Hacker News Reader

This isn't a one-time pad. It's reused for every message.

It's reused every 8 bytes...

That too.

AES CTR isn't a one-time pad. It's as strong as AES, not theoretically unbreakable.

"Basically" is the key word there.

I usually say that encryption is the easy part. Just use XOR and you are good. All the complicated bits are related to key management.