Tracking Stolen Gadgets — Manufacturers' New Dilemma
heptapod sends in a story from the NY Times about a growing problem for the makers of high-tech gadgets: deciding when and how it's appropriate to track a stolen device. With the advent of ubiquitous GPS and connections to services like the Kindle book store, the companies frequently have a way to either narrow down a user's location or impede use of the device. But some, like Amazon, are drawing a hard line when it comes to establishing that the device was actually stolen.
"Samuel Borgese, for instance, is still irate about the response from Amazon when he recently lost his Kindle. After leaving it on a plane, he canceled his account so that nobody could charge books to his credit card. Then he asked Amazon to put the serial number of his wayward device on a kind of do-not-register list that would render it inoperable — to 'brick it' in tech speak. Amazon's policy is that it will help locate a missing Kindle only if the company is contacted by a police officer bearing a subpoena. Mr. Borgese, who lives in Manhattan, questions whether hunting down a $300 e-book reader would rank as a priority for the New York Police Department."
Mr. Borgese, who lives in Manhattan, questions whether hunting down a $300 e-book reader would rank as a priority for the New York Police Department.
If that's the case, then what does he hope to achieve by finding out the location of the Kindle? Rhetorical question -- we all know what he hopes to achieve, and Amazon wants no part of it.
Breakfast served all day!
Buy a $3 paperback book. Be kind and leave it for the next person.
Only the State obtains its revenue by coercion. - Murray Rothbard
the police barely respond to car theft
the device was really stolen an no sold used
All theory is gray
He bought it from them and they have the serial number of the device they sent him. Why should it be a big deal for them to brick it on HIS request? If there's an issue with whoever wants to use it, it's between the other user and him, not him and Amazon.
Then again, I can understand how they wouldn't want to get into something where they don't know the gory details (i.e. he sold it and wants to ransom it for more money).
Seems like there might be a niche market here for a service to track (possibly using add-in 'root' software) high-end devices that are stolen.
Me, I don't have enough money that I can afford to forget and leave a $300 device laying around on an airplane... :-P
--- Asking inconvenient questions for over 30 years...
I mean, seriously. Why should companies like Amazon, Apple, Microsoft, Dell, HP, or any manufacturer spend any amount of time helping to track down your stolen property to begin with. It is your responsibility to keep track of your property, not theres. Now, nice automated solutions like Apple's Mobile Me allows you to basically brick a stolen iPhone and track its position, but that was nice to have feature that they added but was in no way required too. If someone steals your car, do you call the car manufacturer and ask them to disable the car remotely so no one can drive it? No... you report it to police and call your insurance company. IMHO this applies to electronics as well.
Im gonna bet its a really interesting article, but since I have to register to view it, I guess I ll never truly know...
If Amazon sells you an e-Book on your precious Kindle, they will steal it back from you if the publisher changes their mind about selling an electronic version.
I also can't imagine the police ignoring a request like that. Even if it's a $300.00 device, I've never met a cop who won't pursue a theft if they think it's likely they'll catch the perpetrator and recover the item. For all the police's faults, ignoring a solvable, easily-prosecuted crime ain't one of 'em. Mind you, if a company won't cooperate with a police request relating to an investigation - subpoena or no - the company should be prosecuted itself.
The stolen unit gets sold and the new owner starts buying content. The original owner will most likely buy a new one to replace it. Now Amazon has two revenue streams instead of one.
Tracking is going way overboard... but bricking on demand is a good idea. Why wouldn't a manufacturer want their electronic devices to have a "useless to steal it" reputation?
Who you want to be your next Big Brother?
If this happened to me and Apple/Amazon helped me recover my device I would be quite grateful. In the end I would be more loyal to them, purchase more of their products and be less critical of their failings in the future. It is quite expensive to get a new customer, and if you can retain a customer at low cost you have save that money replacing or regaining them.
Any police department anywhere pretty much won't try to recover anything worth $300 unless it falls into their lap.
how would you prove the device was really stolen an no sold used
You do what they do for passports: you require a police record indicating that you have reported it stolen. That way if the person you track down did not steal it the person who lied to you can end up in hot water for lying to the police, wasting police time etc. plus you have a reasonable defence.
Of course the better way to do it is the way that Apple does with the iPhone: you let the user trace their own device without company intervention. That way the end-user is directly responsible provided that the mechanism is appropriately secure.
