Slashdot Mirror

← Back to Stories (view on slashdot.org)

Five-Year-Old Uncovers Xbox One Login Flaw

Posted by Soulskill on from the kids-input-the-darnedest-credentials dept.

New submitter Smiffa2001 writes: "The BBC reports that five-year-old Kristoffer Von Hassel from San Diego has uncovered a (frankly embarrassing) security flaw within the Xbox One login screen. Apparently by entering an incorrect password in the first prompt and then filling the second field with spaces, a user can log in without knowing a password to an account. Young Kristoffer's dad submitted the flaw to Microsoft — who have patched the flaw — and have generously provided four free games, $50, a year-long subscription to Xbox Live and an entry on their list of Security Researcher Acknowledgments."

3 of 196 comments (clear)

  1. Prosecute the child and father! by Anonymous Coward · · Score: 5, Funny

    Why is this criminal being celebrated rather than prosecuted for hacking into a protected computer system across state lines? The child is A FELON and must go to jail. The father acted as an accessory and should also be prosecuted.

  2. Sucks to be a security professional... by pegr · · Score: 5, Funny

    Yeah, are you sick of that story of the Indian kid who got his CISSP at the age of 12? Well, here's a 5 year old with a published vulnerability!

  3. They were busy by sl3xd · · Score: 5, Funny

    I'm sure the reason the reward was so paltry was because the rest of the reward went to cleaning the development team's underwear.

    --
    -- Sometimes you have to turn the lights off in order to see.