
How To Catch a Laptop Thief? 485
First time accepted submitter otaku244 writes "I spent a day in Vancouver this week while working in Seattle. While I enjoyed the area, some Vancouver citizen decided to enjoy my Macbook Pro. Unfortunately, I didn't discover this until I was already back at my Seattle hotel. Needless to say, I am quite miffed at the whole experience. Fortunately, I have LogMeIn installed on that machine. I provided the IP address to the VPD, but they say that laws don't allow warrants solely on the physical address tied to an IP. It sounds like the silver bullet is to take a picture of the person using the laptop. The question becomes, how do I convince the guy to run a script that will take a picture of him and smtp it to me? I promise to post pics of the guy if this gets pulled off successfully!"
Hate to say it... (Score:5, Insightful)
But the best moment for you to take action is long gone - when you had your laptop in your possession.
Let this be a lesson readers, do something to secure your possessions now, install something to allow for ease of tracking and identification now, not as an afterthought when it gets nicked.
To the op, can't you just log in with LogMeIn and set a script running which takes a photo every minute or so?
Re: (Score:2)
Yep. Whenever my MacBook is with me outside of the the apartment, it is either in in the shoulderbag (which looks NOTHING like a laptop case), actually under my fingers as I'm typing, or, in the case of out of town events, locked in the room safe when I am not using it.
Re: (Score:2)
Re: (Score:3)
I wish I remember the brand of in-room safe they used at the last hotel I stayed at. The safe displayed something like "Eror", so we called the desk who sent a security guy to come open it. He had to plug a cable into a port hidden behind the logo in the door, and he had to set some kind of device on the top of the safe. He then entered some stuff on a Palm Pilot on the other end of the cables, and the safe was opened and reset. There was no visible opening on the top of the safe so I assume it's induct
Re:Hate to say it... (Score:4, Informative)
there's a backdoor so the hotel doesn't have to jimmy the safe everytime an idiot forgets their password.
Re: (Score:2)
Agreed - I installed Prey months ago and my Mac never leaves my house....
Re: (Score:3)
Re: (Score:3)
Download Backblaze and use their Wifi location device. If it and the IP address correspond then they have more than "just an IP address" they have what block it's located in and the IP address which will probably correspond.
Re: (Score:3)
You could probably skip that whole step and just jump to the easiest possible solution.
1) Open a web browser.
2) type in "Facebook.com"
What do you want to bet that the thief remained logged in?
If that doesn't work check the web history and see where they've been. Then go through site by site and see if any of them are still logged in, then get the name.
If the name and the general address vs WiFi location are one and the same then you've got a slamdunk case for the police to at least just knock on the door
Re: (Score:2)
You don't have ssh enabled, then? If you did, then you could run it from the terminal. What does logmein let you do?
Re: (Score:2)
Does MacOS have crontabs?
Can you write (a) a new script you want to execute every minute, and (b) a new crontab to activate it automatically?
Re: (Score:3)
Log in Remote and upload then register an app called "Joke of the Day" to your laptop. Make certain it shows up in the Dock. Make certain its Icon is bright, colorful, and funny! Have the App actually provide him with a great joke every day. Have the app also take pictures and send them to you. In fact open video and have it stream to you. Log his keystrokes (it is your computer and he's using it without your permission.) Have is send the web logs, and pretty much anything you can possibly use against him i
Re: (Score:3)
Re:Hate to say it... (Score:4, Informative)
It does this by installing their remote desktop client on the host to remote into, proxies through their servers over regular HTTP / port 80, and also features a web based control/viewer. The following is an excerpt from Wikipedia
So he has all the remote desktop capabilities in the world he could want. All he needs to do is setup a script to take photos whenever the lid is opened, and check on the browser cookies to see what web-sites the thief is going to. Even if the Apple camera application doesn't support this, I'm sure there are plenty of F/LOSS camera applications that would.
