RSS Feeds
fix
How to Set Up a Laptop Security System
Posted by Adam Pash at 2:00 AM on September 3, 2008
The safety and security of our laptops—and all of the important and sensitive information they hold—are of the utmost importance. Let's take a look at several free and cheap methods you can (and should) use to keep your laptop safe, secure, and out of the hands of thieves. We'll also take a look at software that tracks and even snaps pictures of the thief in the event he did get away with your precious gear. Photo by presta.
Phase One: Lock and Key
They aren't free, but an inexpensive laptop lock can do wonders for securing your laptop and deterring thieves. Whether you know it or not almost all laptops support them. They're relatively inexpensive, and for the price they're an excellent deterrent. After all, if you were a thief scoping out two laptops—one with a lock and one without—which which would you go for?
Phase Two: Laptop Alarms and Security Cameras
You've got your laptop physically locked down, so you're off to a great start. For phase two of your laptop security system, try setting up a software-based security system and alarm. Here's how they work.
Say you get up from your seat for a minute but you want an added layer of protection on top of your laptop lock. Car alarm-like applications for your laptop let you walk away for a moment without breaking down your whole work area and packing up your laptop. The benefit of an alarm in a crowded library or coffee shop is that all eyes are on your laptop and the potential thief when it goes off. An alarm is a second phase deterrent if a potential thief still goes after your laptop despite your lock.
For Windows users, free application Laptop Alarm (original post) will sound an alarm whenever anyone unplugs the power cable, the mouse is moved or unplugged, or the laptop is shut down. It's a very simple application that could use some improvements (especially compared to the Mac alternative below), but it's not bad for what it does.
Mac users, try the nearly identical applications iAlertU or Lockdown (original post). (Lockdown is based on the open-source iAlertU.) You can arm and disarm both applications car-alarm style with your Apple Remote, and both use the motion detection system in any newer MacBook to set off the alarm if someone moves your laptop. The alarm also sounds with any movement of your mouse, keyboard activity, and more. Whenever the alarm is triggered, your MacBook's iSight camera snaps a picture and can send it to any email address.
Alternately, you can also automatically upload iAlertU pics to your FTP server if you'd prefer that to email.
If your laptop has a webcam, turning it into a backed-up security camera while you're away can also help if your laptop were to get stolen. On Windows, you can install and run a free tool like Yawcam (original post) to turn your webcam into a motion-sensing security camera that can back up pictures it snaps to an FTP server. Just switch on Yawcam whenever you step away from your computer.
On a Mac, you could try out Gawker, a killer open-source time-lapse application. You'd need to figure out a method for off-site backup with Gawker, but a method similar to backing up iAlertU pictures via FTP should do the trick. For more, check out my previous guide to using Gawker.
Phase Three: Retrieval
If worse comes to worst and your laptop is stolen, you're still not without recourse. Several tools are available to help you not only track your laptop and the thief after your laptop has been stolen, but also to secure data on your computer after it's been stolen.
Windows users should check out the free application LaptopLock. Here's how to use Laptop Lock to report your computer missing, remotely delete or secure files, run programs, and even send a message to the thief.
Similarly, the cross-platform Adeona is an open source application designed to help you track a stolen laptop by gathering information like IP addresses and access point information (like the name of the hotspot the laptop is connected to). As an added bonus for Mac users, Adeona can also snap photos with your iSight whenever it tracks the thief's location and upload that photo as well—a killer option for getting several pictures of the thief and possibly some information to determine where he/she is using your laptop.
With tracking tools like Adeona or LaptopLock, you're not guaranteed pinpoint accuracy by any means, but it is a start. Adeona does not geolocate IP addresses itself, either, but you can plug the addresses or wireless networks the application sends to you into web-based tools like Wigle or the GeoIP demo to see what you can find. If you're using LaptopLock on a Windows computer, the LaptopLock service can do the IP mapping itself.
More Security Options Worth Considering
Since the sensitive information your computer holds is ultimately more important than your laptop itself, do yourself a huge favour by encrypting your hard drive. We've already walked you through how to encrypt your drive with TrueCrypt, a free and cross-platform encryption tool that protects your data in case of theft, so that's the perfect starting point.
