How could we distinguish between a hack and a purchase covered up as a hack?