After Kevin's detailed and eloquent explanation of events, the best they can do is show that he was logged in at the same time as the hacker, or whoever it was?