If you've set up remote services on your computer—like SSH, VNC, or even an FTP server—you might want to consider using the DynDNS web service as a LoJack, to connects to your computer no matter where it's located and backup or delete sensitive files if it is stolen.
As a bonus tip, consider installing tracking software on your USB devices—like iPods or thumb drives—with previously mentioned application iHound. iHound works similarly to the laptop tracking and recovery tools mentioned above, but it places an enticing passwords.txt file on your USB drive's root directory that uploads information like IP addresses when the thief opens that file.
The Upshot
None of these methods are foolproof. A thief could cut your lock, run off with your laptop even with an alarm sounding, and format your hard drive immediately. As a rule of thumb, however, a lot of would-be thieves either don't necessarily know how to do some of these things or simply don't take the effort. Similarly, tracking and retrieval tools aren't a sure thing. IP address mapping is inexact at best, and it's often very difficult to use an IP address to identify anyone anyway.
Every bit counts, though, even if it only means the difference between the thief making off with your laptop or your entire identity. If you've got your own methods for setting up a laptop security system—even if it just entails carrying it with you at all times—let's hear about it in the comments.
Adam Pash is a senior editor for Lifehacker who dreams of the day his laptop can return to him like an AT-5000 Auto-Dialer (but with better wheels). His special feature Hack Attack appears every week on Lifehacker.
Comments (AU Comments · US Comments)
There are currently no AU comments for this post.
polyboy
Posted 2:15 AM 3/9/08
"After all, if you were a thief scoping out two laptops-one with a lock and one without-which which would you go for?"
Probably the one with the dual-core processor, lock or not, which sadly means they won't be nabbing mine.
polyboy
polyboy
Posted 2:40 AM 3/9/08
@smartboydan I am rocking a 3-year-old Acer Ferrari 4000. When I first got it, everywhere I went people lusted over it. I carried it to the urinal at coffee shops. I peeled the Turion 64 sticker off, thinking that made it more of a target. Now I wish I could put the sticker back on because my notebook still looks hot as hell! And I do have an XP sticker on it (and I do run XP, with a moderate sense of pride).
polyboy
Kilim
Posted 2:39 AM 3/9/08
I think the best bet is not to tip off the thief so you can catch them or....
My brother got fed up with his car stereo's being stolen so he rigged a 140DB yelping siren into the cars stereo. It was so hilarious!!! He used to leave the car unlocked in bad neighborhoods just to see the look on the would be thief's face when the alarm went off....about 5 seconds after opening the door.
Oh it's the little things in life.... :-)
Kilim
glitch1138
Posted 2:30 AM 3/9/08
This method places device retrieval over data security, as it's dependent upon the thief being able to login to the system to get an IP address, photo, and location.
For me, my data is worth more than my device, so I've tried to make login as secure as possible: open firmware password, login password, truecrypt encrypted partition, etc. If the device is lost, (hopefully) my data will be secure and backed up through jungledisk and I'll buy a new laptop and move on. I'm not rich so losing the laptop would bother me, but you have to be realistic about retrieving a stolen device.
glitch1138
Deprong Mori
Posted 2:30 AM 3/9/08
There's no way to casually glance at a notebook computer and determine how many processor cores it has. Regardless of the number of cores your CPU has, the thief will look for an easy snatch/easy sell, not the spec sheet.
Deprong Mori
Git Em SteveDave is starless
Posted 2:28 AM 3/9/08
I remember an article about faux trashing your bike to deter thieves. Could the same be applied to laptops? I.E. removing the optimized for Vizta sticker, and adding a win98 sticker. Or covering the dual core with a Pentium II sticker?
Git Em SteveDave is starless
smartboydan needs to stop watching the Watchmen trailer
Posted 2:26 AM 3/9/08
Disclaimer to above: I use Vista and XP.
smartboydan needs to stop watching the Watchmen trailer
smartboydan needs to stop watching the Watchmen trailer
Posted 2:26 AM 3/9/08
@polyboy: You can make it tougher by removing all of the stickers that laptop manufacturers like to stick onto the laptops. You now, the ones that say things like, Intel Core 2 Duo, or Windows Vista.
