var json_comments = new Array("
\"user-pic\"
temporaryerror
February 25, 2010 10:33 AM
Moderate | Flag for review

First thing before it's stolen- Password protect!

Reply
2 replies
\"user-pic\"
GitEm$teveDave
February 25, 2010 11:16 AM
Moderate |Flag for review

I can reset any user accounts password with a usb drive I keep in my pocket. Disable USB booting? Fine, but now I'm pissed I have to break out the CD. Encryption is better.

Reply
\"user-pic\"
mattarse
February 25, 2010 11:23 AM
Moderate |Flag for review

Nothing less than whole drive encryption is acceptable anymore.

Reply
\"user-pic\"
temporaryerror
February 25, 2010 11:28 AM
Moderate |Flag for review

I was thinking more along the lines of BIOS password. How secure are those?

Reply
\"user-pic\"
pz
March 1, 2010 12:19 PM
Moderate |Flag for review

Whole-drive encryption is far, far, far more secure than a BIOS password.

Reply
\"user-pic\"
GitEm$teveDave
February 25, 2010 11:43 AM
Moderate |Flag for review

Remove ONE jumper, and power up. BIOS password cleared.

Reply
\"user-pic\"
GoodBytes
February 25, 2010 7:23 PM
Moderate |Flag for review

Actually, on Dell laptops, you can't reset the password. It's saved forever. If you forget your password, you better be under warranty for Dell to send you a new motherboard.

Reply
\"user-pic\"
Optimizer
February 25, 2010 12:51 PM
Moderate |Flag for review

Interesting ... Thought: Laptops aren't super-easy to crack open, like desktops. Perhaps setting a BIOS boot password might not be a bad idea. Security in-depth, as they say. Might just be enough to cause some joker to dump your unit rather than try to get it up and running.

Reply
\"user-pic\"
cerbie_the_orphan
February 27, 2010 1:30 AM
Moderate |Flag for review

No. USB ATA adapters sell for

If someone has your computer, and wants your data, and your data is not encrypted, they will get your data.

Reply
\"user-pic\"
temporaryerror
February 25, 2010 12:20 PM
Moderate |Flag for review

Guess you learn something every day! Although, if one is not wanting to encrypt, PW/BIOS P/W will at least discourage some opportunistic thieves. But, I'll have to agree that encryption looks like the way to go.

Reply
\"user-pic\"
Wrathernaut
March 1, 2010 10:37 AM
Moderate |Flag for review

Laptop hard drives are usually a single screw away from being removed and dropped in a USB SATA reader. In fact, if you did a drive removal and left the laptop, it probably would be days before the victim realized the HD was gone, instead of blaming it on drive failure.

Reply
","
\"user-pic\"
GitEm$teveDave
February 25, 2010 10:34 AM
Moderate |Flag for review

Your suggestion to use the camera on a mac to recover a lost laptop is bad, because according to people lately, it means you are collecting child porn, and should be fired, arrested, and/or \"sent to your own level of hell\".

Reply
5 replies
\"user-pic\"
tsukiotoshi
February 25, 2010 2:44 PM
Moderate |Flag for review

It would only work for me if the thief took off the electrical tape over my isight. If they are as paranoid as I am the whole thing is scuppered!

Reply
\"user-pic\"
DancesWithBadgers_IsWarm
February 25, 2010 11:02 AM
Moderate |Flag for review

An individual installing tracking software on their own personal computer is a little different than a administrative entity using it without prior acknowledgment of its existence on unsuspecting minors outside of the stated intended usage.

Reply
\"user-pic\"
GitEm$teveDave
February 25, 2010 11:05 AM
Moderate |Flag for review

So if a minor steals your computer, you can't use it because you might record a picture of them? Do you then have to warn the minor stealing your computer and make them sign a waiver?

Reply
\"user-pic\"
DancesWithBadgers_IsWarm
February 25, 2010 11:14 AM
Moderate |Flag for review

I've got no problem with that. I was referring to using tracking software meant for if the device was stolen to spy on users without cause.

Reply
\"user-pic\"
GitEm$teveDave
February 25, 2010 11:22 AM
Moderate |Flag for review

And where was that? From what I read, it was never used for such a thing.

Reply
\"user-pic\"
Sidecutter
February 25, 2010 2:07 PM
Moderate |Flag for review

The school used pictures taken by the webcam to discipline a student. it was taken from the student's own PC, not a stolen one, and they had no legitimate reason to be activating the cam remotely.

Reply
\"user-pic\"
nbs2
February 25, 2010 10:54 AM
Moderate |Flag for review

Where was this? Did I miss an exciting comment thread? Now I'm all bummed out.

