Making it illegal to pay a ransom might be the answer, but it will have painful consequences.