Five year-old Kristoffer Von Hassel, from San Diego, accidentally managed to log into his father’s Xbox Live account without using the right password. The vulnerability lies in the login system which brings up another verification screen if a wrong password is entered.Speaking to a local news station, Von Hassel said, “I got nervous. I thought he was going to find out.” He then filled the verification box by hitting the spacebar; which apparently worked as a backdoor into the system.
Von Hassel and his father both reported the flaw to Microsoft, and were gifted with four free games, US$50, and a year-long subscription to Xbox Live. More importantly, the vulnerability has been patched and other five year-olds will have to find their own backdoors into Xbox Live.