Basically, he needs to do what this DEFCON hacker did [youtube.com]. Failing all of that, he could provide the S/N and other info to the Vancouver PD and Apple, so that if the thief attempts taking it to an Apple store to have it wiped (and removing LogMeIn by doing so) if they follow their processes and check the S/N, they should see it is a stolen laptop...
Re: (Score:3, Insightful)
If the thief hadn't stolen it, customs would have confiscated it anyway.
What are you talking about?? Customs only cares about expensive gifts, expensive items you intend to sell (including counterfeits), and items that might introduce invasive species or diseases. I'm an American who has been in and out of the US several times with my laptop, and I've never encountered any problem with customs. "abroad" is not some scary, law-less pit of oppression. Try getting out sometime.
Re: (Score:3)
He was probably referring to the US customs... they've been known to impound laptops from foreign travellers and not return them. They're not even required to do so in a reasonable timespan (AFAIK).
Re:Hate to say it... (Score:4, Insightful)
One of my friends, a doctor working with MSF/Doctors Without Borders, had his laptop confiscated for pornography in his medical reference materials. They even graciously told him, 'If you miss your flight, I'll be my fault.'
Pretend to be a chick? (Score:2)
First, I don't get it .. if you have something like logmein why can't you log in and start Facetime or something like that .. before you do it .. test it with a friend cause you probably wont get many chances.
Anyway .. if that fails, tell him you're a chick? Most likely the thief is male, so you could entice him to do it that way. You have his email address of something? how would you communicate with him?
Btw, rather than hand him over to the cops .. just ask for the laptop back and tell him you're keeping
Re: (Score:2)
Also if you are starting facetime make sure u have it recording .. either with software or aiming a camera at the screen
Lazy police (Score:5, Insightful)
It sounds like the police just don't want to bother. If it was the MPAA, RIAA, or Apple asking, they would have a SWAT team there in under 5 minutes.
The IP address with location may not be sufficient for a conviction, but it does support probably cause. Why not see if you can go to the location, and then h
Don't you have sshd enabled on your mac with an appropriate 50 character password? Just use ssh to remotely do it.
Doesn't LogMeIn allow you to remotely control the machine? Use (ssh is preferred) that to set up a script that takes the picture, make several copies in several locations, copies the file via scp, and ftp to a couple of different locations. Then wait for him to log into different web sites so you can have his user ids, then have the computer take pictures.
Re: (Score:2, Funny)
Actually he doesn't say which Vancouver he visited. Seattle is roughly midway between the two.
To be fair, he does say he "enjoyed the area," so that probably rules out Vancouver WA.
Re: (Score:2)
Pardon? ??AA might not be effective in Canada, but you can bet they have a presence. How else are they going to lobby to change Canadian law?
You don't have SWAT? That's quite unbelievable. I'm sure they go by a different designation. Somebody deals with hostage situations, bomb threats, trains for dealing with rogue snipers, etc.
Re: (Score:2)
Mounties. They are actually quite badass.
Re: (Score:3)
Re: (Score:3)
Indeed, while they dress like frilly girls, in general it would take no more than 10 mounties to take on 1 swat.
Re:Lazy police (Score:5, Funny)
Ok you might not get the Macbook back but it will be the last one that particular guy steals and I am just guessing, but that IP law might not apply
Prey project (Score:5, Interesting)
Re: (Score:3)
It's worth mentioning that Apple's own iCloud also has a subset of Prey's features like geolocation, remote locking/wiping and sending a message. Doesn't support taking a picture or using the webcam though.
Re: (Score:2)
If he can access the computer remotely, can install what he wants. His only problem is that he doesn't know how to access the camera without the GUI, which is not a problem for many of us.
The computer being a Mac means my Linux answer won't be helpful, but I bet there is something of the kind on Mac as well. Like, let's say, installing Prey.
Re: (Score:3)
That's http://preyproject.com/ [preyproject.com] !
