https://xevio.us/2010/08/mobileme-password-issues-revisited/