Slashdot Mirror
Best Way To Get Back a Stolen Computer?
davidphogan74 writes "I have some stolen computers checking in with a server we have (software pre-loaded), and I have full access to the systems. What's the best way to deal with this situation? The local police (to the theft) have been contacted several times and seem to be clueless. I personally have no financial interest in these computers, I just don't like atom-thieves. What's the best way to handle knowing the IPs, email addresses, MySpace sites, the Google login, etc. when working with law enforcement? The officer I spoke with (who genuinely seemed to care) didn't know an IP address from a mailing address, so I called others. Nobody cared. Anyone have any ideas?"
The ISP can tell you who is at an IP address, and from that, you can find your computers.
confidential data such as that can only be obtained with a court order ... unless you're sneaky and can somehow convince tech support or a CSR to give you the information.
And we handle this regularly. The department local to where the thefts occurred should have been notified in the first place and a police report filed. If you've done that, there will be an officer associated with that report. Get in touch with him/her directly with the information you have. If you can't, find out who the detectives are for that PD and get in touch with them. If you can gather any and all information you've got regarding IP addresses, etc., put it all together before getting in touch.
/. stories regarding people in your situation tracking down stolen computers. You might try searching for those or Google articles and blogs about the steps folks have taken when facing lackluster police response.
Unfortunately, if they're not remotely tech savvy and/or simply afraid of technology, it may take some prodding. Most state police agencies have teams specifically tasked with this sort of thing, so it may be that you have to contact your state's police for help.
When you bring any documentation, also make sure you have estimated costs of all the hardware. That will sometimes help get people's attention, being able to say it's X number of dollars. Not saying it's right, but much of the time you run into departments who won't pay much attention to "petty" thefts, but will take notice of $2000 or more. There have been a number of
As with any civil case, the police are not going to be a driving force to pursue a theft
FYI Theft is criminal, not civil, how serious depends on the dollar amount. Most thefts under $1000 are misdemeanors, over that is felony theft and these crimes are certainly under the pervue of your local and state police (unless its interstate, in which cases the FBI has jurisdiction).
The Admin and the Engineer
What you need to do here is to contact a specialist computer crimes department. This will not be a new situation to them and they will recognize the fact that there is a very high probability of an arrest and recovery of the stolen goods.
The first thing to do would be to find out if the computers were officially reported stolen. If so you need to report the development to the police force where the theft was reported. Otherwise make out a report.
Once a report is made it counts on their local statistics and the police have to take it seriously - we are talking about several thousand dollars here.
There may not be a computer crimes dept on your local force but they should certainly have access to those resources. Find out which force is responsible for investigating kiddie porn - those guys would usually pretty much prefer to be doing anything else for a change, after a short while its like shooting fish in a barrel.
You can certainly help by collecting as much information as possible. For example, log the IP addresses that the machines are using. Then use reverse DNS lookup to find the ISP.
If you still can't get anywhere, contact me at hallam@dotfuturemanifesto.com and I can pass the issue on to folk I know. They may not be able to help you direct but they will know someone who can.
The reason that so much time and effort is poured into investigating kiddie porn rather than bank fraud is not simply the nature of the crime. Its the fact that they have a defined process that delivers highly predictable results. If we could design a process for delivering collars in phishing fraud we would have no difficulty making it a higher police priority.
It seems to me that this is an area where we can easily set up a predictable recovery process that delivers collars.
Looking for an Information Security student project suggestion?
Try http://dotcrimeManifesto.com/
Sorry to piggyback on you Squiddy. Perhaps some kind soul will mod this relevant comment up.
SO1-06113169-C
If anyone at Sony can match a NIC signature to this please post. Sooner or later the idiots are going to plug it in.
http://news.bbc.co.uk/1/hi/england/london/7489064.stm