How do hackers turn our own data against us? What can we do about it?