Slashdot Mirror
Retrieving a Stolen Laptop By IP Address Alone?
CorporalKlinger writes "My vehicle was recently burglarized while parked in a university parking lot in a midwestern state. My new Dell laptop was stolen from the car, along with several other items. I have no idea who might have done this, and the police say that without any idea of a suspect, the best they can do is enter the serial number from my laptop in a national stolen goods database in case it is ever pawned or recovered in another investigation. I had Thunderbird set up on the laptop, configured to check my Gmail through IMAP. Luckily, Gmail logs and displays the last 6 or 7 IP addresses that have logged into your account. I immediately stopped using that email account, cleared it out, and left the password unchanged — creating my own honeypot in case the criminal loaded Thunderbird on my laptop. Sure enough, last week Gmail reported 4 accesses via IMAP from the same IP address in a state just to the east of mine. I know that this must be the criminal who took my property, since I've disabled IMAP access to the account on all of my own computers. The municipal police say they can't intervene in the case since university police have jurisdiction over crimes that take place on their land. The university police department — about 10 officers and 2 detectives — don't even know what an IP address is. I even contacted the local FBI office and they said they're 'not interested' in the case despite it now crossing state lines. Am I chasing my own tail here? How can I get someone to pay attention to the fact that all the police need to do is file some RIAA-style paperwork to find the name associated with this IP address and knock on the right door to nab a criminal and recover my property? How can I get my laptop back — and more importantly — stop this criminal in his tracks?"
University cops do the bidding of the school... they're more into securing physical spaces and crowd control than anything in the tech sphere. But there's some part of the school that handles the misbehaving students, and they're the ones to contact. You've got your $1000 laptop missing, they get to threaten his $30,000-$120,000 investment in education.
This is the threat the RIAA/MPAA loves to use, they don't have the school police raid the computer, they just get the school admins to hammer the kid.
We saw that the police bent over backwards and ransacked a man's home when he possessed a missing iPhone of Apple's. But when a normal person loses an item and has a lead for the police to go on, they aren't interested. Just further proof that the justice system is bought and paid for by corporations, and they exist only to ensure that corporations make money. Sickening.
Obviously they've launched Thunderbird, so they are possibly interested in gleaning whatever information they can in that way. You could try sending a trojan to your account in the hopes that they run it, in order to open some remote access to your machine. Perhaps based on their web browsing history, etc, you can determine more specifically who they are.
Also note that the person may have purchased your laptop unaware that it was stolen.
Better known as 318230.
Post the IP here and the s/n of the laptop. Then sit back and wait. All *you* did was post some info - just cannot be held responsible for the life-altering ass-beating that the person found with the laptop will most certainly receive.
Sometimes you just have to let the system work.
Humor from a Genetically Molested Mind
There's a good point here. In many (most?) states, knowingly possessing stolen property above a certain value is a crime, regardless of who stole it. If the cops aren't interested, a state DA's office might be.
I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
It's not just theft of the laptop,
They have illegally used Thunderbird to gain access to your e-mail account.
That means they have gained access to both the laptop and your e-mail account without authorization.
Maybe you don't need to stop with the police. File a suitable civil action, and get a court order to compel the ISP to reveal the information.
Not just theft of property, but gaining access to 2 computer systems without authorization, aka 2 accounts of computer fraud and abuse, AND 1 count of theft/conversion.
Maybe it's his insurance company he should be contacting anyway. They may do their own investigation based on your evidence because they don't want to have to pay a claim. They may have a little more clout than the average citizen too.
If he's getting into the person's gmail account, it most certainly is. It's called "computer trespass" in my state.
But hey, don't take my word for it. I just do it 40 hours per week...
Not this -- The thief will simply sell the laptop making it harder to track, you're better off not tipping your hand until you have your hands around them.
And then, have you considered that the person in possession of the laptop may not be the one who stole it? It could be he bought off eBay and for whatever reason, is examing what's on the hard drive.
So? It's still the poster's laptop, and he has a right to try to get it back. The person who bought it, if that's what they did, bought stolen property, and will have to take that issue up with the seller. Of course, the seller will be busy dealing with the police.
Just because another innocent person may have gotten involved, doesn't mean the poster shouldn't attempt to regain his rightful property and bring the criminal to justice.
I think CorporalKlinger needs to learn the first rule of owning tech devices - don't leave them unattended in a car. If you can't observe basic security of your own devices then you kind of deserve to have it stolen.