Really? (Score:5, Insightful)
Translation: You're a nobody, and we're not going to spend our precious resources tracking down and prosecuting a small-time thief. Come back when you've got a friend in politics or the media.
If an IP address alone is enough evidence to file civil suit against someone for copyright infringement, and under the new proposals enough to have them disconnected without so much as a trial, I find it hard to believe that it can't be enough to be at least reasonable suspicion and thus grounds for a warrant.
Re: (Score:2)
Come back when you've got a friend in politics or the media.
Alternative: get a letter from a lawyer. That'll wake the police up a bit.
Re:Really? (Score:5, Interesting)
I actually had my business partner on the hunt and we tracked it down to 4th District Vancouver. We also found out that the non-emergency VPD number takes you do a civilian call center. These guys seemed be misinformed about their own laws. So when we connected directly with 4th District, we got a call back from a detective who pulled the case. This happened on Friday. I had already submitted to Slashdot the night before.
Anyone know who to update the submission?
Re: (Score:2)
I think the only way to do that is to submit a new one and put "Update to ...."
Re:Really? (Score:4, Funny)
Send an email to CmdrTaco.
...oh wait.
Re: (Score:3)
Anyone know who to update the submission?
Just re-submit the corrected story. That way when the dupe is inevitably posted by the (on) crack editorial staff, it'll all work out.
Re: (Score:2)
Translation: You're a nobody, and we're not going to spend our precious resources tracking down and prosecuting a small-time thief. Come back when you've got a friend in politics or the media.
so true. the presence of a police force definitely discourages crime, but once a crime has occurred, as an individual, you are pretty much on your own nowadays unless you have friends in high places or make it into the agenda of some politician. the police exist to provide and environment conducive to corporate profits.
even if he could run a script and take a picture, he will still have a hard time getting the police to care. your best bet is to use logmein to wipe your personal data and then brick (to the
Too bad you can't .... (Score:3)
Rig the computer remotely to blow the lithium battery up in the jerk's face!!!
Re: (Score:3)
Rig the computer remotely to blow the lithium battery up in the jerk's face!!!
It's a Macbook, the battery will explode eventually. But if you want to speed things along..." [arstechnica.com]
Re:Too bad you can't .... (Score:4, Interesting)
Re: (Score:3)
To cite a specific example: an Alberta farmer who shot at thieves on his property was given 90 days for assault with a deadly weapon, while the thieves got 30 days for stealing.
The laws about justified use of force require that excessive force not be used. Using a lethal weapon is an unreasonable escalation of force against people who are simply stealing property. (Lethal force is usually only permissible in response to lethal force.)
Re: (Score:3)
If the perp is dead they cant counter your "they were trying to kill me" claim.
Remember, if you are going to shoot a home invader, make sure they are dead and IN THE HOME.
The other side (Score:3, Interesting)
Re: (Score:2, Funny)
Why didn't you just return the laptop? Clearly the GPS says you have it.
Re: (Score:3)
Uhm, I think you're either leaving something out of your description, or you're confused. MAC addresses aren't transmitted across the Internet. They stop at the first router they come to. Meaning in most sane situations only your DSL modem's MAC is transmitted, and it never leaves your ISP.
It is orders of magnitude more likely that this was a precision flaw in the database. The laptop is at an IP address (not yours) that has a GPS associated with it that indicates the general location, but isn't suffici
Re: (Score:2)
I imagine though that the only way to locate things (GPS wise) would be for a smart phone w/ location services to report back to teh DB that "gee, I was at this location and I noticed an access point with the MAC of xxxxxxx... nearby"
SSH? (Score:2)
OS X 10.7.2? (Score:2)
Re: (Score:2)
it would have given you and the police a good idea where the computer was
what then? they spend the day going around the neighborhood interviewing people. unless someone breaks down and admits to the crime, you are SOL. that is of course in a fairy dream land where the police would actually put any effort at all into the problem.
Re: (Score:2)
I was right, there is a remote lock. This is also a remote wipe, so at least you can get your sensitive data off it.