On second thought, leave the Vista one. They may prefer XP.
smartboydan needs to stop watching the Watchmen trailer
massysett
Posted 2:53 AM 3/9/08
I thought Phase 1 would be "Do not leave device unattended in public."
massysett
snowmentality
Posted 2:43 AM 3/9/08
It costs money, but I have Undercover on my Mac. It may not keep it from getting stolen (I tend to use low-tech ways to prevent that, like keeping it either on my person or locked up out of sight at all times) but, if someone were to steal it, I feel like I'd stand a halfway decent chance of seeing it again.
I also just like how devious it is, including the remote malfunction simulation to lure the thief to bring it in for repair or try to resell it. Plus, having someone else to do the interfacing with the cops and ISPs is nice.
I would never walk away from my laptop in a coffee shop, alarm or not. If it's not behind a lock, it's on my person. No exceptions.
snowmentality
heavylee-again
Posted 3:20 AM 3/9/08
@heavylee-again: While I agree with your second statement, have you ever seen a Macbook or Macbook Pro that wasn't a Core 2 Duo? This is to say that I personally can look at a laptop for less than 1 second and tell if it is a Macbook or Macbook Pro. Thus, I'd know by casually glancing at a laptop how many cores it has. And if I can do it, many others can as well.
Strike that comment. I'll tell myself to STFU.
heavylee-again
goodywitch
Posted 3:17 AM 3/9/08
Best lo-tech version: study w/ a friend. When you have to pee, they'll look after it for you. Best is in the library, so you won't be tempted to talk to each other. (and if you're going to be a while, let him/her know, so s/he can plan accordingly.)
At my university, the police dept offered a (non-free) service to stick a non-removable label onto your laptop and have it registered with the polce dept. I'm not sure what other stuff was offerred, because I wasn't able to have it done (long story). If you're at college, you can talk to your/someone's RA and see if there's a simliar service for you.
goodywitch
Cpryd001
Posted 3:15 AM 3/9/08
(a rule of thumb, however, a lot of would-be thieves either don't necessarily know how to do some of these things or simply don't take the effort.)
Underestimating the enemy. Nice. The smart ones don't get caught.
Cpryd001
heavylee-again
Posted 3:14 AM 3/9/08
@Gibles: Why not put a boot password on it, and a sticker that says if found, 250$ dollar reward, your phone number.
Because then I'll steal you laptop, then call you and collect a $250 fee for the service of returning it to you.
heavylee-again
heavylee-again
Posted 3:13 AM 3/9/08
@Deprong Mori: There's no way to casually glance at a notebook computer and determine how many processor cores it has. Regardless of the number of cores your CPU has, the thief will look for an easy snatch/easy sell, not the spec sheet.
While I agree with your second statement, have you ever seen a Macbook or Macbook Pro that wasn't a Core 2 Duo? This is to say that I personally can look at a laptop for less than 1 second and tell if it is a Macbook or Macbook Pro. Thus, I'd know by casually glancing at a laptop how many cores it has. And if I can do it, many others can as well.
heavylee-again
Gibles
Posted 3:07 AM 3/9/08
Why not put a boot password on it, and a sticker that says if found, 250$ dollar reward, your phone number.
Gibles
ejoy
Posted 3:37 AM 3/9/08
While security cables and locks are a good deterrent, if you're leaving your computer unattended, make sure you get a good lock.
When our college IT department was considering slot locks for our iMacs, we originally decided to go with the cheaper scissor locks to save money. Unfortunately, the lock came out of the security slot with just one good yank, we lost an iMac, and the department ended up buying new (and more secure) locks.
ejoy
vondruska
Posted 3:55 AM 3/9/08
If you are an owner of a recent Mac you should check out [support.apple.com] and password protect the Firmware. That would prohibit people from booting to devices that would wipe the hard drive. Doesn't fix the problem of removing the hard drive and picking information off of it but it would slow a thief down.
vondruska
buck09
Posted 3:47 AM 3/9/08
The Kensington lock (Microsaver DS) illustrated in the article is the only way to go. I recently rolled out cable locks to thousands of computers and spent a fair amount of time in research and testing.
