zero-knowledge encryption

August's 'contained' developer-account compromise returned in December as stolen vault backups. Inside the two-act breach.