Hack-back is in the air in the halls of power. When should we be empowered to use cyber force in retaliation? How do we determine this and how do we normalize conflict in a Geneva Convention or at least predictable domestic and international predictable and practical manner.