One victim discovered a security flaw on Xbox.com, according to which an attacker may exploit an unlimited number of password attempts to gain entry to any Gamertag they choose by learning the corresponding email address and launching the site with a password generator.