lazy/silly XOR "encryption"