[jadams5]

Oh wow, yep, that's exactly what we figured out. Their save file format stored the password hash, but didn't actually encrypt or obfuscate the grade data beyond just whatever serialization they were doing. We were starting on figuring that format out when we noticed that creating a new save file with or without a password changed a byte right before the password off and on... flip it off and the app no longer prompted for the password... edit/save in the app, flip it back on, and that was that. edit: I should add, rather than get expelled we got a ton of extra credit for it since it was at least sort of sanctioned.