Slashdot Mirror


Protecting My Daughter's Notebook?

ctwxman asks: "My daughter enters college in the fall. This past week she spent three days on campus for orientation... and had her iPod stolen! That got me to thinking about protecting her brand new laptop. I'll physically lock it to something immovable -- that's simple. However, I've got a website and it's got a log. Is there a way to make her laptop quietly 'phone home' every time it boots so I can get the IP address and always see where it is? Her machine runs XP, but knowing Slashdot, suggestions for all OSes will be appreciated."

35 of 181 comments (clear)

  1. Wrong priorities by Little+Pink+Bunny · · Score: 4, Funny
    That got me to thinking about protecting her brand new laptop.

    You have a naive daughter (who let her iPod get stolen) and you're worried about her laptop computer? You need to be worried about her other laptop unless you want some worse surprises a few months from now ("Him? That's going to be the father of my grandchild?!?").

    Good luck, man.

    Signed,
    Father of two daughters approaching college faster than he wants to admit.

    --
    I am a
    1. Re:Wrong priorities by slughead · · Score: 4, Insightful

      You have a naive daughter (who let her iPod get stolen)

      I agree but I'll keep it on topic: The best way to prevent theft is to sit her down and tell her to be more careful!

      If you think about it, a couple days for orientation is a very short period of time for something to get stolen. Hopefully this iPod thing will get her head straight.

    2. Re:Wrong priorities by Just+Some+Guy · · Score: 4, Insightful
      Father of two daughters approaching college faster than he wants to admit.

      Same boat - I am so not looking forward to that day.

      OP: Got a webserver of your own? Why not put the Windows equivalent of "curl http://myserver.example.com/secretpage" in autoexec.bat or whatever passes for a bootup script these days? If the laptop goes missing, watch your server logs like a hawk and get ready to call the police the instant a geographically-identifiable IP makes a request.

      --
      Dewey, what part of this looks like authorities should be involved?
    3. Re:Wrong priorities by bhtooefr · · Score: 3, Informative
      HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run?

      There's no curl in Windows, but there IS FTP.
      Transfers files to and from a computer running an FTP server service
      (sometimes called a daemon). Ftp can be used interactively.

      FTP [-v] [-d] [-i] [-n] [-g] [-s:filename] [-a] [-w:windowsize] [-A] [host]

      -v Suppresses display of remote server responses.
      -n Suppresses auto-login upon initial connection.
      -i Turns off interactive prompting during multiple file
      transfers.
      -d Enables debugging.
      -g Disables filename globbing (see GLOB command).
      -s:filename Specifies a text file containing FTP commands; the
      commands will automatically run after FTP starts.
      -a Use any local interface when binding data connection.
      -A login as anonymous.
      -w:buffersize Overrides the default transfer buffer size of 4096.
      host Specifies the host name or IP address of the remote
      host to connect to.

      Notes:
      - mget and mput commands take y/n/q for yes/no/quit.
      - Use Control-C to abort commands.
      That should do the trick - you just need to have a script that it autolaunches that has "GET .secretfile.txt" and "BYE" in it. Then, you can log all attempts to grab .secretfile.txt, and grap IPs.
    4. Re:Wrong priorities by SteveAyre · · Score: 3, Informative

      Or you can download it here...

      http://gnuwin32.sourceforge.net/
      http://unxutils.sourceforge.net/

      A lot of the other *nix tools are there too...

    5. Re:Wrong priorities by SteveAyre · · Score: 5, Insightful

      Of course for this to work, the laptop'd need a working Internet connection.

      If it's stolen, it probably won't get connected to the Internet...

      Also because of the logon passwords, probably the first thing that'll happen to it is it'll be reinstalled off a pirated copy of Windows and it'll no longer have the software to phone home.

    6. Re:Wrong priorities by mindaktiviti · · Score: 2, Insightful

      Also if you bought her that ipod, don't buy her another one. Let her learn the lesson of keeping an eye on stuff all the time (Unless it was pried from her hands by a ruthless thug).

    7. Re:Wrong priorities by ottothecow · · Score: 3, Informative
      well, if it is stolen on a college campus, it probobly WILL get connected to the internet. Either the campus wireless as soon as its turned on or the theif will turn it on and plug it in back at their dorm room. That said, I agree that its too hard to make it phone home like that (maybe if it was on: connect rather than on: boot).

