"Undercover" software helps recover your stolen MacBook

So you coughed up some dough for that iAlertU program to protect your MacBook, but wouldn't you know it, your laptop got jacked anyway by a clever thief who simply removed the battery before taking off. Luckily for you, all is not lost, at least not if you'd installed another program called Undercover on your machine, which not only sends out an IP-address-containing SOS if it's reported stolen, but actually uses your machine's built-in iSight to snap a photo of the perp before simulating a screen failure that makes the Mac unusable. Every six minutes, Undercover pings a database maintained by developer Orbicule to check if the machine it's installed on has been stolen; a positive reply from the server initiates a sequence of events that hopefully ends with law enforcement officials breaking down the door of the nefarious Macjacker's pad and recovering your beloved notebook. In case the crook was smart enough to never reconnect to the Internet after the heist, however, you'll still need to file an insurance claim and head down to the old Apple store -- looks like they still haven't found a software solution that beats the trusty Kensington Lock.

[Larry Ge @ May 21st 2006 10:37PM]

I can just see it, in 2012, not only will your laptop lock up when someone approaches it, it will play the "friends" theme song way to loud, zap th intruder with a laser beam, notify all the world leaders, transform into optimus prime, and then self destruct, causing you a 1000 dollar loss.

[Adman @ May 21st 2006 10:45PM]

A Kensington lock is not really going to help you either... http://www.boingboing.net/2005/05/18/howto_open_laptop_lo.html

[Velocity @ May 21st 2006 10:45PM]

Speaking of lock ups...I know there is car security out in the market that automatically disables a car once you are so many feet away....using the wireless in the laptop couldnt the same thing be done with a laptop.

[Special_K @ May 21st 2006 11:06PM]

Here's a tip: DON'T LEAVE YOUR BRAND-SPANKING-NEW MACBOOK UNATTENDED! Geez Louise! How hard is it to grasp?!?!?? If you /really/ need to get up from where you are, get a comfy bag and slide the 'book in there; or lock it in a secure cupboard.

[cimaron @ Nov 28th 2007 3:59PM]

Mine was stolen out of my bedroom with the door shut...Sometimes if people wanna steal stuff they are gonna steal it. It doesn't matter how careful you are or if you hide it or anything. The world is just full of creeps and don't use their theft talent for good, it's a sad society we live in.

[embassy @ May 21st 2006 11:12PM]

special K..

sh*t happens....

[Rob @ May 21st 2006 11:12PM]

Is it just me or does this sound rather similar to Lo-jack for laptops? I don't know if Lo-jack does the whole photo, break the screen deal, but I thought it had the same idea of connecting to a server everyday and if a police report is issued it sends an SOS signal. Actually been debating on buying it myself for my new laptop coming in the mail.

[nizzy1115 @ May 21st 2006 11:26PM]

hmmm so put some tape over the isight camera, and dont connect to the internet until you reformat the drive? Could it be that easy? or is the location software built into the hardware rather than a program running on the system?

[Jared @ May 21st 2006 11:30PM]

Its good to hear that there seems to be more and more solutions to laptop theft coming out these days however it still does not guarantee that your laptop can be returned especially with the data it contained. In my case, it was an issue of law enforcement just not caring about my situation.

I had a laptop stolen with some data on it that could never be recreated. I went through the proper local authorities to file a report, even turned it in to insurance to have the hardware replaced. As local law enforcement reached their dead-ends, I hired a private investigator to help in the search. I then started hitting up local pawn shops and reading classifieds in hopes of finding it. None of these were working. One day it finally hit me that the managed anti-virus software on the laptop might actually update if the machine were turned on (even though the thief could not login) and I was right! It had in fact updated after it was stolen. I was able to contact McAfee and get the IP address from which the attacker had connected to get the update and it just luckily happened to be a residential cable modem after doing a quick reverse lookup on the IP addy. I called the ISP and they had the address of the subscriber even though they could not tell me, they said they would release the information if a warrant or subpoena was issued. I was able to determine that the IP was in a neighboring state. When I told the local law enforcement officials, they did nothing. It just didn't matter to them. They were too busy running around writing speeding tickets. It really made me lose faith in the effectiveness of law enforcement in general.

Moral of the story, buyer beware. You may be able to get an IP and photograph of your laptop thief, but it doesn't mean you can do anything about it.

[quahogian @ May 21st 2006 11:32PM]

Now how hard it is to just pull out the network card and change it with other one (mac address out of window). And to take care of all those pesky security programs just wipe the hard drive clean with formating or just swap the darn thing. So...1) don't leave you spensive sh$t unattended 2)hope that your thief is not an engadget reader or just decently technologically aware person.

[KameronKilchrist @ May 21st 2006 11:41PM]

Wow. I want this badly.
oh wait... i don't have a mac.
scratch that.

