Technology Review - Published By MIT
Advertisement

Solving Laptop Larceny

If your laptop is stolen, with your confidential data, several companies will help you get it back -- or else disable it.

By Lamont Wood

Monday, June 19, 2006

smaller text tool iconmedium text tool iconlarger text tool icon

In May, the U.S. Department of Veterans Affairs learned the hard way that laptop computers are easy targets for theft: burglars struck the home of a department analyst who'd taken his laptop home without authorization, and made off with social-security numbers, birth dates, and other personal information for more than 26 million veterans and spouses, as well as 2 million active military, National Guard, and Reserves personnel.

Stolen laptops equipped with Absolute Software's Computrace software, also called "Lojack for Laptops," report their Internet addresses to a central server, which can lead police to a street address. (Courtesy of Absolute Software.)

That well-publicized incident -- the latest in a string of thefts compromising key data from large organizations -- is reawakening interest in technologies for protecting laptops and prompting security companies to tout their latest advances.

These new systems, which aren't intended to prevent theft, but rather mitigate their consequences, come in three flavors: tracking software, encryption, and "kill" switches that can make a laptop's data self-destruct.

Extra layers of protection are needed because the password and encryption mechanisms that come with most laptops are weak or inconvenient, says Jack Gold, head of J. Gold Associates, a market research firm in Northborough, MA. "There are hacker tools that let you get around [passwords] very quickly, or you can boot from a CD," Gold says. It's true that any laptop running Windows XP Professional has an optional encryption function that should defeat thieves, but using it slows down normal file access.

One solution, then, is a tracking system, such as Computrace, run by Absolute Software of Vancouver, Canada. William Penn University in Oskaloosa, IA, turned to the system this year, after about 500 laptops in one of its colleges went missing, says Curt Gomes, the university's IT supervisor. The university decided it had become uneconomical to try to hunt down each machine manually. Instead, Gomes decided to try laptop tracking -- a technique that's been around for a decade, but recently has seen sales growth of 50 percent per year.

Each machine subscribed to the Computrace service typically reports to a company server once a day via the Internet. If the computer is reported stolen, the server will instruct it to start sending messages every 15 minutes. And if the missing machine's Internet address can be pinned down to a street address, police will soon show up there, according to company spokesman Les Jickling. In fact, a week after William Penn signed up for the Computrace tracking system, a laptop stolen out of a car was recovered by police five days later.

Comments

  • home-built alternative
    this is an excellent idea. and it's something that someone could build themselves relatively easy, provided they have their own server and domain name or static IP address.
    Rate this comment: 12345
    Guest (brunascle)
    06/19/2006
    Posts:1
  • BIOS-enabled
    The point of it being BIOS-enabled is that many theives re-format the harddrive post theft. Absolute's software survives a reformat.
    Rate this comment: 12345
    Guest (Scott)
    06/19/2006
    Posts:1
    • BIOS-enabled
      Ok. So now Computrace has published the fact that programmed instructions in the bios will serve as the tracer. The thief that is aware of this simply has to only upgrade the bios or simply overwrite it with the oem version. Not too difficult to do.
      Rate this comment: 12345
      Guest (John)
      06/19/2006
      Posts:1
      • BIOS-enabled
        The program is part of the unwritable portion of the BIOS, so a BIOS upgrade will have no impact.
        Rate this comment: 12345
        Guest (Scott)
        06/20/2006
        Posts:1
        • Re: BIOS-enabled
          If it's part of the unwritable portion of the BIOS, how does it get on there in the first place? Or is it just retrieving the (unwritable) serial number from the BIOS? (i'm a coder, but i dont know much about hardware-related stuff)
          Rate this comment: 12345
          Guest (bruanscle)
          06/20/2006
          Posts:1
          • BIOS-enabled
            It is put on during the manufacturing process.
            Rate this comment: 12345
            Guest (Scott)
            06/20/2006
            Posts:1
            • Re: BIOS-enabled
              That's right. There are two ways to achieve this, either through mask ROMs where the program is built into the silicon without burning as you would know it or through write protect fuses. Fuses are quite common as the program can adapt over time (masking a new ROM is very expensive) just program the BIOS as you normally would then blow it's fuse and the data becomes permanent. The nicest thing is that you don't need to put the fused or maked ROM into the BIOS chip, you could build it into the northbridge or some other unreplacable chip.
              Rate this comment: 12345
              Guest (Andrew)
              06/29/2006
              Posts:1
              • BIOS-enabled
                Question?  Is that why the consumer can purchase the software/service after they purchase the computer...the BIOS can be altered at any time?
                Rate this comment: 12345
                Guest (techinfo)
                07/16/2006
                Posts:1
                • BIOS-enabled
                  Yes, the BIOS can be altered at any time. It's called flashing the BIOS. However, its far from simple, and unless you know what you are doing it is down right risky. Absolute offers two products: software based and BIOS-based. I would recommend installing the software based one until you purchase a new computer, then have it manufactured with the BIOS-based already installed.
                  Rate this comment: 12345
                  Guest (Scott)
                  07/20/2006
                  Posts:1

Log In

Forgot your password?     Register »
Advertisement
Technology Review July/August 2009

Current Issue

Search Me
Inside the launch of Stephen Wolfram’s new “computational knowledge engine.”
•  Subscribe
Save 41%
•  Table of Contents
•  MIT News
Advertisement

Follow us on Twitter

Twitter

Get Technology Review updates via the web, cellphone, or Instant Messager – Follow techreview on Twitter!

Advertisement
Subscribe to Technology Review's daily e-mail update. Enter your e-mail address

Advertisement
TECHNOLOGY RESOURCES

More Technology News from Forbes

Advertisement
MIT Massachusetts Institute of Technology © 2009 Technology Review. All Rights Reserved.