      The best thing to do would be to make sure that the MAC address of every single networking device in the system is written down where you can find it and again where she can find it (and registered with the university if they offer). The university knows its own network and has managed networking hardware so if you can provide the MAC address of the system, they can monitor it and know exactly what port it is connected to (or hotspot it is in). It is simple from that point to send in the campus police to knock on the door of Room 302 of McThiefy Hall. The added bonus of this plan is that it still works when the first thing done to it is a reformat.

      Thats the best I can provide (as another student entering the class of 2009) so I hope it isnt hidden to deep in the comments to be seen.

      --
      Bottles.
    8. Re:Wrong priorities by ottothecow · · Score: 2, Funny
      I supose I should also add that if they do connect to the university network and you get an IP from whatever method, it is probobly going to look just like one of the IPs your daughter usually gets.

      "Dear, I think I found out where your laptop thief is!!!"
      "Where dad?"
      "From his IP, it looks like he is at the University of BigState"
      "Dad..."

      --
      Bottles.
  2. Insurance by Profane+MuthaFucka · · Score: 4, Informative

    You can't prevent theft, and you might not be able to track it down.

    But, you *can* get a rider on your insurance that will cover theft of the laptop.

    That, and backups of whatever term paper she's currently working on kept in a separate place, is what you need.

    --
    Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
    1. Re:Insurance by Profane+MuthaFucka · · Score: 2, Informative

      Oh, and one more thing:

      Tell you daughter the tale of Libby Hoeler. http://www.google.com/search?biw=1331&hl=en&q=libb y+hoeler&btnG=Google+Search If your laptop is stolen, lots of private things become public.

      --
      Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
  3. Not caring if it gets stolen... by david.given · · Score: 3, Insightful
    ...is the simplest solution. I mean, these are students. She's in the highest risk category for having electronic devices stolen. Giving her a brand new, high-spec laptop is madness.

    What does she want it for? Could she, for example, make do with a low-spec laptop worth a few hundred currency units of your choice, rigged up as a thin terminal to a higher-spec but secure machine somewhere else? This would be ideal for doing actual work; small and portable at the human end, large and capable (and backed up) at the machine end.

    This way, the human end is undesireable and unlikely to be stolen. And if it is stolen, it's cheap to replace and all documents will be preserved.

  4. Can you program? by wishus · · Score: 2, Insightful

    It should be fairly trivial if you can program. You can even get a free perl interpreter (ActivePerl or something) if you don't have VisualC++ or somesuch. Put your program in the startup folder, or as a scheduled task.

    The simplest would be to make a secret webpage for her and set that as her homepage in IE. Although that is trivial to change, whoever steals it (or buys the stolen thing) will probably boot it up and start IE, hitting your web page.

    1. Re:Can you program? by Jjeff1 · · Score: 2, Informative

      Heck, you don't even need to program.

      Get a copy of Wget for windows and put it in the startup group with the address of your web site, like so...
      wget http:/// mysite.com/laptop.htm
      that should hit your site and download the file whenever the system is booted.
      For more fun, use Srvany and run the little script above as a service. This way the crooks don't even need to login for it to work.

  5. Really Simple Idea by buelba · · Score: 4, Interesting

    This is simple but eventually they can hack around it:

    1. Set up a subdirectory on your Web page, say "foo.com/google/" that directs to google.com.

    2. Set up her homepage as foo.com/google. Don't tell anyone else about foo.com/google.

    3. When the thieves boot up the PC and get on the Web, they'll automatically go to foo.com/google and, hopefully, won't even notice the redirect. You'll get at least one hit and maybe more.

    The down side is that your daughter will trigger these logs too. (That'll happen with pretty much any technique you use, though.) Promise us that you won't go checking on her surfing times.

    1. Re:Really Simple Idea by menscher · · Score: 2, Interesting
      I've done basically the same thing for some customers -- I set their browser homepage to my site, which just instantly redirects them to their desired homepage. The user doesn't notice any delay, or even remember I'm doing this. But if his laptop is ever stolen, I can start watching logs for connections.

      On the linux side I have it wget that page as part of the init scripts. So if it boots when attached to the network, it will phone home.

