What might be one of the first steps in hacker behavior?