after making first contact with the developed world
    Headlines
  • CIA prison in Poland
    Poland is declared guilty of human rights violations for hosting a secret CIA prison
    Video
    Video

Related Videos:

  • Victims of MH-17 begins journey home
    <div class="video-info" data-id="518337332" data-param-name="playList" data-provider="5min" data-url="http://pshared.5min.com/Scripts/PlayerSeed.js?sid=1304&width=480&height=401&playList=518337332&autoStart=true"></div>
  • Endreson family: Sandy victims win $20M lottery, 17 siblings to share prize
    <div class="video-info" data-id="518339832" data-param-name="playList" data-provider="5min" data-url="http://pshared.5min.com/Scripts/PlayerSeed.js?sid=1304&width=480&height=401&playList=518339832&autoStart=true"></div>
  • 'Creepy dolls' mystery has been solved
    <div class="video-info" data-id="518340689" data-param-name="playList" data-provider="5min" data-url="http://pshared.5min.com/Scripts/PlayerSeed.js?sid=1304&width=480&height=401&playList=518340689&autoStart=true"></div>