Implementation flaws in DPAPI password protector for Microsoft cloud accounts [pdf]