1. Thinner cables can be easily cut, with as little as scissors or a pocket knife. (I've done destructive tests personally.) Ironically, many of the crappier cables are advertised as being for "executives" - which is ironic, as an executive's laptop would generally be top-of-the-line (it's an ego thing) and contain some juicy data.
2. Cable locks with the cylindrical lock type can be opened in under 30 seconds with a toilet paper tube.
3. Combo locks (of the 4 digit variety) can be opened in less than 15 minutes, assuming you've practiced. (I've seen it done.)
buck09
theRIAA
Posted 4:08 AM 3/9/08
adeona+perfect keylogger(or other remote keylogger)!!!
I leave my laptop always unlocked with no password. (no sensitive data in there), so they don't wipe the drive. (important!!!)
perfect keylogger is COMPLETELY INVISIBLE, like a virus. It records EVERY KEYSTROKE takes a screenshot on EVERY MOUSECLICK (haven't noticed and performance loss either) and sends this info and pics to an AOL mail address every 20 minutes.
and I also have logmein free running with default blank screen on connect, so i can take control any time he's connected and he'll just see the screen turn off. (can delete stuff, or w/e)
My laptop is only worth $400, i'll get that back and more in pure pleasure if someone steals my laptop.
theRIAA
garbanzo-bean
Posted 4:08 AM 3/9/08
i find that not leaving my computer unattended in a public place is an excellent way to keep it from being stolen.
garbanzo-bean
mailbox01
Posted 4:33 AM 3/9/08
Use Truecrypt and Windows Steadystate with Windows Disk protection feature enabled to prevent them from formatting the harddrive. Making the harddrive useless if stolen.
mailbox01
quail
Posted 4:28 AM 3/9/08
Darn, I'd hoped this article was more on wi-fi security and packet sniffers, and the like. Things change so much in computers I just wanted to be sure that I was still being secure when I checked bank accounts on hotel systems.
quail
VayaConQueso
Posted 4:59 AM 3/9/08
I would think a big Vista sticker would keep your laptop safest of all. :-)
VayaConQueso
RenRen
Posted 4:47 AM 3/9/08
Lojack for laptops www.lojackforlaptops.com seems to have a good deal. They claim to have different ways of tracking your computer back. I did a clean (slimmed-down) reinstall of vista and their software was still communicating the computer's IP address and some other stuff to their servers. That impressed me. (Maybe it keeps it in RAM?)
RenRen
Devon
Posted 5:14 AM 3/9/08
If I'm at a coffee shop with my laptop and need to use the restroom, I shoot the nearest person in the leg and when everyone turns to look at what happened, I say "He was eyeing my laptop!", and then head to the restroom.
Devon
four12
Posted 5:31 AM 3/9/08
I'm working on a Laptop Security version of a Trunk Monkey.
four12
karan10489
Posted 5:26 AM 3/9/08
for RenRen...plz check out RAM at howstuffworks .com..SERIOUSLY!!..RAM??...as for the article,if the thief really is smart,he'l wipe the hard disk,n all of the measures mentioned, require it to connect to the internet,well if the thief DOESNT connect to the net, uses say fancy hardware for gaming or sumthng,well thwn,none of these will work...THT,n the fact tht sum1 mite actually sell it off,without bothering to use it,in which case, its a bit of a lost cause...i agree with the universal advice...TAKE CARE of it!!
karan10489
Adam Pash
Posted 6:08 AM 3/9/08
@envador: Like I said, none of the security features are insurmountable for a determined thief. That said, just because a thief could carefully maneuver his way threw laser sensors on his way to the bank vault doesn't mean that every thief can/will.
Adam Pash
Gibles
Posted 6:07 AM 3/9/08
I think I'm going to look into using iHound
Gibles
shinta42
Posted 6:05 AM 3/9/08
It installed a process called googleupdate.exe ....???
shinta42
Eruanno
Posted 5:58 AM 3/9/08
@smartboydan needs to stop watching the Watchmen trailer: Crap. My Macbook has no stickers whatsoever...
Eruanno
envador
Posted 5:52 AM 3/9/08
Do the "alarms" come out of the laptop stereo speakers? What's to keep me from plugging in a set of earphones to shut it up?
envador
Charli Wag
Posted 5:44 AM 3/9/08
@quail: A: It's not B: Don't.
