5-year-old Ocean Beach boy exposes Microsoft Xbox vulnerability
Just after Christmas, Kristoffer's parents noticed he was logging into his father's Xbox Live account and playing games he wasn't supposed to be.
“I got nervous. I thought he was going to find out,” said Kristoffer.
In video shot soon after, his father, Robert Davies, is heard asking Kristoffer how he was doing it.
A suddenly excited Kristoffer showed Dad that when he typed in a wrong password for his father’s account, it clicked to a password verification screen. By typing in space keys, then hitting enter, Kristoffer was able to get in through a back door.
Kristoffers' father, who works in computer security, was one proud papa. His first reaction? "How awesome is that!" Davies said. “Just being 5 years old and being able to find a vulnerability and latch onto that. I thought that was pretty cool.”
It's not the first time Kristoffer has flashed his tech skills.
“He’s figured out vulnerabilities 3 or 4 times,” said Davies.
At age 1, Kristoffer got past the toddler lock screen on a cell phone by holding down the home key.
Four years later, he took aim at the Xbox One.
Father and son reported the bug to Microsoft.
“I thought someone was going to steal the Xbox,” said Kristoffer.
Microsoft has come up with a fix and acknowledged Kristopher on their website in a list of security researchers that have helped make Microsoft online services more secure.
· 
XBOX ONE - A New Generation XBox, http://www.xbox.com/en-US/hub/reveal
