Who Should Keep Out the Hackers?