[LittleJoe @ May 21st 2006 11:44PM]

i think in the real world my biggest worry would just be someone breaking into my apartment and stealing my laptop. not because they are a computer geek ilke me, but because it looks and is valuable. i dont really think the person most likely to steal it would be techinically inclined enough so as to avoid the software doing its job. and yes... my MBP is left unattended in my apartment... i cant take that thing everywhere all the time... and we all know apartments are not fortresses.

i plan on investing in this program. shit $25? sounds great.

[Ari @ May 21st 2006 11:48PM]

This might be a better bet than the Kensington that can be picked with a bic pen - www.laplocker.com

[DS @ May 22nd 2006 12:17AM]

WOW! Apple is really ahead of the curve with this one.

-DS

[i.e @ May 22nd 2006 12:21AM]

It wasn't developed by apple you nitwit.

[Intrepid @ May 22nd 2006 12:43AM]

"13. It wasn't developed by apple you nitwit."

Ha. Good call.
Clever idea though, however the thief could just remove the software before you realise the laptop is gone, right? And I can see someone suing for this whole "photograph" a thief thing - its an invasion of privacy :P

[hestermofet @ May 22nd 2006 12:46AM]

"In case the crook was smart enough to never reconnect to the Internet after the heist, however, you'll still need to file an insurance claim and head down to the old Apple store"

According to Ars Technica's minireview of the product, if the machine hasn't connected to the Internet after a certain amount of time, the software will start faking hardware malfunctions. When the thief brings the laptop in to Apple for repairs, the software will flash a fullscreen message indicating that it's stolen, with contact info of the owner.

As for formatting the drive to remove the software, that's not possible unless you have the firmware-locked administrator password. Uninstalling the software is also not possible with the admin password. The software essentially installs itself as a rootkit, making it next to impossible to remove without the right password.

[Drifter @ May 22nd 2006 1:49AM]

You could always splash out a little and purchase an individually keyed Kensington Lock, They cost a bit more but the cardboard or pen trick doesnt work for them, because each dimple is a different height and then needs the tab to push around, just people tend to buy cheap.

[rekkk @ May 22nd 2006 1:57AM]

Thats great news. Undercover software from apple is the nice idea to keep the thieves away. Keep it up apple.

http://laptops-review.blogspot.com/2006/04/apple-macbook-pro-ma463lla-15.html

[gah @ May 22nd 2006 2:02AM]

Thats great news. Undercover software from apple is the nice idea to keep the thieves away. Keep it up apple.

http://laptops-review.blogspot.com/2006/04/apple-macbook-pro-ma463lla-15.html

[Jimbolaya @ May 22nd 2006 3:10AM]

Laptops thieves are often not computer users, you'll just get a pic of the person that bought it.

[Aaron @ May 22nd 2006 3:40AM]

OK, you know what, this is the fourth time this week that I've seen DS post some stupid ass-kissing remark about something Apple-related. And like #13 pointed out, he was even wrong about it. Has anyone else noticed this??? It's pissing me off.

...Anyway... interesting idea. I'm surprised at how the police reacted in #7's story, but it's not hard to believe. This software could be helpful, but what if you're not in a position to get it back yourself? Who will?

[onuo @ May 22nd 2006 3:58AM]

"head down to the old Apple store -- looks like they still haven't found a software solution that beats the trusty Kensington Lock."

http://www.flickr.com/photos/modrak/90213545/in/photostream/

The K. lock is not doing too well, even for Apple.

onuo

[Razib Ahmed @ May 22nd 2006 5:55AM]

This kind of story creates hope in the mind of laptop users that they may not be very far away from gettng a thief proof laptop sooner rather than later. Things are surely changing.

[zinedine @ May 22nd 2006 7:37AM]

This is one laptop or product feature that shouldn't be bannered on the catalogues or magazines. Announcing that an item has a security feature is like telling the thief what he has to do in order to take it with impunity. But, then again, we've seen countless videos of thieves committing "robbery 101" blunders that even a "Dummies" book would not even dare to write or feature a solution for it. All said, i think the feature is great. However, I hope they would compe up with a security feature that would work even if you're offline. But, then again, any gadget these days would be virtually useless if it cannot connect to the Internet.

[JinKazama @ May 22nd 2006 7:43AM]

That's pretty awesome, and typical laptop thieves aren't tech savvy enough to wipe the drive etc...they either want it for themselves or want to turn a quick buck.

The issue is going to be the situation where a thief jacks a MacBook goes straight to the pawn shop and sells it. Owner realizes its gone and activates the system. A stupid sap like me thinks he's getting a MacBook for a steal, buys it, boots up, screen goes black, and all of a sudden I'm on the police blotter.

[zinedine @ May 22nd 2006 7:44AM]

This is one laptop or product feature that shouldn't be bannered on the catalogues or magazines. Announcing that an item has a security feature is like telling the thief what he has to do in order to be able take it with impunity. But, then again, we've seen countless videos of thieves committing "robbery 101" blunders that even a "Dummies" book would not even dare to write or feature a solution for it. All said, i think the feature is great. However, I hope they would come up with a security feature that would work even if you're offline. But, then again, any gadget these days would be virtually useless if it cannot connect to the Internet.

