Slashdot Mirror


How To Catch a Laptop Thief?

First time accepted submitter otaku244 writes "I spent a day in Vancouver this week while working in Seattle. While I enjoyed the area, some Vancouver citizen decided to enjoy my Macbook Pro. Unfortunately, I didn't discover this until I was already back at my Seattle hotel. Needless to say, I am quite miffed at the whole experience. Fortunately, I have LogMeIn installed on that machine. I provided the IP address to the VPD, but they say that laws don't allow warrants solely on the physical address tied to an IP. It sounds like the silver bullet is to take a picture of the person using the laptop. The question becomes, how do I convince the guy to run a script that will take a picture of him and smtp it to me? I promise to post pics of the guy if this gets pulled off successfully!"

21 of 485 comments (clear)

  1. Hate to say it... by Richard_at_work · · Score: 4, Insightful

    But the best moment for you to take action is long gone - when you had your laptop in your possession.

    Let this be a lesson readers, do something to secure your possessions now, install something to allow for ease of tracking and identification now, not as an afterthought when it gets nicked.

    To the op, can't you just log in with LogMeIn and set a script running which takes a photo every minute or so?

    1. Re:Hate to say it... by Zantetsuken · · Score: 3, Informative
      The OP apparently doesn't even know why he installed LogMeIn in the first place. From the LogMeIn website:

      Key Features Remote Control Your Computer Access your desktop from anywhere. Wake-On-LAN Start a sleeping computer on LAN. PC or Mac compatible Anytime, anywhere remote access.

      It does this by installing their remote desktop client on the host to remote into, proxies through their servers over regular HTTP / port 80, and also features a web based control/viewer. The following is an excerpt from Wikipedia

      Users access remote desktops using either the LogMeIn Ignition stand-alone application or a web portal. The web portal requires either an ActiveX plugin for Internet Explorer, or an extension for Firefox (the LogMeIn plug-in for Firefox), or an extension for Safari (the LogMeIn plug-in for Safari), failing that it falls back to requiring Java in order to run a Java program,[3] and failing that it falls back to "a screen-shot based HTML remote control".[4] The web portal also provides status information for the remote computers and, optionally, remote computer management functions.

      So he has all the remote desktop capabilities in the world he could want. All he needs to do is setup a script to take photos whenever the lid is opened, and check on the browser cookies to see what web-sites the thief is going to. Even if the Apple camera application doesn't support this, I'm sure there are plenty of F/LOSS camera applications that would.

      Basically, he needs to do what this DEFCON hacker did. Failing all of that, he could provide the S/N and other info to the Vancouver PD and Apple, so that if the thief attempts taking it to an Apple store to have it wiped (and removing LogMeIn by doing so) if they follow their processes and check the S/N, they should see it is a stolen laptop...

    2. Re:Hate to say it... by retchdog · · Score: 3, Informative

      there's a backdoor so the hotel doesn't have to jimmy the safe everytime an idiot forgets their password.

      --
      "They were pure niggers." – Noam Chomsky
    3. Re:Hate to say it... by Ambvai · · Score: 3, Insightful

      One of my friends, a doctor working with MSF/Doctors Without Borders, had his laptop confiscated for pornography in his medical reference materials. They even graciously told him, 'If you miss your flight, I'll be my fault.'

  2. Re:Be Proactive by PPH · · Score: 5, Funny

    i bet you wear a fanny pack, huh? i'm quite sick of this metrosexuality fad.

    Huh?

    The majority of fanny packs I've seen (including mine) are holsters. I wasn't aware that carrying a Glock around was the new trendy fad.

    --
    Have gnu, will travel.
  3. Lazy police by www.sorehands.com · · Score: 5, Insightful

    It sounds like the police just don't want to bother. If it was the MPAA, RIAA, or Apple asking, they would have a SWAT team there in under 5 minutes.

    The IP address with location may not be sufficient for a conviction, but it does support probably cause. Why not see if you can go to the location, and then h

    Don't you have sshd enabled on your mac with an appropriate 50 character password? Just use ssh to remotely do it.

    Doesn't LogMeIn allow you to remotely control the machine? Use (ssh is preferred) that to set up a script that takes the picture, make several copies in several locations, copies the file via scp, and ftp to a couple of different locations. Then wait for him to log into different web sites so you can have his user ids, then have the computer take pictures.

    1. Re:Lazy police by Chucky_M · · Score: 5, Funny

      He could introduce himself as Professor Doblisnski from the Kiev University where he teaches advanced Nuclear Weapons programmes. Happily explain that your Mac contained an unfortunate amount of technical details on how to make and deploy a warhead using only kitchen supplies but was stolen by a Mulslim looking guy who has this IP address as tracked by your embassy security services. You could follow on with, my Embassy told me not to come here and inform you but as a human being I thought you should at least be warned, sorry cant stay on the phone I am leaving the area as all non essential embassy staff have been evacuated etc...

      Ok you might not get the Macbook back but it will be the last one that particular guy steals and I am just guessing, but that IP law might not apply :)

  4. Prey project by feranick · · Score: 4, Interesting

    ... I know it's too late for you now. But, you should consider prey project. It does now what you are asking.

  5. Really? by SuricouRaven · · Score: 5, Insightful

    "I provided the IP address to the VPD, but they say that laws don't allow warrants solely on the physical address tied to an IP."

    Translation: You're a nobody, and we're not going to spend our precious resources tracking down and prosecuting a small-time thief. Come back when you've got a friend in politics or the media.

