clock menu more-arrow no yes mobile

Filed under:

5-year-old uncovers Xbox Live account security flaw

A 5-year-old boy was able to hack into his father's Xbox Live account by falsely entering the password with space keys, 10News reports.

The vulnerability has since been corrected. After booting up an Xbox One, Kristoffer Von Hassel would incorrectly enter his father's password. After it took him to a verification screen, he'd use the space button trick to log on.

Von Hassel's parents discovered the 5-year-old had accessed the account after they found him playing restricted games. The Von Hassels contacted Microsoft, who then rewarded the boy with four games, $50 and a yearlong subscription to Xbox Live. Von Hassel is also listed online as one of the security researchers who helped make the company's systems safer.

"We're always listening to our customers and thank them for bringing issues to our attention," Microsoft said in a statement. "We take security seriously at Xbox and fixed the issue as soon as we learned about it."

According to the boy's father, it's the third or fourth time Kristoffer has found vulnerabilities in security systems. To see how Von Hassel accomplished his hack, check out the video on 10News.

Sign up for the newsletter Sign up for Patch Notes

A weekly roundup of the best things from Polygon