5 year old exposes major Xbox One security flaw

[Profane]

A five-year-old boy who worked out a security vulnerability on Microsoft's Xbox Live service has been officially thanked by the company.

Kristoffer Von Hassel, from San Diego, figured out how to log in to his dad's account without the right password.

Microsoft has fixed the flaw, and added Kristoffer to its list of recognised security researchers.

In an interview with local news station KGTV, Kristoffer said: "I was like yea!"

The boy worked out that entering the wrong password into the log-in screen would bring up a second password verification screen.

Kristoffer discovered that if he simply pressed the space bar to fill up the password field, the system would let him in to his dad's account.

"I got nervous. I thought he was going to find out," Kristoffer told television station, KGTV.

"I thought someone was going to steal the Xbox."

Free games
Dad Robert - who works in security - sent details of the flaw to Microsoft.

In a statement, the company said: "We're always listening to our customers and thank them for bringing issues to our attention.

"We take security seriously at Xbox and fixed the issue as soon as we learned about it."

Kristoffer's name now appears on a page set up to thank people who have discovered problems with Microsoft products.

The company also gave him four free games, $50 (£30), and a year-long subscription to Xbox Live.
http://www.bbc.com/news/technology-26879185

 

[#StarkSet]

​

 

[jackswstd]

Guess I'll be getting a PS4 when I get around to it. Make it so 5 year olds can easily hack your console brehs.

 

[Uncle_Ruckus]

What you expect. It's a kids toy.

 

[Clark Wayne]

Get hacked by kindergarteners brehs.

 

[Rekkapryde]

*waits for Courtdog and his minions to bring up the psn hack*

 

[Snitchin Splatter]

if this was playstation millions of accounts would have been compromised before it was discovered and fixed

 

[Bathing Ape]

if this was playstation millions of accounts would have been compromised before it was discovered and fixed

 

[Rekkapryde]

if this was playstation millions of accounts would have been compromised before it was discovered and fixed

Right on schedule...

 

[Lord Beasley]

if a 5 year old figured this out, i wonder who figured it out b4 him

 

[PS5 Pro]

*waits for Courtdog and his minions to bring up the psn hack*

Its not the hack as much as it was how they handled everything before and after the hack
The security was laughable, then they let the bad guys have a week long headstart cuz they wanted to save face
Which goes in line with how they have always operated as a company
meanwhile on the greener side, the problem was handled so fast, you didn't know it was a vulnerbility until it was already fixed
The Xbox One gets updated every MONTH unlike how the 360 was updated twice a year?
The PS4 gets updated once every blue moon, just like its library

 

[Rekkapryde]

^^^^^^^
Like I said..... Right on time

 

[Why-Fi]

some QA heads rolled I'm sure.

 

[Lord Beasley]

Its not the hack as much as it was how they handled everything before and after the hack
The security was laughable, then they let the bad guys have a week long headstart cuz they wanted to save face
Which goes in line with how they have always operated as a company
meanwhile on the greener side, the problem was handled so fast, you didn't know it was a vulnerbility until it was already fixed
The Xbox One gets updated every MONTH unlike how the 360 was updated twice a year?
The PS4 gets updated once every blue moon, just like its library

because this isn't a glaring security flaw

SPIN SPIN SPIN THE GLOBE XBOTS...

who are you to say no one knew about it before this news broke??? you actually believe a 5 year old was teh first person to discover this shyt? the delusions.....

 

[ItWasWritten]

@PS4 is working overtime I see, the end is near for him and his cronies.