Five-Year-Old Uncovers Xbox One Login Flaw

[wraggster]

The BBC reports that five-year-old Kristoffer Von Hassel from San Diego has uncovered a (frankly embarrassing) security flaw within the Xbox One login screen (http://www.bbc.co.uk/news/technology-26879185). Apparently by entering an incorrect password in the first prompt and then filling the second field with spaces, a user can log in without knowing a password to an account. Young Kristoffer's dad submitted the flaw to Microsoft (http://www.10news.com/news/5-year-old-ocean-beach-exposes-microsoft-xbox-vulnerability) — who have patched the flaw — and have generously provided four free games, $50, a year-long subscription to Xbox Live and an entry on their list of Security Researcher Acknowledgments (http://technet.microsoft.com/en-us/security/cc308589.aspx)."

http://games.slashdot.org/story/14/04/04/1818200/five-year-old-uncovers-xbox-one-login-flaw