Seriously, why don't expensive GPS/internet enabled devices come tied to an online user account from which the user could track, brick a-splode their own device?
GM OnStar can disable your car on your request. It is considered another benefit when people are looking at competing products.
New Economic Perspectives
It's easy to give these devices GPS locators or some kind of backdoor that will allow the owner to disable them. But that raises the issue of security. If you can disable or find your device you can bet that other people will be able to as well. Sure you can talk firewalls and secure connections, but the more they try to seal it and make it uncrackable for your protection, the more proprietary and closed the system is going to become.
Last year I absentmindedly left my GPS and Cellphone in the car (was running late to work). About an hour later I realized I didn't have my Cell on me and went out to the car to retrieve it. Lo and behold my TomTom 920T GPS, and my Motorola Q9c were both gone and the window in my car was smashed out. Rough retail value of the phone and gps together were around the $1000.00 range. The police came and took a report, I even actually still had the boxes for both units with the serial numbers. I've not heard anything since.
What really irks me is that I know for certain that the Cell Phone should be traceable. At least the police could have called Verizon and checked to see if it showed up in any of the 50-100 pawn shops in town. We're not talking major investigate work here, we're talking about what should be a 10-20min call. I called TomTom and also asked them if they could at least make it where that unit will never get an update.. they said it was a feature that many have requested, but at this point in time they didn't offer that.
I know that there are more important things like murders, etc.. but hey they had to take the time to take the report, could at least do a little diligence.
If there's an issue with whoever wants to use it, it's between the other user and him, not him and Amazon.
Supposing it happened the other way around. He left his Kindle in a coffee shop and the person who found it, rather than steal it, decided to note down the serial number and call Amazon to have the Kindle bricked as a mean-spirited prank. Amazon should require some level of "proof" of theft but a police report of the device being stolen should be enough to discourage any prank calls since falsifying one will land you in trouble. They should not need direct police involvement and a court subpoena.
I can see them wanting me to "be serious" about reporting my device as stolen, but a copy police report or insurance claim will do. Lying to the police or your insurance company will get you in a lot of hot water, which creates a deterrent to frivolous or fictitious claims.
The person currently able to login to the Amazon account claims to have purchased lost the device.
Amazon doesn't know if he's sold it, given it away
Amazon doesn't know if someone else logged into his account (ex-partner/significant other?)
Amazon doesn't know if the device was repossessed by a credit card company.
Amazon doesn't have anywhere near enough information to start bricking, or reporting on the location of devices.
paul reinheimer
It's simple when the registered owner of the device reports it stolen they add the serial number to a list. Devices in the list can not be updated and will present a message giving the owners phone number to contact about returning the device. Owner is happy because they either get the device back, or they know it can't be used. I asked Apple to do much the same thing when I lost my iPod last year. I feel it is negligence on the manufacturer's part when they do not implement some form of an anti-theft system especially when the device requires access to propriety company owned and operated services. In this instance DRM can work truly on behalf of the consumer.
"GET / HTTP/1.0" 200 51230 "-" "Mozilla/4.0 (compatible; Setec Astronomy)"
The correct thing for a finder to do is to turn it in to the airline or airport lost-n-found (however inefficient they might appear). If it is not duly claimed within a specified period, then they can claim the device. To protect themselves, Amazon ought to require such proof, especially if a device has been reported lost or stolen.
Otherwise, I fail to see any privacy issue. A thief is not entitled to any I can see: the owner remains owner of the device, and can legitimately authorize the execution of any program, even remotely. Even a microphone program unless the microphone where surrupticious and otherwise unexpected (bug on the device).
Just say it has some CP on it and I'm sure the police would give it a higher priority.
You know how much work this took on my part? Very little - this fell under "other duties" while I worked there, and I was the only person at the time who worked these. The vendors like Amazon are refusing to help seeing only an expense and a loss of sales. This sheer and utter greed on their part with justifiable reason. If they can't do this because it's the right thing, than somebody needs to legislate good companies morals on their part.
Reading the comments, I saw two problems:
1: who can brick it
2: is it really stolen or just sold?
The best solution would be to track ownership online, and that every owner can (temporarily) brick and unbrick his device whenever he wants.
