LoJack for laptops

I just love some of these security news stories. For example: Police in Bellevue, Washington have been fighting a large car theft crime spree. One of the tools in their arsenal is remote-controlled, life-sized cars, including a regular-looking Honda Civic with a few tricks up its sleeve. (The Honda Civic was the natural choice because it is one of the favorite targets of car thieves.)

[ RogerGrimes's column is now a blog! Get the latest IT security news from the Security Adviser blog. ]

Bellevue police simply park the dummy car on the side of the road in a location known to be frequented by car thieves and then wait. When a car thief steals the car, the vehicle sends a signal to police notifying them of the theft. It contains a GPS-tracking device so the police can locate the car and its new possessor.

When the police think the car, with its illegal occupant, is in a safe location, they send a satellite signal to remotely shut down the car’s engine. The even bigger surprise to the thief comes when the car doors are remotely locked and cannot be opened. The cornered and gift-wrapped perpetrator is so stunned that although they could easily break the window glass, they normally sit there astounded until the arresting police arrive to extricate them. It’s like LoJack on steroids. What a great idea.

And it’s an idea not lost on computer security vendors, although I don’t think I’ve read of a product that entraps computer thieves (laptop handcuffs, anyone?).

Many laptops, including my new Dell Latitude D820, come with a "dial-home" feature. My laptop includes Computrace Agent by Absolute Software, which is also available on many other major laptop brands, including HP, Gateway, Fujitsu, Lenovo, and Panasonic.

Enabled in the BIOS, the laptop's owner must enable the security feature and subscribe to a monitoring service; subscription fees range from a few dollars monthly to more than $100 for an annual contract. Absolute claims it recovers three out of every four service-covered laptops that were stolen. To back up its statement, it offers a $1,000 money-back guarantee with the Computrace Agent service if it doesn't recover a stolen laptop in 60 days.

With Computrace Agent, the laptop connects to the service whenever it connects to the Internet and every 15 minutes thereafter. The IP Address, MAC address, gateway address (and telephone number if detectable) are sent to the monitoring site, which researches the laptop's physical location, working with law enforcement agencies to obtain a legal search warrant compelling the source ISP to reveal the user's physical address.

Stolen laptops have already been recovered and the thieves arrested because of services like these. In real life, though, Lojack isn't a complete deterrent to wannabe criminals. Even if the car is equipped with Lojack and displays a Lojack sticker, the car thief knows that most owners won't notice the car missing for a few hours or more. The thief steals the car and then parks it a large, nearby public parking lot. He waits one or two days, and if the car is still there, comes back and takes it for good. Gotta slightly appreciate criminal adaptability....