Reply
\"user-pic\"
Pasketti
February 25, 2010 12:13 PM
Moderate |Flag for review

No, people are freaking out because the student was called to the office and suspended for \"improper conduct\" at home, and the evidence was a picture taken via the laptop, which (last I heard) had not been reported stolen.

So what you have is someone in the school's IT department taking it upon themselves to do a spot check on what the kid was up to, seeing him eating some \"Mike and Ike\" candy, and jumping immediately to \"he's using drugs!\"

Reply
\"user-pic\"
GitEm$teveDave
February 25, 2010 2:19 PM
Moderate |Flag for review

Please note you are taking your information from a lawsuit. Information in lawsuits does not have to be correct. If it was, then this lawsuit, which says the NFL sells footage of the bathrooms of NFL stadiums to Senator Larry Craig, should have received more coverage:
http://www.thesmokinggun.com/archive/years/2007/1003072belichick2.html (section3)

Reply
","
\"user-pic\"
Aesteval
February 25, 2010 10:42 AM
Moderate |Flag for review

Secure your private data. A little encryption can go a long way to keep the casual thief out.

Reply
2 replies
\"user-pic\"
ChemicallyInert
February 28, 2010 6:21 PM
Moderate |Flag for review

This. I'm not the first to mention it. Even if the Pentagon can crack your encryption with their supercomputers- the average thief isn't going to waste a lot of time on identity theft. They'll probably be in a bigger hurry to lose the laptop quickly for dough.

Reply
\"user-pic\"
r2w7
February 25, 2010 3:02 PM
Moderate |Flag for review

Windows Enterprise and Ultimate users can use a built-in feature called BitLocker to encrypt their disks. And new with Windows7 is the ability to encrypt your external USB drives and use them between your computers. http://www.microsoft.com/windows/windows-7/features/bitlocker.aspx

Reply
","
\"user-pic\"
HannahK
February 25, 2010 10:48 AM
Moderate |Flag for review

For me, the first order of business would be to change all my online passwords. I store my important stuff in google docs primarily, so nothing would be lost, it would be accessible to someone logged in as me on my own computer. I even let the websites for my banks/credit cards store my password in my browser (what can I say, I'm lazy) so I would have to remember to change those to be on the safe side.

Also, make sure you're using your laptop in an appropriate location and not tempting fate. Recently I read a story about someone who pulled her laptop out at an outdoor bus stop and was balancing it on her lap trying to browse the web while waiting for the bus. Sorry, but that's practically begging for someone to run by, grab your laptop, and hop into a friend's car a block away. And that's exactly what happened to her. Then there are the people who leave laptops sitting on a table in a public place (library, cafe, whatever) and step away from it for even one second.

Reply
","","
\"user-pic\"
baddate
February 25, 2010 10:56 AM
Moderate |Flag for review

I say modify your computer to emit an electrical shock when someone other than you tries to use it. You can do this easily with a 9V battery and a potentiometer.

Reply
","","","","
\"user-pic\"
GreatWhiteNorth
February 25, 2010 11:10 AM
Moderate |Flag for review

Keep your data yours! I strongly suggest you install Trucrypt, an encryption program that creates a virtual drive that you use just like your actual installed hard drive, but it requires a password to access.

It is very easy to install, use and live with. http://www.truecrypt.org/

Also, never rely on operating system passwords to protect anything. These passwords are so easily and quickly circumvented it is as if they didn't exist.

Next, consider not having your browser store any website usernames or passwords, especially for banking sites. These too are quickly and easily harvested... In fact consider setting up your computer to delete all cookies, browser history, etc... every time you close the browser because you can learn a lot about a person by looking at this information.

Buy a cable lock and use it, but don't be dumb and leave it set to the combination after you unlock it... a casual glance will get the number.

Last suggestion... don't write your password on your laptop... and don't use dead easy to guess passwords. Go here https://www.microsoft.com/protect/fraud/passwords/checker.aspx to see just how strong your password is.

Reply
1 replies
\"user-pic\"
tricky1
February 25, 2010 2:59 PM
Moderate |Flag for review

Another thing I did with my MacBook is I used a label maker to make labels with my name and cell phone number and stuck one to the battery and in the battery compartment. Most thieves wouldn't think to look there for anything.

Reply
","
\"user-pic\"
LSonnenhimmer
February 25, 2010 11:13 AM
Moderate |Flag for review

I am shocked that encryption is not mentioned truecrypt is so easy anyone can do it.