The second problem is dealing with reselling... This could be solved by using a two-part code. The seller would get a "sellers code" from amazon (apple,...), which he would give to the buyer at the time of selling (or even post it on the ebay page). The buyer would have to register the device in his name (as he has to do now), but the device wouldn't work without the sellers code. After the registration and entering the code, the new owner (only him) could un/brick the device whenever he wanted.
i read your email
If they had bricked it, they wouldn't be helping to solve the problem. The guy would have bitched about them not requiring any legal order and how easy would be for a social engineer to brick any device.
They actually taught the guy a valuable lesson: You are responsible for your property. You are a grown up, act like one.
Selling your electronic device should involve de-registering it first. When the seller receives it, the first thing they do is confirm that it's no longer registered to anyone -- so they can now register it.
This way Amazon doesn't have to adjudicate disputes over re-registering a stolen device. Their policy can be simply: "If you are going to buy a kindle, make sure the previous owner unregisters it *first*. Because if you accept the device before they've unregistered it, and they later report it stolen, we will disable it." Why is that so hard?
To all of the people justifying the pain the provider would have to deal with -- if they wanted to go with a policy like I describe above, they wouldn't have to adjudicate anything.
The PROBLEM is, they don't want to make it EASY for people to resell kindles. They'd rather it was a PAIN-IN-THE-ASS so people will be less likely to do it!!
Actually, in some places if an item is found, the finder can put up a notice to that effect, and if no-one claims it they become the rightful owner (naturally there would be all sorts of protections against abuse of this).
The content probably wouldn't be transferred though, but IANAL, and there might not be any specific law at all on the matter in your jurisdiction. This might also mean that if you find a laptop and it is unclaimed, you might not be allowed to destroy the data if there is a DMCA-like law in your area, since a password might count as technological protection.
Sorry, but if I leave a non-E book on a plane, it's too bad, someone else gets it. Why is the e-book any different?
He *LEFT* it on a plane. When i was a kid my mom said finders keepers after 2 weeks if noone comes to you for an item. Honestly only now that i'm successful and older would i return an item. If i was 19 and in college and found a laptop/kindle/etc i'd just keep it.
okay, so tracking it might be fun but...I'd prefer to just have a remote detonate switch. Why catch the thief when I can just blow him up with my hand grenade Blackberry and Toshiba Satellite claymore?
Google's Super Secret Search Algorithm: SELECT @search_results FROM internet WHERE @search_results = 'good'
I don't want the manufacturer to have a kill-switch for my device. Rather I want myself to have the kill-switch to my device to use as I see fit myself. Could I screw over a second hand buyer? Sure I could, but he'd know who I was and could sue me for damages if I did, now couldn't he?
*rotfl* Do you really think a corporation gives a rat's ass about customer loyalty?
Selling cheap crap and then hiring cheap call-center morons who fuck with you until you eventually go away is still cheaper than making a quality product they can only sell to you once in 10 years.
I recently lost my Glofish phone - at a railway station, and never saw it again. ... let the next bugger who finds it enjoy it!
I immediately disabled the phone account, but resisted when my wife insisted that I had to brick it.
Why should I? I was so stupid to lose it
GPS Theft - Very Common Occurance
This story of GPS disappearing within 1-hour of leaving it in a car is something that I hear very often from many people who I have personally known to have their cars broken into because of this. Just two weeks ago a friend of mine took his GPS with him but left the sticky window mount in the car and his car was broken into and searched for the GPS but he had it with him.
Stolen Item = Revenue Restart
I'm surprised that Amazon doesn't just disassociate the user's account from the device until he buys a new one, and leave the lost or stolen device as available for new activation by the new person who finds it or steals it. Knowing Amazon's business ethics it would be profitable for them to active these missing devices to new users to restart the revenue stream from these users purchasing new books with their new accounts. As long as they don't tell anyone and nobody gets access to their information they should be good to go with this plan. Until someone rats them out for activating stolen devices, but who's going to prosecute them or fine them?
Misunderstanding Police - They're NOT Here To Help You
It seems that you are one of the many people here who misunderstand the purpose of Police and believe that they are an agency to aid individuals-in-need like yourself. The Police are not here to help individuals they are here to uphold the law for the common good of society as a whole. They deal with crime and apply the law en-mass to prevent the communities that they are based in from falling into chaos. It only appears that they deal with individual cases to the people involved and those who fail to see the big picture of how the Police apply their efforts to trim certain crime outbreaks down to manageable levels before focusing on other areas.
Even the US Supreme Court ruled that they police do not have to protect you as an individual from certain and imminent deadly harm because that is up to their discretion. So if the Police don't have to save your life why would they care about saving your property?