As for finding it, the little dot on the map is over my bedroom, so it's maybe 25 feet of from the real location. If you believe it's accurate, there are essentially only two apartments to check. If you go with the whole radius, there are maybe 8 apartments. It wouldn't be too hard to find, especially since I can make it play a sound, a quite noticeable beeping. Stand outside the apartment yo
Re: (Score:2)
As for finding it, the little dot on the map is over my bedroom, so it's maybe 25 feet of from the real location.
that's by coincidence. you don't get that accuracy from a wifi database. worse, it can be misleading. people see a definite dot on a map when in reality it could be someone within 200 feet of that dot.
If you believe it's accurate, there are essentially only two apartments to check.
anyway, even if it had a GPS lock, it's +/- 5 meters theoretical. in practice it can be off by quite a lot (100 feet or more), so that isn't even enough to say for sure.
Well, there is a way to get the police interested. (Score:4, Informative)
Re: (Score:2)
When you consider jail time and court costs from file false paperwork with the police, you'd be better off just buying a new one and forgetting about the old computer.
Sorry, can't help you now. (Score:2, Redundant)
Re: (Score:3)
The theif deserves this (Score:2)
Not saying I ever would, but if I ever did steal a Macbook pro, the first thing I would do is remove the HDD. Failing the option of replacing the HDD, I would wipe it and reinstall. I have bought and sold many a computer and to anyone I have ever sold a machine to, I always recommend the same: WIPE THE HDD -- it's just good practice.
People who fail to do this simple thing deserve what they get. They are trusting an unknown -- an computer with an OS and unknown software on it. One should know as much as
Re: (Score:2)
Which Vancouver? (Score:2)
Vancouver, BC or Vancouver, WA? Knowing which country this happened in might help.
Blue Bloods (Score:2)
It was on Blue Bloods just the other night. Offer to buy it back.
van police are still looking for the cup rioters (Score:2)
Vancouver police are still looking for the Stanley cup rioters so just finding some one who took 1 laptop likely is under that on the list of things to do.
California Law (Score:3)
Just had a cop come by the university to discuss this. In California at least, photos like that are not admissible as evidence. They may allow the police to get your laptop back, but if you press charges those photos, keystrokes, etc are going to be thrown out before they ever see the judge.
Don't you have Find My Mac or something like that on MacBooks? I thought logmein was more of a VPN thing.
Re: (Score:2)
I think Find My Mac is a new iCloud feature and he might not have set that up yet.
Re:California Law (Score:4, Interesting)
Just had a cop come by the university to discuss this. In California at least, photos like that are not admissible as evidence. They may allow the police to get your laptop back, but if you press charges those photos, keystrokes, etc are going to be thrown out before they ever see the judge.
Don't you have Find My Mac or something like that on MacBooks? I thought logmein was more of a VPN thing.
From experience with friends who've tracked down their laptops and mobile phones, throughout the US the police won't do anything in any circumstance. Even if you track down the identity of the person with your phone/laptop and get pictures of the thief using it, the police will tell you they won't do anything about it. Recovery comes from taking those pictures and then filing a civil suit, and that's not easy.
However, if you have any influence with the police or know someone who does, the picture changes dramatically. With a policeman friend you can probably get it back in a few minutes by driving over to the thief's house with the policeman in uniform to make you more persuasive. Also, it's not that the police aren't allowed to help you once you've got strong evidence, it's that they choose not to do so.
In summary, in my experience photos and IP logs and such will actually let you win in court (the thief won't even have a lawyer, so you don't need to worry about evidence being challenged as long as the judge is sympathetic) but won't get the police to do anything for you.
Re: (Score:2)
Heck, I had a gun taken and pawned by someone w/o permission - they gave me the pawn ticket to get it back. Reported it as stolen, provided the PD w/ a copy of their drivers license and SSN card, no results. Did get the gun back from the pawn shop... but barely.