      Obviously this doesn't protect against thieves that wipe the drive before going online. But I think most casual thieves wouldn't, since then they'd have to reinstall Windows, Office software, etc.

      Been doing this for years... hardly anything new or exciting. And no, I don't spy. Seeing how often he opens a browser or goes to his home page isn't exactly interesting info anyway.

  6. Nope, that won't do it by paranoos · · Score: 3, Insightful
    People who steal laptops know enough not to boot them up. A lot of people's computers have MSN and AIM and what have you running on startup.

    A friend of mine had their laptop stolen once, and I saw them come on MSN. I wrote down the IP address, only to find out that it was my friend logging in from their home PC.

    In short, if you steal a laptop, you either wipe the hard drive, or bypass the boot process with a CD to snoop around at data.

    Get your daughter a proximity alarm, so if she walks away from the laptop, or if it's grabbed from her, a loud alarm sounds.

  7. Try a boot-up password by Trepalium · · Score: 4, Insightful
    Most boot-up passwords on notebook computers can not be cleared except by the manufacturer (or by highly motivated thieves who know an awful lot about electronics). There's no CMOS battery to pull to wipe out the password, and even if you could, there's still the password on the hard drive. This simple measure means getting the laptop into good enough shape to sell is more effort than it's worth.

    My other suggestion is insurance. It shouldn't cost too much ($50/yr) and it'll cover theft. I had my laptop stolen once, and it was insured, so I replaced it easily. Not only that, it was quite easy to deal with the insurance folks (no horror stories here!).

    Besides, even if you know what IP it's coming from, what goes does that do you? Are you going to go vigilante on them? The police aren't likely to care much -- they don't usually give such thefts very high priority.

    --
    I used up all my sick days, so I'm calling in dead.
  8. Responsibility by Apreche · · Score: 4, Insightful

    Teach your daughter to be responsible. I can tell you every laptop stolen in college was someone being irresponsible. They left their dorm rooms unlocked with laptops out on desks not locked to anything. They would leave laptops unattended in the library for a few minutes while they went to get coffee. Nobody is going to steal her laptop out of her hands or out of her backpack while she's wearing it. If your daughter was more responsible with her belongings they wont get stolen. Any tech solution you have to find it after it gets stolen is unecessary if your daughter takes care of her things.

    --
    The GeekNights podcast is going strong. Listen!
    1. Re:Responsibility by Mad_Rain · · Score: 3, Insightful

      Teach your daughter to be responsible. I can tell you every laptop stolen in college was someone being irresponsible.

      That's all well and good to teach your child to be responsible - but good luck having a college roommate who is also responsible. It's good to have that extra layer of security anyway. :)

      --
      "What do you think?" "I think 'What, do you think?!'"
  9. Timbuktu by Hungus · · Score: 2, Informative

    Since you asked about something that would phone home I would suggest Timbuktu from Netopia. There was a story a few years ago about how a brother recovered his sister's stolen computer by using its phone home functionality.

    --
    Bad Panda! No Bamboo for you! In matters of importance ACs will not be responded to. Want to say something critical,OK
  10. Re:OS X solution by an_mo · · Score: 3, Informative

    start/all programs/accessories/system tools/scheduled tasks

    alternatively, you can install cygwin and cron as a service; it works well for me

  11. Stickers by Bastian · · Score: 4, Insightful

    Seriously. If you don't have a need to worry about appearances (i.e., she's not taking it to corporate meetings), stickers (lots of them) go a long way. Thieves who aren't just stealing it for their own personal use will think twice about stealing anything that is easily identifiable because it would be easy to pick out at a pawn shop, and black-market type folks aren't going to want something that stands out so much. Thieves are generally looking for a quick buck, so they generally aren't going to be interested in scraping all those stickers off, either.

    Also, in addition to writing down serial numbers, write down her MAC address (both the ethernet and the wireless if she has both). If it does get stolen, hand them off to the school's computer center. I know of two separate cases where students stole school computers, and were caught within a day the moment they plugged the thing into the network and turned it on. Hopefully they would be willing to do such a thing for your daughter in the event that such a thing happens.

