Five-Year Old Boy Exposes Xbox One Security Flaw

Recommended Videos

BlameTheWizards

New member
Jun 1, 2009
533
0
0
Five-Year Old Boy Exposes Xbox One Security Flaw



Kristoffer Von Hassel, of San Diego, just had to enter in a wrong password and then a series of empty spaces to find a backdoor into his dad's Xbox profile.

Ah, to be five years old again. Life was simpler then, only worrying about kindergarten, Saturday morning cartoons and regularly breaching security systems on high-end electronics.

At least, that's the case for Kristoffer Von Hassel, who found a backdoor into his dad's Xbox One account that let him completely bypass parental controls. It was around Christmas that his parents noticed he was logging onto Xbox Live and playing games he wasn't supposed to have access to.

When asked by his dad how he did it, Kristoffer excitedly showed him that if he input an incorrect answer into the Xbox One's password screen it would take him to a second password verification screen. Once there, all Kristoffer had to do was input a series of blank spaces and he had full control of the console.

"I was like yea!" the boy told local news station <a href=http://www.10news.com/news/5-year-old-ocean-beach-exposes-microsoft-xbox-vulnerability>ABC 10 News.

Kristoffer said he was nervous at first, afraid his parents would find out about his youthful hacking. His dad, who works in computer security, was anything but mad about his son's discovery. "How awesome is that!" father Robert Davies told ABC 10. "Just being 5 years old and being able to find a vulnerability and latch onto that. I thought that was pretty cool."

Kristoffer's family brought the bug's attention to Microsoft, which has since fixed the problem and actually gave Kristoffer a credit on their website as a security researcher. "We're always listening to our customers and thank them for bringing issues to our attention. We take security seriously at Xbox and fixed the issue as soon as we learned about it," said Microsoft in a statement to ABC 10. They even gave Kristoffer several free games, a year's subscription to Xbox Live and $50.

While its an impressive feat for any child, Kristoffer's hacking experience apparently started much earlier. His father recounts that when he was only one, Kristoffer learned that he could bypass the toddler lock on a cell phone by holding down the home key.

Source: <a href=http://www.10news.com/news/5-year-old-ocean-beach-exposes-microsoft-xbox-vulnerability>ABC 10 News

Permalink
 

Me55enger

New member
Dec 16, 2008
1,095
0
0
This is why everyone needs to arm themselves with a 5-year-old when Skynet rises and this is why Microsoft really need to reconsider thier recruitment methods.
 

Roxas1359

Burn, Burn it All!
Aug 8, 2009
33,758
1
0
I remember reading about this last night. That back door was quite a big one when you think about it, and now all the kids who managed to find it, if they did, will probably be pissed off at Kristoffer because they can't use it anymore. XD

As for the dad, he is a plain awesome dad that's for sure.
 

Queen Michael

has read 4,010 manga books
Jun 9, 2009
10,400
0
0
This is gonna be a movie someday. Probably one featuring sub-par child acting and decent SFX. Probably they'll make the kid autistic to suit audience prejudices and decrease the need for a skilled 5-year-old actor.
 

CriticalMiss

New member
Jan 18, 2013
2,024
0
0
Well at least Microsoft will be able to save some money by hiring five year olds instead of whoever currently does their security testing. You could just pay them with Pokémon cards or something.
 

Supernova1138

New member
Oct 24, 2011
408
0
0
Clearly Microsoft has never read the evil overlord list, had they done so they would have had a five year old child in house to test their security measures and point out all the flaws in their plans. Microsoft should probably hire the kid, that way they might stop making really stupid mistakes eg. Windows 8, Xbox One DRM policies, and making Xbox One security that easy to bypass.
 

busterkeatonrules

- in Glorious Black & White!
Legacy
Jun 22, 2009
1,280
0
41
Country
Norway
It never fails - EVERY time the XBone makes a new headline, it's one more reason not to buy the damned thing!
 

Hairless Mammoth

New member
Jan 23, 2013
1,595
0
0
"high-end electronics"? Hah. All three were made to be cheap with the only major focus desired by the top execs was the anti-piracy security.

More OT:
Brian Tams said:
I give him about a year before he's recruited by the NSA.
I'd bet his entire extended family probably has more taps on them now that they know he's hacking before grade school and his father works in computer security. They're paranoid enough to turn eyes away from real threats.
 

themilo504

New member
May 9, 2010
731
0
0
This is actually kind of depressing when you think about it, microsoft is one of the largest companies on the planet and they can?t even program a decent parental lock.
 

Johnny Novgorod

Bebop Man
Legacy
Feb 9, 2012
19,347
4,013
118
Queen Michael said:
This is gonna be a movie someday. Probably one featuring sub-par child acting and decent SFX. Probably they'll make the kid autistic to suit audience prejudices and decrease the need for a skilled 5-year-old actor.
It already is! It's called Mercury Rising - the story of an autistic savant kid who bypasses an NSA cryptographic code, so a bounty is placed on his head.


It's awful.

Brian Tams said:
I give him about a year before he's recruited by the NSA.
Or he's clipped by the NSA.
 

Scorpid

New member
Jul 24, 2011
814
0
0
Brian Tams said:
I give him about a year before he's recruited by the NSA.
"I was like YEAH!! Your eewhales are mwine andwea merkall..." ::giggles madly::
 

ThunderCavalier

New member
Nov 21, 2009
1,475
0
0
CriticalMiss said:
Well at least Microsoft will be able to save some money by hiring five year olds instead of whoever currently does their security testing. You could just pay them with Pokémon cards or something.
And top it all off, they'd probably be more effective than the current staff.

All things considered, this kid is either really lucky or has quite the eye for technology at his age. It'd be disappointing if this was the last we heard of him.
 

Shocksplicer

New member
Apr 10, 2011
891
0
0
Uh guys? Way to bury the lead...
The correct title should read "Real World Supervillain gets Origin Story!"