A five-year old boy has revealed an Xbox Live vulnerability that lets anyone access the account. Kristoffer Von Hassel was able to get access to his father’s Xbox Live account without the right password.
You must be wondering how? Well, after entering the incorrect password in the main login screen, Von Hassel found out that he can access his father’s account by filling the password field with spaces in the second password verification screen.
The security
bug was later reported to Microsoft by Kristoffer’s father who saw his son
playing restricted games on the console. Soon enough, Microsoft fixed the bug,
and rewarded the kid with four free games, $50 (£30), and a year-long
subscription to Xbox Live.
“We’re always listening to our customers
and thank them for bringing issues to our attention. We take security
seriously at Xbox and fixed the issue as soon as we learned about it,” the
company said in a statement.Microsoft also added Kristoffer to its list of recognised security researchers, which is a pretty good thing for the boy. It seems the boy has a bright future ahead of him.


No comments:
Post a Comment