Re: (Score:3)
You know what I see in common with all of these stories of unhelpful police? They are all civil offenses. Perhaps the solution is to call a lawyer not a cop. I wonder if the perpetrator had assaulted someone if the police response would be different, since that is a criminal offense.
Ok, same parties. Boyfriend's brother was trespassed from our property, and signed a form saying he understood he was trespassed. He returned the following night and took the license plates from the vehicle that they co-owned. (one would say "steal", except he was a legal owner.) As a result Shoreline (a suburb of Seattle) pressed charges for a few things, and enacted a criminal-proceeding protection order. Boyfriend shows up at a house rented out to friends owned by boyfriend's brother, boyfriend's brother
Did you just tip the thief off? (Score:2)
Another approach (Score:2)
I just encrypt my hard drive. If a thief nicks my laptop, all he's going to get is a piece of (old) hardware and a disk full of seemingly
random numbers. While it's annoying, you don't need to put resources into tracking the bastard, just get on
with it and buy a new machine, which you would anyway.
Hardware is cheap. Data is your time, work and money, so protect it with encryption and keep backups.
Re: (Score:2)
Just wait and watch... (Score:2)
Can logmein allow you to watch but without touching without his knowledge?
You know he'll log in to facebook at some point...
Cheapo Netbooks (Score:4, Insightful)
Incidents like these are one good reason I use a cheap netbook when on travel. Not only are they light and get substantial battery life, but if it breaks or gets stolen, I'm only out $300.
I also find that I rarely get much actual work done when on travel, so I don't have the need for a more substantial laptop. I guess if you've really got the need to travel with a full sized laptop, you could mod the case to make it look scuffed and dated and hence not worth stealing. Either that, or get a ThinkPad -- even the latest versions look 10 years old.
Do the same thing the RIAA does... (Score:2)
File for a court order that allows search and seizure by law enforcement. Once you have that, the LogMeIn data is a usable piece, hopefully. If it is, case closed.
An easy solution... (Score:2)
I provided the IP address to the VPD, but they say that laws don't allow warrants solely on the physical address tied to an IP."
Just tell the VPD that you have the latest unannounced Apple uber-puter that you lost. That'll get the police moving right-quick!
Back to Mac? (Score:3)
apple will make this interesting (Score:2)
while find-wipe-lock tech has been around for a long time, apple is making it standard issue. it will be interesting to see how law enforcement handles this. where for the most part iphone thefts have gone unpoliced, you are now going to have almost every user reporting the theft with enough evidence to find the perp. will law enforcement respond with an army of high-tech detectives to chase down these thieves? not likely.
i don't understand why apple / at&t / verizon don't just band together to squash t
Prey Project (Score:2)
So, for your NEXT laptop, try this:
http://www.preyproject.com/ [preyproject.com]
It's an open source tracker (with the obvious caveats that come with tracking software), but the nice thing is, you can point it to a server you control, rather theirs if you so choose. My MBP was stolen from my car (wife didn't know my bag was in the back, parked the car at a hotel lot. One busted window later....), and a very similar one (missing the extended power cord that I still had no less) showed up on craigslist a couple days later with
just check his facebook status (Score:2)
tape on the webcam (Score:2)
Violence (Score:3, Interesting)
Re:Violence (Score:5, Funny)
smashing his face in whilst yelling "IM A PC MUTHAFUCKA!"
Re: (Score:3)
Most States don't give you the legal freedom to do violence to someone after the fact over property. Texas used to I think, I am not aware of anywhere else. I agree if someone tries to take property from I am going to fight, and make them regret they ever even thought about mugging me. Going after someone though over something like a stolen laptop is stupid because you WILL get prosecuted over it and it will cost you way more than a new laptop would.