    If an IP address alone is enough evidence to file civil suit against someone for copyright infringement, and under the new proposals enough to have them disconnected without so much as a trial, I find it hard to believe that it can't be enough to be at least reasonable suspicion and thus grounds for a warrant.

    1. Re:Really? by otaku244 · · Score: 5, Interesting

      Sorry for burring this update here, but I don't know how to update the article above.
      I actually had my business partner on the hunt and we tracked it down to 4th District Vancouver. We also found out that the non-emergency VPD number takes you do a civilian call center. These guys seemed be misinformed about their own laws. So when we connected directly with 4th District, we got a call back from a detective who pulled the case. This happened on Friday. I had already submitted to Slashdot the night before.
      Anyone know who to update the submission?

      --
      Mod me down, I shall become more off-topic than you could possibly imagine.
    2. Re:Really? by mrchaotica · · Score: 3, Funny

      Anyone know who to update the submission?

      Send an email to CmdrTaco.

      ...oh wait.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  6. The other side by bozonian · · Score: 3, Interesting

    Upstate New York: last weekend two Sheriff's investigators showed up at my house. They were looking for a stolen laptop and the "GPS on the laptop" had phoned home and told them the laptop was at my house. They just asked if we had recently bought a laptop blah blah blah. They left when it became obvious we knew nothing about it. Two days later 4 rednecks showed up at the house, my wife was home alone. They were looking for their "grandma's laptop that had family pictures on it and the GPS said it was at this house". They went away unsatisfied of course. I called the Sheriff back and told him what happened, and that MacBooks don't have GPS, that the GeoLocation was probably done off my WiFi Mac Address. Needless to say, I run DD-WRT on my multiple, Bridge Repeater routers and I changed the wireless MAC address immediately to break the link between my routers and my location in whatever database this link was stored.

  7. Well, there is a way to get the police interested. by medcalf · · Score: 3, Informative

    Tell the police that you connected to the machine to try to track him down and found that he had downloaded child porn with it. Then, when they bust him and take the computer, you can file a claim with them. Kind of the nuclear option, but I bet it would work.

    --
    -- Two men say they're Jesus. One of them must be wrong. - Dire Straits
  8. Re:Police comments don't make sense. by damn_registrars · · Score: 3, Interesting

    When did Vancouver become part of the US? Did I miss some recent war between the US and Canada?

    There is also Vancouver Washington. The article summary doesn't specify which Vancouver this person was visiting; both are reasonably close to Seattle Washington.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  9. Cheapo Netbooks by ironjaw33 · · Score: 3, Insightful

    Incidents like these are one good reason I use a cheap netbook when on travel. Not only are they light and get substantial battery life, but if it breaks or gets stolen, I'm only out $300.

    I also find that I rarely get much actual work done when on travel, so I don't have the need for a more substantial laptop. I guess if you've really got the need to travel with a full sized laptop, you could mod the case to make it look scuffed and dated and hence not worth stealing. Either that, or get a ThinkPad -- even the latest versions look 10 years old.

  10. Re:California Law by Colonel+Korn · · Score: 3, Interesting

    Just had a cop come by the university to discuss this. In California at least, photos like that are not admissible as evidence. They may allow the police to get your laptop back, but if you press charges those photos, keystrokes, etc are going to be thrown out before they ever see the judge.

    Don't you have Find My Mac or something like that on MacBooks? I thought logmein was more of a VPN thing.

    From experience with friends who've tracked down their laptops and mobile phones, throughout the US the police won't do anything in any circumstance. Even if you track down the identity of the person with your phone/laptop and get pictures of the thief using it, the police will tell you they won't do anything about it. Recovery comes from taking those pictures and then filing a civil suit, and that's not easy.

    However, if you have any influence with the police or know someone who does, the picture changes dramatically. With a policeman friend you can probably get it back in a few minutes by driving over to the thief's house with the policeman in uniform to make you more persuasive. Also, it's not that the police aren't allowed to help you once you've got strong evidence, it's that they choose not to do so.

    In summary, in my experience photos and IP logs and such will actually let you win in court (the thief won't even have a lawyer, so you don't need to worry about evidence being challenged as long as the judge is sympathetic) but won't get the police to do anything for you.

    --
    "I zero-index my hamsters" - Willtor (147206)
  11. Re:Too bad you can't .... by mandelbr0t · · Score: 3, Interesting

    To cite a specific example: an Alberta farmer who shot at thieves on his property was given 90 days for assault with a deadly weapon, while the thieves got 30 days for stealing.

    --
    "Please describe the scientific nature of the 'whammy'" - Agent Scully
  12. Violence by ewhenn · · Score: 3, Interesting

    Contrary to popular belief, violence is the solution, If you are sure you know who it is, go to town on them. Give me a baseball bat and 5 minutes with any cocksucker that steals my shit, and he'll wish he didn't. Sure you might have my laptop, but I just knocked out all of your teeth and broke your legs. Fair trade.

    1. Re:Violence by kaizokuace · · Score: 4, Funny

      smashing his face in whilst yelling "IM A PC MUTHAFUCKA!"

      --
      Balderdash!
  13. Posting Pics? by CohibaVancouver · · Score: 3, Insightful

    I promise to post pics of the guy if this get's[sic] pulled off successfully!"

    Be VERY careful posting pics... If the pics you post aren't those of the thief, you could find yourself on the wrong end of a very nasty lawsuit.

  14. Re:Just lie by youn · · Score: 3, Funny

    Alternatively tell him you are a reputable african prince and you have a business proposal :)

    --
    Never antropomorphize computers, they do not like that :p