Reply
2 replies
\"user-pic\"
SacraBos
February 25, 2010 2:54 PM
Moderate |Flag for review

Truecrypt rocks. My current Laptop is running Linux, and I installed it with full encryption, which also rocks.

Yes, the thieves may only be looking to pick up a quick buck on E-Bay. There is a certain amount of relief you have in knowing that even if they did take the time to see if you had any goodies on the hard drive, they'll get nothing.

There are some places, like airports, which may be more likely to have people interested in data, too. And besides, it's a major pain to have to report a potential data breach if you lose a laptop with an unencrypted hard drive (financial, HIPAA, or otherwise).

Reply
\"user-pic\"
Fantoche_de_Chaussette
February 25, 2010 12:46 PM
Moderate |Flag for review

Seriously. Any laptop security advice that doesn't include \"encrypt the hard drive, already!\" is grossly negligent. It's cheap (free) and easy insurance against having someone gain access to basically your entire digital life.

In fact, it's such a cheap and easy way to protect yourself from snoops, I'm surprised the police haven't lobbied to make it illegal yet. But that's another rant.

Reply
","","","
\"user-pic\"
BrownLeopard
February 25, 2010 11:22 AM
Moderate |Flag for review

Most thieves that steal laptops are looking to resell them quickly. This means some will format the hard drive, put a new O/S on it, sell it to the guy down the block for drug money.

Reply
1 replies
\"user-pic\"
chocobo
February 25, 2010 2:19 PM
Moderate |Flag for review

Thank you for pointing this out. It's absolutely true... most thieves really don't give a crap where you shop online or what email service you use. It's very unlikely they would be able to get access to enough personal data to access your bank account or things of that nature.

They stole it because they want to trade it for money ASAP. Not that you shouldn't secure your data, but it's not as important as backing up your data, or checking Craigslist to see if your laptop is up for sale on there.

Reply
","","","
\"user-pic\"
Quake 'n' Shake
February 25, 2010 11:26 AM
Moderate |Flag for review

Per GitEmSteveDave_Eats8YearOldCake's suggestion, I would definitely encrypt my laptop.
Which begs the question, how does one do that? I have encrypted hard drives for work, but those were issued to me by IT ready to go. Is it as simple as buying a software package to encrypt one's hard drive? If so, any recommendations?

Reply
1 replies
\"user-pic\"
GitEm$teveDave
February 25, 2010 11:45 AM
Moderate |Flag for review

TrueCrypt. It's free and can encrypt to a level it would take some super Cray to decrypt.

Reply
","","
\"user-pic\"
Tvhargon
February 25, 2010 11:41 AM
Moderate |Flag for review

- Get Laptop Insurance, AKA \"Personal Property Insurance\". State Farm has it, it's $50 a year, and it covers theft anywhere in the world, and accidental damage, although keep in mind you're filing a claim with an insurance company, so I recommend using it for accidental damage, just theft.

Reply
1 replies
\"user-pic\"
NatalieErin
February 25, 2010 3:12 PM
Moderate |Flag for review

In a similar vein, if you rent make sure you have renters insurance! Your laptop will be covered under the common circumstances if you have renters.

Reply
","","","
\"user-pic\"
BradenR
February 25, 2010 11:58 AM
Moderate |Flag for review

Losing mine would be a financial problem, but no data would ever be lost. Since I can't be bothered with lots of passwords, nothing is ever saved on the laptop drive. All they would get and probably happy about that too, is a laptop with an OS on it. Travel drives are never stored with the laptop either. My applications and data are all on thumb drives.

Reply
","
\"user-pic\"
BuddhaLite
February 25, 2010 11:59 AM
Moderate |Flag for review

Calling pawn shops is something you shouldn't do. All they'll do is turn the person away if they come in trying to sell it.

Reply
","
\"user-pic\"
AlanZ
February 25, 2010 12:06 PM
Moderate |Flag for review

Use the DRIVELOCK feature. This is where the disk drive itself requires a password for access. If you don't have the DRIVELOCK password you can reformat the disk and use it, but you can't access any of the data on it. You can't get around it by mounting the drive on another system.

You could break the DRIVELOCK with a good lab, but most laptop thieves won't bother. They will just try to fence the laptop as is for $100 and whoever wants to use it will just reformat the drive. At least they won't be able to look at anything.

Reply
","
\"user-pic\"
tinmanx
February 25, 2010 12:11 PM
Moderate |Flag for review

Just hand cuff it to your hand. Just keep a key handy in case someone REALLY REALLY wants it and you like having your hand.