    But the single most important thing you can do is make sure that she locks her door and, if she has a ground floor room, keeps the windows closed when she's out. A lot of people I knew at college thought they didn't need to because folks around the dorm would keep an eye on things or something like that, but it just isn't true. There were several cases at my school (which only had 1,100 students) where someone from outside the college just walked into the dorms while classes were in session, tried doors, and walked out with the expensive stuff from the rooms with unlocked doors. If they walked in on someone, they would just make an excuse to the effect of, "Sorry, wrong room." And act like they were visiting someone and don't really know their way around very well yet.

    And it's not exactly related to electronics, but, if she uses a purse, get her to quit. Otherwise, she's going to get sick of lugging it around at a party or while she's hunting for books at the library and she'll leave it next to the coat pile or in her study cubby, only to come back and find it gone.

  12. Re:So lemme get this straight. by Holi · · Score: 4, Insightful

    Jesus christ, How do you go from someone having something stolen (especially something as desirable and easy to take as an ipod) to someone who is so carteless that she'll go out and get pregnant by the first guy she lays eyes on. Where do you get off on insulting a parent like that, are you stupid or juat a misogynist bastard.

    Pardon my rough language but it was no more then your attitude deserved.

    --
    Sorry, teleporters just kill you and then make a copy. A perfect, soul-less copy.
  13. offtopic?! by corpsiclex · · Score: 3, Informative

    Most of the posts I see so far are offtopic, insulting, and unhelpful. The guy asked for a tech solution, we're tech people! Help him out. I had a laptop stolen from my dorm a couple years ago, it sucked. I say just write a nice little program that hides itself and gives you a remote shell. Then have it 'phone home' just by updating its IP with a free dynamic dns service. When you need to get into the box, just ssh to the hostname. Call up the school and tell them the IP/MAC, and they will be able to help you if it is on the campus network. Avoid 'locking down' the box, as this will just encourage the theif to format the drive before you have a chance to find it (which he may do anyway). Perhaps other /.ers can elaborate. Good luck!

    --

    eBayDig 1s a typo saerch engien
  14. A couple of options.... by Kefaa · · Score: 4, Informative

    Kim Komando has a reference to several companies that do what you ask.

    Dear Kim: I bought my son a laptop. Is there a way it can be tracked if it is stolen?

    Dear Reader: Yes. There is software that works over the Internet to report the location of a stolen laptop. When a thief connects the laptop to the Internet, the software reports its location to a special Web site. CyberAngel (www.sentryinc.com, $60 annually), CompuTracePlus (www.computrace. com, $50 annually) and zTrace (www. ztrace.com, $50 annually) are three companies that offer laptop locator software and services.

    For MACs you might also try LapCop which emails you when the computer "disappears."

    In addition, as literally anything could be on the drive, encrypt it. The translation slowdown will be barely noticeable and will save you if your child decided to put your VISA card in plain text files. Also, while a hardware password may seem like a great idea, if someone does steal the machine, it will never call home because they cannot get past the password.

    I would then add a real easy to use laptop lock. If it is hard to use, it will not be used. No one wants to try and grab eight books from the library while lugging around their laptop. So they set it down for "just a minute."

    Finally, for the "team her to be responsible" crowd: a college is about the least secure environment to which we will ever expose ourselves. People are free to come and go in most dorms, doors are secure as your least responsible roommate. College is also where more growing up occurs. Lighten up.

  15. Re:OS X solution by TykeClone · · Score: 2, Informative
    Wimp. Do it from the command line with at

    (a command that sucks to use, by the way)

    --
    A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
  16. Personalize the hell out of it by Deagol · · Score: 4, Insightful
    I agree with the guy who said to personalize it.

    Some people etch the VIN of their vehicle on every window.

    I had a roomie in college who spray-painted his shiny new HP48-SX (circa 1991) flourescent safety orange. It looked god-awful, but I doubt anyone considered it a target. :)

    Buy some 2nd-hand laptop and do a creative case mod on it. Wire her or initials in bright purple LEDs on the top cover or something. It'll stand out like a sore thumb, easy to spot if she's looking for it, and it'll be a bitch to fence to someone else.

  17. slow down people by nuggetman · · Score: 4, Informative

    What's all this poppycock about phone home software and remote logins and thin clients? This is rather simple...

    1a. Buy a MicroSaver with guaranteed replacement from Kensington. As long as you file police report in X number of hours, Kensington will give you up to $1500 of the total cost if it was stolen while on the lock. Make sure she uses it. If it's on her desk, it's tethered.

