it tried to connect out over the internet to an IP address somewhere in Europe. That IP address belonged to a so-called command-and-control server that functioned as the program’s remote puppet master. And when Robinson reached out himself via his web browser to that faraway machine, he was amazed to see that it had been left entirely unsecured. Anyone could browse its files at will.