Out of the mouths of babes… come the secrets of the video game industry, apparently. San Diego news station KGTV reports that five-year-old Kristoffer Von Hassel stumbled upon a blatant security flaw while playing on his family’s Xbox One, giving him access to games his parents thought they had restricted.
Kristoffer, the young programmer-to-be, attempted to log in to his father’s Xbox Live account, but entered an incorrect password. A second verification screen followed, and by hitting the space button several times and pressing enter, he was able to access his father’s account.
When Kristoffer’s father, Robert Davies, found the boy logged in to his account, he asked him how he’d managed to do it. Kristoffer repeated the process for his father, demonstrating the vulnerability. Davies, who works in computer security, recorded footage of the bugged process and reported the issue to Microsoft, who rewarded the father-son duo with four games, $50 and a year-long subscription to Xbox Live.
Microsoft claims that the vulnerability has since been resolved.
