Ask an Open Source Security Expert: What Can We Learn From the Equifax Hack?