Comments on: To the bastards that stole my laptop...

To the bastards that stole my laptop...

Geekyblonde — Fri, 03 Oct 2008 09:35:39 -0800

Steal *MY* laptop, will you? Now I can track you down like the pathetic dickmonkey you are. Wish you could sneak up on the asshole who stole your laptop and beat the crap out of him/her with a baseball bat? Now you can! Thanks to the beauty and glory of open source and OpenDHT, researchers at University of California, San Diego and University of Washington have created free software that enables you to track down your missing laptop. The Mac OS version even has an option to capture photos of the aforementioned scumbag so you can know your victim before you beat him/her senseless. (Note: I'm not saying that you *should* beat someone up for stealing your stuff, I'm just saying you *could*.)

By: It's Raining Florence Henderson

It's Raining Florence Henderson — Fri, 03 Oct 2008 09:44:24 -0800

My dog is saying you should.

By: quin

quin — Fri, 03 Oct 2008 09:49:11 -0800

Encrypted server side location storage is a pretty clever idea, and it helps to reduce the privacy concerns that inevitably come up when this kind of technology is discussed. But I'm more interested in knowing about the circumstances of Geekyblonde's laptop getting stolen. I'm going to guess you still harbor some anger over this issue.

By: Samizdata

Samizdata — Fri, 03 Oct 2008 09:51:10 -0800

Apparently they must have found the webcam images folder...

By: meta_eli

meta_eli — Fri, 03 Oct 2008 09:56:33 -0800

Well, unless the thief just wipes the hard drive.

By: Sailormom

Sailormom — Fri, 03 Oct 2008 09:56:47 -0800

This post was made using my stolen laptop.

By: DU

DU — Fri, 03 Oct 2008 10:01:01 -0800

I guess nobody asks the OpenDHT project what a "hashing service" is frequently enough to put that in the FAQ.

By: jedicus

jedicus — Fri, 03 Oct 2008 10:05:08 -0800

Yeah, this needs to be combined with a distress signal. So, the laptop tries to phone home with its location, as here. If it can't do so or if the server does not authenticate properly, after an adjustable period of time, then a piece of hardware inside the laptop emits a wireless distress signal. The distress signal hardware would be inextricably tied into the motherboard such that interfering with it would kill the laptop. For bonus points, the distress signal should have its own small integrated battery. Some laptop manufacturer could make a killing in the business and government markets if it built such a device into its laptops.

By: educatedslacker

educatedslacker — Fri, 03 Oct 2008 10:09:52 -0800

Steal my laptop? Ohhhh, you'd better believe that's a paddlin'.

By: oxidizer

oxidizer — Fri, 03 Oct 2008 10:13:07 -0800

Yeah, would be great if integrated at the hardware level. As of now, it is likely to localize the not-so-computer-savvy crook while the ones with a little more tech knowledge will simply reinstall the OS before going online.

By: vito90

vito90 — Fri, 03 Oct 2008 10:14:03 -0800

(Note: I'm not saying that you *should* beat someone up for stealing your stuff, I'm just saying you *could*.) *should* *could* *would*

By: thbt

thbt — Fri, 03 Oct 2008 10:14:46 -0800

Well, unless the thief just wipes the hard drive. I don't think most thieves are that clever. Although, if systems like these become more prevalent and widespread, then you're right, the thieves will know to point the camera away from them, rendering the whole security method useless.

By: andromache

andromache — Fri, 03 Oct 2008 10:17:07 -0800

I'm skeptical. I mean, if my laptop was stolen, I'd really want it back, and I understand that this uses encrypto-tech to make it so only the machine's owner can locate it, but . . . in an era where telecoms can be subpoenaed to give up records and warantless wiretapping is more or less accepted as a necessary evil, it seems possible that this could be used for other purposes than recovering a stolen computer. The idea that someone could remotely track me and take my picture freaks me out. Now I can't even look at internet porn without fearing that someone, somewhere, is watching me. (Big win for exhibitionists and voyeurs, though). Aw, hell, they can already get my whereabouts from my cellphone, so I suppose just implant the subcutaneous RFID tag and let's be done with it.

By: mandal

mandal — Fri, 03 Oct 2008 10:17:50 -0800

I put a Windows ME sticker on mine.

By: not_on_display

not_on_display — Fri, 03 Oct 2008 10:18:10 -0800

Speaking as a dickmonkey, I want to assert that not all of us are laptop thieves. However, we are, as you correctly state, pathetic.

