Unlikely they attacked only one out of every possible package that could provide access to a system. How do we find all the other dormant hacks?