re:publica 2017 - How to Report on a Hack Without Becoming a Puppet