there are various attacks on the 8-bit version at https://github.com/andrewcooke/Stupid.jl

these include:

- plaintext injection

- ciphertext collisions

- distinguishing attack

- statistical plaintext matching

- partial known plaintext attack