Maybe it was B team? There was an issue that slipped into the iOS backup a while back, where some engineer had added a bare sha1 hash of your password (it's be

Maybe it was B team? There was an issue that slipped into the iOS backup a while back, where some engineer had added a bare sha1 hash of your password (it's been a while, but I think they were trying to add encryption of the metadata in addition to the existing file encryption). The existing encryption was GCM, AES keywrap, and pbkdf2, so those things were done by teams of widely varying skills. I probably could have gotten another CVE from that, but I wasn't sure I was supposed to be poking around in that stuff in beta. Somebody else did report it and it was fixed.