By: Mister_A

Mister_A — Fri, 03 Oct 2008 10:20:28 -0800

I am a wang lemur, much different from a dick monkey, and I will steal your laptop. *yoink*

By: signal

signal — Fri, 03 Oct 2008 10:23:51 -0800

Sucks that the webcam feature only works on OSX. I've been trying to do something similar in python that just uploads the pics via scp, but this could have saved me some trouble.

By: Lipstick Thespian

Lipstick Thespian — Fri, 03 Oct 2008 10:23:59 -0800

I have a Wang Lemur laptop, with customizable everything. It even has a Richard Monkey welcome message! If someone stole it, I'd be heartbroken.

By: thbt

thbt — Fri, 03 Oct 2008 10:26:44 -0800

I almost installed it, but I'm thinking... what would I with a picture of the thief? Shake my fist angrily at his photo? Or go confront him? Would the cops even care to investigate??

By: Potomac Avenue

Potomac Avenue — Fri, 03 Oct 2008 10:31:30 -0800

Harass them on Myspace?

By: PeterMcDermott

PeterMcDermott — Fri, 03 Oct 2008 10:36:51 -0800

I have a Wang Lemur laptop, with customizable everything. I think the Wang Freestyle was their laptop. I'm pretty sure the Wang Lemur was just a word processor. You can't beat going freestyle with your Wang in your lap.

By: Horace Rumpole

Horace Rumpole — Fri, 03 Oct 2008 10:38:06 -0800

I am a wang lemur ...and I approved this message.

By: TheOnlyCoolTim

TheOnlyCoolTim — Fri, 03 Oct 2008 10:38:39 -0800

I guess nobody asks the OpenDHT project what a "hashing service" is frequently enough to put that in the FAQ. A hash table is a data structure which stores (key, data) pairs. Data is efficiently retrieved by specifying the key. A distributed hash table implements a hash table over many computers rather than just one. In this example, the data stored is the computers' IP address and other locating information (encrypted) which the owner can retrieve from the DHT.

By: lupus_yonderboy

lupus_yonderboy — Fri, 03 Oct 2008 10:40:06 -0800

The cops probably won't do a thing. The best idea is to show up with a half-a-dozen of your friends, the biggest you can find, and then very very politely ask for the laptop. That works particularly well if you're in a public place like a coffee shop where you can walk over and say, "Hello, we just called the cops. Hand us the laptop or go to jail." There is some risk - there's a correlation between theft, violence and madness...

By: designbot

designbot — Fri, 03 Oct 2008 10:40:16 -0800

I've had Undercover installed on all my Macs for years. Yeah, would be great if integrated at the hardware level. As of now, it is likely to localize the not-so-computer-savvy crook while the ones with a little more tech knowledge will simply reinstall the OS before going online. Anyone with a Mac can set a firmware password to make this a lot more difficult.

By: mannequito

mannequito — Fri, 03 Oct 2008 10:48:46 -0800

I for one am not concerned. For years I've been surfing the internet only when wearing a balaclava and tin foil hat, regardless of stolen laptops. Come get me..

By: mrzarquon

mrzarquon — Fri, 03 Oct 2008 10:48:52 -0800

designbot- you can reset the firmware password by removing a piece of ram from the machine. Of course if the thief is savy enough to know that, then really short of a separate gps location / lojack hardware thing, you probably wont get your machine back. Apple can track and lock down stolen iPods if they wanted, they already keep a database of machine serial numbers, but they still wont provide such things to the end users. I think they would prefer to keep out of any legal issues, instead of offering what is assumed as legal evidence for the courts, etc.

By: delmoi

delmoi — Fri, 03 Oct 2008 10:55:38 -0800

Of course, this could be implemented as a rootkit, so even if the thief "wiped" the hard drive it would only appear wiped and actually still run the software, in that case they would have to physically remove the drive and wipe it in another machine. If laptop makers wanted too, they could actually put this in the machine's firmware, making laptops impossible to operate without the owner's permission. Since laptop makers are putting things like fingerprint readers on their machines, it wouldn't surprise me if they did this, however, I think most people would want a machine that was as secure against the government as theives, making it hard for laptop makers to play along, not wanting to piss off the government.