NY Times - [US] Justices Rule Police Do Not Have a Constitutional Duty to Protect Someone
By LINDA GREENHOUSE
Published: June 28, 2005
Take a good look at a Police officer tomorrow when you see one and try to realize that his job is to protect the community and society and that he has full discretion backed by the highest court in the land to watch you get killed or your property taken without having the obligation to help you in any way shape or form. When you come to this realization that not even the Police are here to help you, you will start learning and appreciating personal independence and you will start taking better care for your personal safety, freedom, and your property. The idea of taking responsibility for your own actions and more importantly, the ability to imagine future outcomes of your actions will start coming to you when you break out of the fog thinking that there will be help available anytime you need it. Learn to help yourself first.
My Lost Full GPS Enabled Cell Phone Experience
My wife left her Sprint HTC Mogul (PPC-6800) that has a full GPS enabled receiver in a bathroom at Universal Studios Florida. Within 30-minutes we contacted park authorities who came to the bathroom to investigate only to find that the purse and phone were missing. The office on duty said that the most common outcome is that the cash money is taken out of the purses or wallets and they are discarded into the trash cans to hide the evidence. They contacted the cleaning crew right away by radio but were told that the garbage was already taken out and cleared out to the back. My wife's phone was turned on in the purse so it was active. Calling it gave the standard 4-rings then voice mail response confirming that it was still operational and powered on, otherwise it would be 1
cron makes it check a webpage for instructions every hour or so. the webpage is on a server in my living room. if the laptop is stolen, i swap the default page (noop) for one that makes it enable the "scream bloody murder while displaying the text "STOLEN LAPTOP - CALL THE POLICE" on the screen, flashing like the blink tag was going out of style - while simultaneously allowing my home system to track the IP of my newly-internet-connected stolen laptop. i am currently trying to decide if watching for a phone line to be connected to it and dialing 911 with a recorded voice saying "i am a stolen laptop with serial number XXXXXXXXXX. please trace this call and retrieve me." is just too over-the-top.
could at least do a little diligence.
You mean like...
Taking care of YOUR OWN property and not leaving it in plain sight, and thus not promoting criminal activity?
Sure... yeah... some diligence was due here.
Mit der Dummheit kämpfen Götter selbst vergebens
Before you go into "senior" years, and you start forgetting things left and right and your eyesight goes.
Otherwise, you will be very busy explaining all those attacks on innocent people to the cops.
That is, until you come across another 19-year-old buck who, just like you, won't take no shit from anyone - and he beats you to death.
And then ends up in prison for murder.
Wasn't Darwin a great guy?
Mit der Dummheit kämpfen Götter selbst vergebens
Perhaps the better policy would be to require the user to provide (i) a copy of the police report, and (ii) contact information for verfication - may be even provide a FAX number that the user may have the police fax the information to them. (I would also argue the cost of the FAX should be charged to the person requesting it - which should only be a few dollars, at least in the US; and not the responsibility of the police to cover.)
Of course, you ask why?
The primary problem for Amazon is liability. They don't want some random person calling in and requesting someone else's device be disabled, and then get sued for the wrong thing. The current policy protects them against that, but it fails to enable users to make valid causes since it would require a subpoena, which is not easy to come by for that purpose - not only would the police officer involved have to care enough, but so would a prosecutor since it is the prosecutor (not the police) that must get the subpoena from the judge.
On the other hand, if they require just the police report, then something is filed. The owner can request a copy be sent to Amazon (or whoever) and communicate the information with Amazon. If they filed the report and they did not own the device, or have any reason to - then they are liable under the law for filing a false police report - Amazon may have to reactivate the device in such a case, but the legal system would provide all the documentation necessary, and the owner would likely be able to after it without much problem. Amazon (or whoever) is covered; and would have sufficient documentation to show they only acted upon lawful information, so a lawsuit would likely only cost them a little in terms of filing, should one happens. Regardless of what they do - one will happen eventually; and it's just a matter of how they have their bases covered.
So I do agree that Amazon (et. al) needs to cover their legal bases in some manner and should do so using lawful information (e.g. the subpoena or a police report), but the device owner should have some recourse as well, recourse that a standard and verifiable police report would provide.
Truth is like the sun. You can shut it out for a time, but it ain't goin' away. - Elvis Presley (source: imdb.com)
My expensive digital camera does not have a password option at all. Anyone, who gets it in hands can start using it immediately. It is like in American football, holders are keepers.