Reply
","","
\"user-pic\"
cheri0627
February 25, 2010 12:15 PM
Moderate |Flag for review

\"File A Report With Your Laptop Manufacturer — This could be helpful if some unwitting recipient of your laptop attempts to get it repaired by the manufacturer. It's worth a shot, right?\"

Surprisingly, this can actually work. My company shipped a server from Ann Arbor, MI to Sacramento, CA several years ago, and someone forgot to insure it. Said server was stolen. Surprisingly, about 6 years later, someone submitted a service request for the server. The police were notified, and I understand the offending party was arrested by police and admitted to the theft.

Reply
","
\"user-pic\"
colorisnteverything
February 25, 2010 12:18 PM
Moderate |Flag for review

How about used a netbook as your on-the-go computer and don't store personal info on it? I do this. Bank statements, etc (paperless) are stored on my larger machine (IE POS dell I am stuck with) at home or on an external drive. IF I need something, email it to myself, keep it just long enough in my university email and then delete it. If my $240.00 computer is stolen, there really is nothing to worry about. I don't store passwords on here. I know this isn't practical for everyone, but I know lots of grad students that do it.

Reply
","","
\"user-pic\"
coffeeculture
February 25, 2010 12:20 PM
Moderate |Flag for review

I went through and secure deleted every file that contained my SSN and other \"private\" data (PDF's of credit reports, etc...) and moved it to my desktop.

Don't forget to scrub your inboxes of this info...just run a search for the last 4 of your social and delete those messages (keep a local copy if you must), password reset messages that actually contain your pw, and other email. I even keyed in the first 4 and last 4 of my CC's to see if they're in there somewhere.

Reply
","
\"user-pic\"
RaysPizza
February 25, 2010 12:36 PM
Moderate |Flag for review

Certain hard drives have a password feature in the hard drive, which while it doesn't stop your above average thief from replacing the hard drive and re-using your system, it does at least prevent them from getting at your data without having to swap the hard drive platters into an unprotected hard drive (not something for the technologically inept, and it's fairly expensive).

Reply
","
\"user-pic\"
yankinwaoz
February 25, 2010 12:41 PM
Moderate |Flag for review

Use TrueCrypt. It is free, and it is the strongest product out there.

Use a strong password for your TrueCrypt volume. Use GRC's password generator.
https://www.grc.com/passwords.htm

You can email yourself a copy of the password to a web based email account so that it is buried there for you retrieve if you somehow forget it. Also, put a copy of the password on a USB thumbdrive and store that in your safe, or a safe place at home.

There are varying scopes of protection you can choose with TrueCrypt. You can create a \"false bottom\" partition so that you can have plausible deniability that you know there is a protected volume on your computer. That can be used in countries where you are compelled to give up your passwords because they have no equivalent of the US's 5th Amendment.

You don't have to do full volume encryption. At minimum, use it to create an encrypted volume where you store your data. It just shows up as a large file on your computer that looks like purge random noise without the password.

Reply
1 replies
\"user-pic\"
yankinwaoz
February 25, 2010 12:51 PM
Moderate |Flag for review

And it should go without saying, when you email it to yourself, don't leave any clues in the email that can be searched (like \"This is my TrueCrypt Password\"). A better example would be \"Directions to Dave's BBQ this weekend\". The idea is that it won't stand out and will get lost in the archives of emails.

Reply
","","
\"user-pic\"
Gamethyme
February 25, 2010 12:47 PM
Moderate |Flag for review

Calling Pawn Shops won't work most of the time. They are a heavily-regulated industry in some areas, and they won't talk to anyone but the police regarding stolen goods.

Reply
","","","","
\"user-pic\"
vladthepaler
February 25, 2010 2:12 PM
Moderate |Flag for review

You left out: Encrypt the data on your hard drive. That way if the laptop is stolen, at least the thief doesn't get your data. (Password protecting alone is not enough.)

Reply
","","","","","","","","","","
\"user-pic\"
XTC46
February 25, 2010 7:28 PM
Moderate |Flag for review

Software on LoJack is almost pointless. The police are too slow in responding to stuff like stolen laptops.

I work for an IT company and once of the abilities of the software we install on clients computers (1 of about 100 or so things it does) is provide info like the IP of the machine (which is what LoJack does)

We have turned this info over to local PD and it took them over a month to then take that info and and then even approach the ISP to determine the owner of the IP. In that amount of time, the computer is usually sold to somone else, or windows has been reinstalled and the software is gone.

Reply
","
\"user-pic\"
dkev
February 25, 2010 11:52 PM
Moderate |Flag for review

My HDD is password protected. Two seperate levels of passwords in CMOS. And login is password protected. Oh, and I'm using Linux. :)

Reply
","","","","");