Charli Wag
Focus-Man-Focus
Posted 12:53 PM 3/9/08
@RenRen: Actually, it's got a component built into the machine's BIOS. If your laptop doesn't have the BIOS component, the software won't work.
Focus-Man-Focus
Jerse
Posted 12:44 PM 3/9/08
....or you could just take it with you
Jerse
Call me Kenneth
Posted 6:05 PM 3/9/08
There's a similar piece on laptop security from a more business angle here: [tinyurl.com]
Call me Kenneth
Hic
Posted 7:51 PM 3/9/08
Individualize your laptop. The cheapest and most effective is to "trash" it with kindergarten-type spatter painting, but if you can't bear that then even one of those big arty cover stickers will encourage a library thief to pick a different target.
Don't carry it in a laptop bag, use something more generic. A backpack is harder to steal.
Passwording key Office files is easy but sadly they are crackable. TrueCrypt is a better solution.
(I am still amazed by the time I lent my laptop for a presentation of cutting-edge just-becoming-commercial technology by a key insider, and they commented on my "long" password of 10 characters.)
Hic
Ken
Posted 10:16 PM 3/9/08
I think it's better to lose the whole laptop than to lose your important personal data or tracking them down by allowing them to log onto the internet after it's stolen.
consider entire hard drive encryption.
Ken
steemcb
Posted 10:07 AM 3/9/08
damn, if only i'd seen this post two weeks ago.. my laptop got stolen from my apartment while I slept.. what I'd do to get a snap of the *&(*!# who stole it....
steemcb
Jacobm001
Posted 4:58 AM 3/9/08
@RenRen: It wouldn't be the RAM. All of your computers RAM is dumped when you shutdown the computer (Or they lose power). Your computer's IP won't change just because you reinstall the OS.
Jacobm001
Jacobm001
Posted 2:45 AM 3/9/08
Another thing that might be useful for securing people's data. There are a few devices that require a thumb print to login. I believe the one developed by SanDisk can even do a password/thumbprint combo.
Jacobm001
bubkes
Posted 5:41 AM 3/9/08
My University gives free copies of LoJack for laptops and free engraving services for laptops and USB keys. Either way, it shouldn't leave your side in public.
bubkes
Greg2B
Posted 2:28 PM 3/9/08
I'm kind of surprise you didn't mention something like BluePromixity
([tinyurl.com]) for the Linux users. As of now it's about as close to iAlertU and Lockdown as we can get.
Greg2B
theorysbox
Posted 3:28 AM 3/9/08
I do not think putting older stickers is going to deter a thief much. i am sure a good chunk of them do not know anything about computers anyways.
Best bet is just not leave it behind anyplace.
theorysbox
Leander
Posted 12:39 PM 3/9/08
I can tell you from personal experience Lojack for Laptops work and is worth your money. I repair laptops on the side and had someone break in and steal the 5 I was working on, and my personal 2 laptops (among other tech items). Called lojack, and about a week later the cops were driving and their car pinged. They opened this storage shed FULL of stolen items, and managed to connect it to 13 other robberies in my area, some 6 months old! I got all my laptops back.
Also, if I needed them to, they can remotely erase your data on your laptop, so sensitive documents don't end up in the wrong hands. They have a corporate edition that is used by a lot of large companies for this reason alone.
I highly suggest anyone who cares about getting their computers back buy lojack for laptops.
Leander
afo0l
Posted 8:23 AM 4/9/08
Back to the basics of physical security, primitive but well functional. I'd never consider locking my notebook down, in fact in most coffee shops i visit i'm sure it won't be stolen if i go for the bathroom. Maybe consider dating waitresses so they can watch out for your stuff. Also, a big pitbull locked to that cable lock would do the trick. After all, if a thief sees linux boot straight into a terminal login prompt.. i don't suppose they're interested. Do you actually save sensitive data on your notebooks?
afo0l
Digital1234
Posted 7:30 AM 7/9/08
When I'm studying at my university library, them most expensive item on the table isn't my laptop ($300), its my overpriced textbooks. Smart thieves snatch the textbooks, walk across the street to the textbook broker, and have a pocket full of cash within 10 minutes.
Digital1234