[robo @ May 22nd 2006 7:52AM]

#20
Aaron, I've noticed it too...
But what can you do? DS may be Apple's number one fanboy, but what's it to us...?

Geberally, engadget has some off the most on-topic, flame-free discussion you'll find. Why not let the fanboys have their rants, you're better than that anyway...

seriously.

[bong @ May 22nd 2006 8:18AM]

where this software is installed? if its installed in the EFI, I guess that's a good thing. If you reinstall OS X, software will still be sitting in the EFI.

[Gordy @ May 22nd 2006 8:42AM]

Seems like Bluetooth or that Airport card inside could be inmplemented in some way. With the Airport card, at least, the computer doesn't have to 'connect'. The thief wouldn't even know it's happening.

[Matt Hadder @ May 22nd 2006 8:56AM]

This is a good idea for anti-theft. I've got an old Toughbook... just ran hardened chain through the handle to a padlock and epoxyed the handle bolts in.

No one's going to take my $300 laptop now!

[John from Buffalo @ May 22nd 2006 9:28AM]

Someone pointed out that the thief who steals your laptop is most likely NOT a computer user. We'll this is probably the TRUEST thing that someone has posted here. I had my laptop stolen last summer, and it was out of a locked car, in a locked case IN my car. Look, you just invested $1000-$3000 into a laptop. 97% or so of those laptops that are stolen are NEVER RECOVERED. Whatever you can do to lower that, do it. I purchased the software as a small piece of mind. The three things you should do, which is crazy NOT to do for most people, is to a) back-up your data on a regular basis, b) get renter's insurance, c) secure your data with encryption volume technology, and d) buy some software that hopefully the thief will be stupid enough to use on the internet.

Case close. RENTERS insurance, for SURE!!!

[Armie @ May 22nd 2006 10:05AM]

I second the renter's insurance thing. My brother (when his family lived in an apartment) was able to get a totally replaced, up-to-date system from Traveler's Insurance ($108/year I think) as a result of theft.

[Jerk O @ May 22nd 2006 10:49AM]

hestermofet,
You think the police have time to verify your IP address crap and launch an out-of-state investigation for your crummy laptop? They aren't busy writing tickets, they are busy trying to not get killed while being paid less than garbagemen. Here's a tip: back up your data and get insurance, you friggin whiner.

[tom2 @ May 22nd 2006 10:52AM]

Very simple anti-theft solution (or at least: pro-recovery :-) that I did on my notebook: Put my home address and an "Owner: " label into the BIOS startup screen on my Dell.
Very visible on bootup, quite hard to remove for non-pros.

[Jared @ May 22nd 2006 12:59PM]

#32: No investigation needed. I handed them the address on a silver platter which is exactly my point: you can buy the software and have all the information you need to locate and identify the criminal but you have no assurance that the cops have the time or the desire to do anything about it. Trust me, I've learned my lesson. I'm just trying to pass on my experience.

[CDT @ May 22nd 2006 1:27PM]

Re: the police not following-up, reminds me of an incident a couple of years ago where someone managed to get in to one of my on-line accounts that had credit card information stored (oops, bad idea). Anyway, the number wasn't visible but they were able to order stuff from the site with my credit card. When I received an email thanking me for my order, I went to the site to find out what was up. Because the thief had to put in an address to get the stuff, I was able to provide authorities with a name, an address and all of the nice paper trail stuff that was on the account. What did they do?? Nothing. Neither did my credit card company (though they did refund my money).

[Marc Mayor @ May 22nd 2006 2:43PM]

Wasn't there already a service for PCs, reviewed by Mossberg, I think for Thinkpads. When your stolen device connect to the Internet, it sends its IP address to a main server, helping to find its location.

[Jono Cono @ May 22nd 2006 3:46PM]

That's some nifty software, although it does sound a bit over the top.

[Mandeep @ May 22nd 2006 8:43PM]

whatever happened to "thanks to who sent the link/news" ??

[Lisa @ May 24th 2006 3:32PM]

I'm considering getting a macbook as my very first laptop (and very first mac for that matter). I've shied away from laptops in the past because I didn't need to be very mobile, you weren't getting enough bang for the buck, and they are super easy to steal. So when I saw this program I was really intrigued. It sounds like a pretty interesting tool, but it also sounds a little creepy in that big brothery type way. If they can take pictures with the isight and track the ip when you let them know it's been stolen, who is to say they won't do that when it is in your possession? It's something I'm thinking about while considering my purchase.

[san @ Jun 26th 2006 8:48AM]

Jared,

How did u get the information from MaCafee???
I contacted the customer serivice and they told me that they cannot give me any info about ip address

san

[Ali @ Feb 10th 2007 5:40PM]

is there ANYthing i can do right now to find out where my macbook is... stolen: yesterday, 1:45pm
note: i didnt set any anti-theft programs or anything..


and Special_K... seriously, sh*t happens.

[neb @ May 12th 2008 7:09AM]

Perhaps this is all a marketing gimmick by Apple to sell more software subscriptions at $99. Simply put the number of Mac x $99 = a lot of revenue.