    1a corollary. When she's out, the dorm is locked.

    1b. When it's not on her dorm desk, it is either in her hands, on a table or in front of her, or within arms reach. No exceptions. No "I just left it for a minute".

    2. As another poster said, make it identifiable easily. Put a ton of stickers on it. Get your dremel out and carve in a name, address, phone number, and mention of reward.

    3. Write down serial #s and MAC addresses, keep them on file. Report them to all the nessecary authorities if it's stolen. This includes the campus IT staff - when it comes to finding it by MAC address they can be your best friends. Unlike trying to trace an IP address over the net, they should be able to track the laptop to a physical location quickly if it's plugged into the campus network.

    4. Backup. Backup. Backup. Nuff said.

    5. If you're really paranoid, get a proximity alarm. Small device attaches to laptop, other device attaches to daughter. She goes too far, it goes off and draws attention.

    --
    ...and that's all there is to it.
  18. The only real solution: incentives by sakusha · · Score: 4, Insightful

    Make her pay for the laptop out of her own pocket. I guarantee she'll take a LOT better care of it if it's HER money that paid for it.

  19. Ok, here's what I'd do... by crazyphilman · · Score: 3, Informative

    First, I'd try to find a programmer, because this is going to take a little bit of coding. I'm going to give you a sort of spec; you can hire a starving college kid to hook this up for you on the cheap. OK? Here goes:

    1. Locate a simple, downloadable SMTP library. You want this to be something that can be used within a piece of software to generate and send an email. VB, for example, has a Sendmail.dll file you can download somewhere, with a simple interface for creating and sending email. It's worth googling for (I don't remember it offhand).

    2. Have your coder write some code that gets back the results of ipconfig (is it still called ipconfig on XP? I think that's the one for Windows 2000) and stuffs it in the body of an email. That'll give you what you need. Make sure the email also contains a timestamp, because you'll want to see who had that IP address at that time.

    3. If you want to get really fancy, you can have your developer use whois (if the system has that; have to check) to find out who owns the subnet the laptop is on. That'll tell you whether its her university or a private ISP. If you can find a whois server on the web that'll let you do an automated check, that'll work too, just open a brief http connection. Netsol won't do it; they make you enter text from an image every time. Grumble...

    4. You want the program to run very quietly without output on startup. You'll want to call it something innocuous, like SYSverCHK.exe, something people will figure is system related.

    That's all I can think of off the top of my head... Good luck!

    --
    Farewell! It's been a fine buncha years!
  20. Re:mod parent up! by mysidia · · Score: 2, Interesting

    Then set a BIOS password and set a hard drive password to block access to the configuration, and make the CD-ROM non-bootable... nope, no pirate copies of XP here.

    For bonus points, set a hard drive password and/or put a boot image on the network card itself that silently connects to the network, phones home _And THEN_ boots the OS.

  21. re: bios passwd by pbhj · · Score: 4, Insightful

    Bios password isn't got to stop the theft, it's going to stop the laptop being used afterwards ... until they hard-reset the bios. It might work against you as it might result in the laptop being trashed. If it's used then you at least have a chance to catch the culprit(s).

    If you want to discourage theft I reckon the grunge look (ie case mod it to hell, as others suggest) is the only way.

    If you want to inhibit theft a cable lock is a good idea.

    If you want to reduce financial loss then get insurance.

    If you want to reduce data loss, get backing up.

  22. Re: bios passwd by SteveAyre · · Score: 2, Informative

    Once trick I have for my own laptop is I carry it around in a bag that doesn't look like a laptop bag.

    Putting it in a laptop bag is equivalent wearing a neon sign that says "I have a laptop. Please steal it." Especially if it has the manufacturer on the site just to clear any doubts any potential thief has about the contents.

    Some better ideas are:
    - Get a briefcase and fill it with foam padding
    - There are laptop rucksacks you can get, which are less obvious

  23. An Interesting Fortune. by themassiah · · Score: 2, Funny

    An interesting fortune from Slashdot at the bottom of my page in this story:

    "A girl's conscience doesn't really keep her from doing anything wrong-- it merely keeps her from enjoying it. "

    --
    - Sometimes you're the pidgeon, sometimes you're the statue.