Last week a young boy from San Diego named Kristoffer Von Hassel figured out how to log into his father’s Xbox LIVE account without using the correct password. “I got nervous. I thought he was going to find out,” Kristoffer told television station KGTV. “I thought someone was going to steal the Xbox.” Luckily for Kristoffer when his dad found out and sent the details of the flaw to Microsoft, not only did he receive a number of free games, but he was also listed as a “security researcher” on Microsoft’s website. Hit the jump to find out how he managed to log in.
The young boy realised that when he typed in the wrong password when attempting to log in he would be redirected to a password verification screen. For reasons that aren’t entirely clear, other than Kristoffer is five years old and potentially a genius, he then decided to type in a large number of space keys and hit enter. Remarkably, this gave the youngster full access to his father’s account and allowed him to play a number of games that were previously off limits.
Kristoffer’s father Richard Davies – who works in online security – is extremely proud of his son’s unusual achievement. “How awesome is that?” Davies said. “Just being five years old and being able to find a vulnerability and latch on to that. I thought that was pretty cool.”