Never leave anything in the car unattended. Hmmm. So, by that logic you can then never leave the car itself unattended, because you are asking to have it stolen?
You forgot to remind them that they shouldn't dress in any way that another person might find sexy, because then they "kind of deserve to" be raped.
(not sure if CorporalKlinger is female or just wears women's clothes)
OK, so the laptop was stolen on school grounds. But the problem is now to locate and recover it from another state. The school cops have jurisdiction on school grounds and keep the peace there. So if the laptop turns out to be on another campus you could try the cops in THAT school (though it seems unlikely, since the person holding the laptop is using a service). Don't expect the cops at the school where it was lifted to go out of their way to chase down stolen property in another state, outside their jurisdiction. Once you have a specific thing to ask for (like trying to get the location from the ISP and forward that info to the cops of local jurisdiction there) maybe they'll do it - and maybe not.
Got the report number? You (or a lawyer) might be able to get the ISP to cough up the info with that, or get started on getting a court order if they're reticent.
(You might also try the county sheriff. In some states they have overriding jurisdiction on school grounds. File a crime report with them, too.)
= = = =
The laptop is phoning home from an apparently static IP address - or a long-duration connection. Can you remotely log into it? If so you might be able to do things like turn on the microphone, look at files the new user is taking notes in, or follow his browsing. Does it have a built-in camera? Does it have any remote administration or monitoring software installed - or could you install some remotely?
Does it have built-in WiFi and if so do you have the MAC address of it? (You could probably get it by that hypothetical remote login if you don't have it recorded.) If the WiFi is on or can be turned on and if you can get the neighborhood information you could then sniff the location when nearby. (That would also help the cops with jurisdiction in the area if you go along with them to sniff it when they want to bust it. Gives 'em probable cause.)
Note that IANAL. So I could be talking through my Stetson.
Check with a lawyer if you can find one with the appropriate specialization. If you're a student at that university you might have legal advice resources available through them. Or if they have a law school ask who among the faculty is expert on this and talk to that prof. Academics sometimes like to help, especially where the law is squishy. B-)
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
Don't do this. I know of a few chans that could definitely get dox on that guy: I've seen them social engineer contact, even billing, information out of ISPs. Heck, during the opening days of the Anon vs Scientology thing, before the protesters took over, I saw people obtain secret Scientology documents through a combination of hacking and social engineering. They could definitely get that info. However, in your case, you want something that's permissible in a court of law. So you can't go with any illegal methods of information gathering. Compulawyer has the right idea below.
Actually, if you do something to be liable for killing or seriously injuring someone, it's pretty damn likely that insurance won't help you.
Get out your policy. Go ahead, I'll wait. Now read it carefully. Somewhere buried in there is the maximum amount of money the insurance company will pay for such a claim. Now go look up how much plaintiffs win when you're held liable for someone dying or getting maimed, and compare it to the first number. If you kill or main someone, you're pretty much going to declare bankruptcy unless you're Bill Gates, pure and simple, and there's not a damn thing having insurance will do for you.
What insurance is good for is one thing and one thing only: To handle things between minor fender benders up to totaling a car and/or covering relatively minor injuries to others or major ones to yourself. Anything past that and you're screwed. Anything less than that, and you're better off simply paying out of your own pocket because of how much higher your premiums will be.
In case you don't know this yet, insurance is a scam. It sounds nice in theory, but it's legalized gambling with a twist--you're betting money on something bad happening instead of something good. Just like in a casino, in which the house always comes out ahead, the insurance companies will always come out ahead, too. There's actually a special word for people who make sure this stays true, they're called actuaries. Add up all of the money you--and your employer, on your behalf--have paid over the years for insurance, and imagine how far that money would have gone had you paid it into, I dunno, a mutual fund or something instead of paying for actuaries and marble-halled buildings. You might actually be able to pay off a large liability claim if you had.
And now, a lot of states have mandatory automobile insurance laws on the books. Do you live in one? I do, and I remember when it went into effect. If you do, have your premiums gone down because so many more people are now paying into the system and because there are so fewer uninsured motorists on the roads now? Yeah, mine haven't either. Funny how that works, isn't it? Again, it sounds nice in theory, but in reality, these laws are just a blatant money grab by insurance companies to use police power to force you to pay them money. Like I said, the industry as a whole is a scam.