Five-year-old discovers Xbox password flaw

Microsoft has rewarded a five-year-old boy with free games after he discovered a serious flaw in Xbox Live's password system.

Kristoffer Von Hassel, from San Diego, stumbled upon a way to log into his dad's Xbox account without needing the password - simply by tapping the space bar.

Enter an incorrect password and Microsoft's site would load a second password verification screen - it was this that he simply filled with space bar presses to gain entry into the account.

"I got nervous. I thought he was going to find out," Von Hassel explained (thanks, BBC News). "I thought someone was going to steal the Xbox."

He then told his dad, who contacted Microsoft about the exploit.

Microsoft has since patched the flaw and rewarded the family with four free games, £30 Xbox Live credit and a year's Xbox Live Gold membership.

Von Hassel is also credited in March 2014's list of individuals who have helped Microsoft discover security issues that month.

Source Eurogamer

 

Classic haha, I wouldn't say anything though

 

5 free games? all the kid needs is Minecraft :lol:

 

Dam i bet he is one happy kid.

 

Its 4 Free Games

 

Where the hell is my cuppa at?

 

so lucky i wonder what games lol

 

SO you just type in some empty spaces and boom, you're logged in? Such security :LOL:

 

Well not anymore it will be patched now :/

 

All the license transfers I could have stole ... :LMFAO:

 

i know right or OG Accounts

 

hahaha wish my son had found this out no way would i have told M$ it would have been posted on here lol.

 

The possibilities are endless!

 

So a 5 year old beat Microsoft's security. Wow.. My account details feel so safe all of a sudden.