Should you pay a hacker’s ransom?