Someone appropriated my GPS, I left in unlocked(stupid)
Re: (Score:3)
Heh. I would offered to buy it, and when checking it out, said "I'm taking this and not paying you" to see if he would call the cops. With ownership material in hand, and cops in tow brought by the kid, that would be pretty god damn funny. He'd be caught in a dead cold lie, which would be adequate grounds for arrest, because he wouldn't be allowed at that point to change his story to something else. That is... of course... if you wanted to arrange that outcome. Still, you should have probably told his paren
Re: (Score:3)
There's also the possibility they are both innocent AND armed. This will be very, very bad mojo for the poor sorry soul with the baseball bat. The law authorizes quite a lot more force for use in self defense than what they even authorize as reasonable force for a police officer. In short, if someone is attacking you with a baseball bat, in most states you can "fill 'em full a' lead." Or "spill their entrails upon the ground, most untimely". As the preferences in personal weapons thereby dictates.
Posting Pics? (Score:4, Insightful)
I promise to post pics of the guy if this get's[sic] pulled off successfully!"
Be VERY careful posting pics... If the pics you post aren't those of the thief, you could find yourself on the wrong end of a very nasty lawsuit.
Re: (Score:2)
Then I'll just pull a gun on you and make you cut it loose.
The only real defense against getting robbed is to not have anything worth stealing.
Re:Be Proactive (Score:5, Funny)
i bet you wear a fanny pack, huh? i'm quite sick of this metrosexuality fad.
Huh?
The majority of fanny packs I've seen (including mine) are holsters. I wasn't aware that carrying a Glock around was the new trendy fad.
Re: (Score:2)
When did Vancouver become part of the US? Did I miss some recent war between the US and Canada?
Re: (Score:2)
Nope, the White House isn't burning yet.
Re:Police comments don't make sense. (Score:4, Interesting)
When did Vancouver become part of the US? Did I miss some recent war between the US and Canada?
There is also Vancouver Washington [wikipedia.org]. The article summary doesn't specify which Vancouver this person was visiting; both are reasonably close to Seattle Washington.
Re: (Score:2)
http://www.cityofvancouver.us/ [cityofvancouver.us]
Re: (Score:2)
Except, perhaps, that this is in Canada. Do you know the rules for probable cause in Canada? I suppose it may be complicated even more by the fact that it's across an international border.
Re: (Score:2)
http://en.wikipedia.org/wiki/Vancouver [wikipedia.org]
Re: (Score:2)
49th parallel? (Score:2)
Re: (Score:2)
And installed it BEFORE it was stolen.
I run 3 versions of prey. 1 controlled by the website. 2 controlled by a web page one that scps me the results and another e-mails.
I also run Orbicule. I've tested it numerous times (Nothing sucks more than having a solution that doesn't work when you need it.)
I ALSO run autossh with a reverse tunnel to SSH, if it has internet, I can ssh to it.
The computer also has "guest" enabled, so if it's stolen it's not a paperweight to the person using it and hopefully they will t
Re: (Score:2)
So couldn't he install this via LogMeIn?
Re: (Score:2)
He could. But he has this irrational paranoia about doing anything ON the computer because the guy may be watching it.
Personally If I had autossh already installed I'd open a terminal window do a 'nohup autossh' and get a tunnel going and THEN start tinkering.
Re: (Score:2)
if the laptop has an "iSight" camera (what ever that is...)
then he needs to look here
http://www.hackmac.org/hacks/hack-and-disable-the-isight-camera/ [hackmac.org]
ssh into the system upload the file and run it to capture images then use any command line mail application to send it to you.
Re: (Score:2)
If you have both sftp and scp, then why would you use sftp... ever...
Re: (Score:3)
It'll be long gone in a week. You looked for it on eBay yet? Check the local pawn shops too. If you find it at the pawn shop, they sometimes require the person hocking it to show ID (in case the merchandise is stolen) at which point you can call the cops. Whether they force the pawn shop to give you the stolen merchandise back in another issue.
Re:Just lie (Score:4, Funny)
Alternatively tell him you are a reputable african prince and you have a business proposal :)