But on my HP laptop there is an option to set a password on the hard disc access, in addition to BIOS and Windows passwords. I set for hard disk a simple password which is impossible to forget.
Still if the laptop is lost or stolen it would not be easy to crack this password for a stranger as it includes letters and digits.
Yes, probably the password can be broken by a specialist but not by a casual criminal. And it gives me some hours to change passwords on my VPN, FTP, e-mail, etc.
On all laptops there is a socket which can be used to fix a security steel cable with the combination lock. I hope the producers of tables for universities, offices, cafes, etc. will include a special security bracket on tables to fix this security cable to the table. Because sometimes there is nothing to fix the security cable too. The same for tables in trains.
I would not mind the same feature for digital cameras too, the same for an access password.
I think we should build infrastructure (furniture, trains, hotel rooms, etc.) with a possibility to use security cables. Simply speaking there should be strong brackets for security cables. Because people do carry their whole lives in these devices. And even if they want to be careful and fix it with the security cables, often there is nothing to fix them to. It should be legislated in building and engineering code.
Let the owner of the device have some control over it's operation. When I buy [rent] a book from my Amazon user account it would downloaded to the device(s) I bought and have registered to that account. The device by serial number, MAC or whatever is obviously tied to that account.
Have a 'device' tab on the account giving the user some control over the device. Like a login display message I can set. I could set it to "This Device is Stolen, Contact XYZ..." Maybe allow me to deactivate that device from further updates. I'm the owner, give me some control of my device from my Amazon user account I use to rent books for it.
The only thing they'd have to resolve is device transfer to another account. They could do the same thing registrars do with domains. Give me, the owner, a transfer confirmation number that must be entered into the receiving account for the transfer to occur. If the transfer confirmation number is entered then the new account now has control over the device.
If after I sell the device on ebay I refuse to release the transfer authorization that's a civil matter between parties. Amazon could waive responsibility until theirs a court order. I'd be more confident to buy the product because it is theft proof in that the device is useless if stolen. I'd still control the device. Seems simple to me and a great for marketing plus the owners would be responsible to device-to-account maintenance relieving the manufacture from the process.
-[d]-
Considering the amount of trouble you're in if you forget to take something with you from an aeroplane, I'm surprised he's willing to go public with that information.
We all know that only terrorists intent on blowing up a plane would ever leave anything behind on one, so ... why hasn't he been sent off to Gitmo?
I agree 100% with Fished. It's dead easy for these companies to track down your device, so they should just do it. I mean, I bought my girlfriend a bunch of gadgets last year for her birthday, and this year, after we kind of had a minor scuffle, which she started btw, not my fault she lost a couple of teeth, she had the nerve to move out of the state. Ingrate. If I can get Amazon et al to disable those gifts, at least she'll learn who's in charge. After all, I paid for them. Even better, they need to give me the location so I can track her down and convince her to get back with me. Or maybe make sure she won't get with anyone else.
There are two kinds of people: 1) those who start arrays with one and 1) those who start them with zero.
It wasn't stolen, he left it on a plane. If you're stupid enough or careless enough to leave a $300 kindle behind, you deserve to lose it. Suck it up, learn from your stupidity and go buy another one. Obviously you have plenty of cash if $300 is something you just set down and forget. I don't like the idea they can delete books I bought, I sure as hell don't want them to be able/willing to kill the entire device. Whiny bitches take responsibility for your own mistakes.
I can see why any one would want them to help tracking and even disabling a lost or stolen device, but I think that they then would have some kind of liability for misuse of the device.
In EU they decided years ago to block EMEI numbers on stolen handsets - all the carriers participate and handset theft dropped to manageable levels. In the US, AT&T could do it for the iPhone and other phones but they do not... Why - it is not worth the hassle. They don't want the complaints from potential customers that bought an iPhone on eBay. AT&T would rather have the revenue of the new customer then deal with the complaints that someone bought a stolen phone. Why would Amazon behave any differently? They have the potential to sell hundreds of ebooks to the user of the stolen kindle and sell a new device to the victim that lost the original kindle. Amazon wins on all counts. People need to face facts - no vendor really cares. They will not bite the hand of recurring revenue.
