Could you really control someone’s hot water with just an email address?