5-year-old boy exposes Microsoft Xbox vulnerability & finds back door into system

OCEAN BEACH, Calif. - A 5-year-old boy from Ocean Beach, Calif. is in the spotlight after he discovered a back door in to one of the most popular gaming systems in the world.

Kristoffer Von Hassel's father, a computer security professional, realized Kristoffer was logging into his father's Xbox Live account and playing games he wasn't supposed to be.

"I got nervous. I thought he was going to find out," said Kristoffer.

The boy had discovered that after typing in the wrong password, the Xbox moved to a password verification screen.

There, Kristoffer was able to type a series of spaces and hit enter to gain access to his father's account.

Instead of being upset, Kristoffers' father -- a computer security professional posted a proud video of the boy's exploit.

"How awesome is that!" Robert Davies told KGTV about his son. "Just being 5 years old and being able to find a vulnerability and latch onto that. I thought that was pretty cool."

Father and son reported the bug to Microsoft.

"I thought someone was going to steal the Xbox," said Kristoffer.
Microsoft has come up with a fix and acknowledged Kristoffer on their website in a list of security researchers who have helped make Microsoft online services more secure.

In a statement, Microsoft said, "We're always listening to our customers and thank them for bringing issues to our attention. We take security seriously at Xbox and fixed the issue as soon as we learned about it."
Kristoffer will receive four games, $50 and a year-long subscription to Xbox Live from Microsoft.

 This is not the first time Kristoffer has flashed his tech skills.

"He’s figured out vulnerabilities 3 or 4 times," said Davies.

At age 1, Kristoffer got past the toddler lock screen on a cell phone by holding down the home key.
Kristoffer said he also knows what he now wants to be when he grows up: a gamer. His dad is leaning toward something in computer security.

Print this article Back to Top