By: mrzarquon

mrzarquon — Fri, 03 Oct 2008 11:11:42 -0800

> making laptops impossible to operate without the owner's permission. Since laptop makers are putting things like fingerprint readers on their machines, Most laptop manufacturers don't care about locking down a machine so it is worthless to steal. What they want to offer is a machine whose data is not compromised when it is stolen. Full disk encryption is the new hotness, for the majority of businesses they loose more money in the data and assets on the machine, than the $3k worth of hardware. Not to mention from a service perspective, you will always have to be able to disable the physical hardware protection if you want it to be in anyway repairable. Unless you just want to sell disposable machines you throw away after 12 months.

By: srboisvert

srboisvert — Fri, 03 Oct 2008 11:13:03 -0800

Yeah, would be great if integrated at the hardware level Yeah. Great. Ask my wife someday about how great the fingerprint scanner on her Vaio is. All it does it cause intermittent memory errors and lockouts even when disabled. The real trick to laptop security is to encryption, passwords, have backups, insurance and buy laptops you can afford to replace. Anything else is snake oil.

By: middleclasstool

middleclasstool — Fri, 03 Oct 2008 11:14:05 -0800

The cops probably won't do a thing. Actually, there's a history of them acting on these kinds of data. I read a post...here, I think, though I can't find it, about some computer science researchers who lost a Macbook they had dynamic DNS software installed on. They were able to take the pics and record the IP address of the computer. Once the cops had that, they were able to locate the computer and arrested the thief in his apartment.

By: designbot

designbot — Fri, 03 Oct 2008 11:17:38 -0800

Undercover recovery stories

By: educatedslacker

educatedslacker — Fri, 03 Oct 2008 11:28:09 -0800

That works particularly well if you're in a public place like a coffee shop where you can walk over and say, "Hello, we just called the cops. Hand us the laptop or go to jail." Reading that sentence made me think of P-P-P-Powerbook for some reason.

By: designbot

designbot — Fri, 03 Oct 2008 11:28:40 -0800

See also: The Karma of the Irish (great recovery story, with pics)

By: Durn Bronzefist

Durn Bronzefist — Fri, 03 Oct 2008 12:00:21 -0800

Aw, hell, they can already get my whereabouts from my cellphone Whereabouts?! That's so 2005.

By: ceribus peribus

ceribus peribus — Fri, 03 Oct 2008 13:11:23 -0800

Getting it's IP address? Emitting a distress signal? Pfft. I want to be able to send an encrypted self destruct command that activates an explosive charge under the keyboard. I wasn't going to bring my laptop onto a plane anyway.

By: a robot made out of meat

a robot made out of meat — Fri, 03 Oct 2008 16:57:58 -0800

The problem to me is that it requires the thief be able to boot the thing. I'll take my whole-disk-encryption.

By: PeterMcDermott

PeterMcDermott — Fri, 03 Oct 2008 18:59:55 -0800

Ask my wife someday about how great the fingerprint scanner on her Vaio is. All it does it cause intermittent memory errors and lockouts even when disabled. It must be a software thing. The one on my new Dell XPS works perfectly. I'm really surprised by how well it works. You do have to be sure to start scanning from below the joint though, otherwise the scan is short to register.

By: George_Spiggott

George_Spiggott — Fri, 03 Oct 2008 20:18:32 -0800

I want to be able to send an encrypted self destruct command... The part about sending the command is actually trivially easy and requires no special software. If all you want to do is to be able to send a command to the laptop when it's connected to the internet, then you just write a little script in your favorite scripting language that runs at startup, or as a scheduled task or (ideally) when a network connection is established. (The latter is a particularly easy to do on a unix like OSX or Linux but not especially difficult on Windows.) All the script has to do is fetch the contents of a certain URL, one that preferably only you control. If the contents at that URL contain a certain code word, run whatever demonic program you have prepared. So if your laptop is stolen, once you're sure it's gone and in the wrong hands, just put up a page which contains the command at that URL. The next time the laptop is connected to the internet shit will happen, even if it's behind a firewall, provided it has access to the web.

By: oxidizer

oxidizer — Sat, 04 Oct 2008 04:30:17 -0800

Ask my wife someday about how great the fingerprint scanner on her Vaio is What you're describing is crappy hardware implementation. I was, of course, operating on the assumption of non-crappy hardware implementation.

By: kcds

kcds — Sat, 04 Oct 2008 18:01:42 -0800

You do have to be sure to start scanning from below the joint though Great - now you're going to get ash and blim-burns all over your nice fingerprint scanner.