Punishing a Hacker