It should be so easy for amazon to enable the user to disable his own device. With his amazon account, he can provide enough proof, by knowing the password and the credit card number. How big of a deal is this? Defending corporations in a time where basic consumer rights are being violated and indecency and irresponsibility is the order of the day... and that too all the customer is asking is for just a bit of very justifiable assistance.... way to go dude.... and way to go slashdot mods... completely moronic.
He will still go and buy another one. But no... amazon (another irresponsible company) has no interest in this because letting stolen devices be disabled destroys the blackmarket, and eventually there will be fewer thefts. What they don't realize is, if my kindle is stolen, and if I am treated like this, I am never buying another product from amazon.
Funny this should come up. I recently had my house broken into, with the burglars stealing a ton of merchandise. One thing was my ps3, which has a unique MAC address and automatically signs into the ps network. Sony was very helpful, telling me everything that I needed to do to track the unit, but for them to set it up the officer who responded to my case needed to fax them on letterhead. Frequent messages left for the officer went unanswered. So, in the end, the ps3 is just gone, free to be used by the thief or by whoever bought it, even though it has a built-in way to track it AND Sony is perfectly willing to do it.
Here's a thought: if I own a Kindle and someone steals it - that creates an interesting situation for Amazon. If they use their remote control ability to brick the Kindle or provide its current location they are expending time and money - and there's opportunities for bad guys to social engineer some nuisances for Kindle owners. But if they refuse to do this - then it becomes a situation where your property has been stolen and the vendor could tell you where it is - but refuses to do so. That puts them in an awkward position; their actions (or failure to act) support the thief, not you. That's got some legal implications as well as customer service problems.
Those vendors would prefer that these questions never arise because they bought a lose / lose situation when they implemented tracking or remote control as part of their DRM.
Instead of asking Amazon to "brick" his kindle, wouldn't he have been smarter to ask that they provide his contact information to whomever tries to use it?
He LOST this device, it was not stolen.
In theory at least, anyone finding it would contemplate returning it to the rightful owner.
If the person who found it turns out to be dishonest, then "bricking" the device isn't going to make them return it.
I'm not surprised that this guy is from NYC.
Muslim community leaders warn of backlash from tomorrow morning's terrorist attack.
So, lemme get this straight. Someone wanted to do something remotely through amazon , which could have numerous privacy concerns, and they told him to get bent or get a subpeona? Everythings working fine here folks, the risks to privacy and "gifting" a kindle to someone you could later track down outweigh the benefits of disabling and tracking. I applaud amazon, personally.
WÌÌfÍ--ÍSÌÒÍ...Í...ÌHÌÍfÍÍÍ--ÍÍÍ
"But Amazon has no mechanism for this - they want to be contacted by a law enforcement officer with a supoena."
Oh, they have a mechanism. After all, they obviously CAN do it.
But they have no reason TO do it. After all, another kindle will have to be bought. And someone else may want to buy stuff. Sounds like a corporate win to me....
"It seems that you are one of the many people here who misunderstand the purpose of Police and believe that they are an agency to aid individuals-in-need like yourself."
True. Unless you are "important" in some way.
Of course they cultivate that very belief in the public, so it isn't unreasonable for people to expect it. After all, if the "public" didn't see them as the "thin blue line" they might become irrelevant (or the thin blue stain....)
I had 20k of stolen tech. The thieves played my xbox on xbox live for weeks. The SFPD only had to fax a single sheet of paper to Microsoft to get the ISP/IP addy of the people, they refused.
I guess one issue is resale. If someone sells their Kindle and then asks Amazon to brick it, how does Amazon know that it still belongs to that person?
They would not benefit from the extra sales of ebooks that the new owner would have.
Ultimately, the guy should not have left it on the plane. His mistake. By disabling his Kindle account, he basically did all he could to stop it except for possibly insuring it against loss or theft.
And if you bought such a device used and then had the seller disable it via the company, what would your response be? That's why it's a tradeoff, and apparently they determined that it tilts in favor of not disabling simply because the original owner calls.
I would be mad at the seller. But in general I also would not purchase a used Kindle/iPhone device, for fear of just such things.
The best method to protecting asset from theft is tracking it with a gps tracking or a RFID Tag. Obviously, the cost of the asset has to be greater than the cost of the theft protection device. GPS would work well, but the issue here is the cost of $200 or more. There are two types of FRID: Passive and Active. A passive RFID tag will only report on contact. An active RFID will report within about 1,000 feet. Battery life of smaller and inexpensive devices impedes longer distance tracking.