different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare,

Are we doing client side verification again already? I thought we had just remembered not to do it recently.

This discovery lead me to eventually changing to the Ian knot. Now I can’t even remember how to do it any other way.