Thorsten and Max discovered the keystrokes are simply encrypted (xor’d) with the MAC address in ECB mode

Mmm, so an attacker can read what you’re typing with 2¹ known ciphertexts. Christ. Why’d they even bother with an XOR.