You need a javascript enabled browser to watch videos.
Click To Unmute
GS News Update: 5-year-old discovers security flaw in Xbox One
How Alan Wake II Made Me Face My Fear of Horror Games
GameSpot's Top 10 Games of 2023Thompson: The Pop Culture Icon’s Strange Legacy - LoadoutFirearms Expert’s FAVORITE Weapons Of 2023State Of Gaming Handhelds In 2023How Lies of P Cracked the Souls GenreLike a Dragon: Infinite Wealth - Official Ichiban Kasuga Character Spotlight TrailerLike a Dragon: Infinite Wealth - Official Saeko Mukoda Character Spotlight TrailerLike a Dragon: Infinite Wealth - Official Chitose Fujinomiya Character Spotlight TrailerLike a Dragon: Infinite Wealth - Official Eric Tomizawa Character Spotlight TrailerLike a Dragon: Infinite Wealth - Official Kazuma Kiryu Character Spotlight TrailerLike a Dragon: Infinite Wealth - Official Yu Nanba Character Spotlight Trailer
Share
LinkEmbed
Size:640 × 360480 × 270
Start at: End at: Autoplay Loop
Want us to remember this setting for all your devices?
Sign up or Sign in now!
Please use a html5 video capable browser to watch videos.
This video has an invalid file format.
00:00:00
HTML5
Auto HD High Low
Report a problem
Sorry, but you can't access this content!
By clicking 'enter', you agree to GameSpot's
Terms of Use and Privacy Policy
enter
A 5-year-old boy managed to circumvent the Xbox One's security and log in to his father's account without entering the correct password.
Reported on the BBC, San Diego child Kristoffer Von Hassel has now been credited as a security researcher by Microsoft. In an alternate universe, the kid probably turned to the dark side, logged into your account, and pumped your life savings into FIFA Ultimate Team card packs.
The exploit, which has already been fixed, was discovered by Kristoffer after entering the wrong password when trying to access his dad's Xbox Live account. By first attempting to log in with an incorrect password, users are taken to a second verification screen, where the child found out that by simply filling up the password field with spaces he would be able to access the account.
5 year old Kristoffer Von Hassel. Image credit: KGTV.After besting the multibillion dollar company, the preschooler said to local news station KGTV that he "was like yea!"
After realising what he'd done, however, Kristoffer said he "got nervous. I thought [Dad] was going to find out."
Kristoffer's father, Robert, also works in computer security. Technical wizardry must run in the family.
What did Kristoffer think was going to happen after his father reported the error to Microsoft? "I thought someone was going to steal the Xbox," he said.
For reporting the major security loophole, Microsoft gave the kid four free games, $50, and a 12-month subscription to Xbox Live.
"We're always listening to our customers and thank them for bringing issues to our attention," said Microsoft in a statement. "We take security seriously at Xbox and fixed the issue as soon as we learned about it."