Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

After a frenetic London riot, a laptop is recovered

IT security consultant Greg Martin recovered his MacBook Pro after his apartment had been trashed

When Greg Martin [cq] returned home last Wednesday morning after a night of intense rioting in London, his West End apartment had been ransacked.

Martin, 29, an IT security consultant with the HP-owned security company ArcSight, had spent the previous evening with his girlfriend in southwest London after the two had encountered riot-related trouble and decided to hunker down for the night.

But when he arrived at his apartment in West Kensington in the morning, he found the bars on a window had been pried open with a scaffolding pole. Inside, it was a mess: drawers had been rifled through, money and small electronics had been taken and gone was his MacBook Pro laptop.

"They just totally turned the place upside down," said Martin, who has lived in London for two months.

Martin was concerned since he used the laptop for work. The laptop was password protected and the hard disk was encrypted, but it contained sensitive work-related information and personal material.

Martin remembered he'd installed Prey, an open-source application that can track the location of a device once it has connected to the Internet. The application, from a company called Fork with offices in Santiago and Hong Kong, is one of many tracking applications on the market. Fork offers a free version of Prey that allows users to track up to three devices.

Prey's tracking feature is activated through a web-based portal by users when they've noticed their device is missing. Prey will send periodic reports plotting the location of the device on a Google map using Google's index of Wi-fi hotspots collected through its Street View imagery cars. Google assigns a GPS geolocation marker to a wireless access point. The frequency with reports are sent can be adjusted and the webcam be turned on as well with Prey.

Although the laptop had a password, Martin suspects that the intruder used Mac OSX installation software to create a new account on the computer, which eventually allowed him to connect to the Internet but also activating Prey.

Martin was having dinner in Luxembourg on a business trip when the first report came in. "It was a really incredible feeling," he said. "I nearly fell out of my chair. I see this guy staring back at me, and I have his address."

He ran back to his hotel and upgraded his Prey account to receive more frequent reports, an advanced feature of the paid version. He watched for two hours as the 18-year-old cruised the Internet on his computer, visiting Muslim religious sites, shopping for a car on AutoTrader and even trying to apply for a Tesco gas card using someone else's identity.

Prey also takes a screenshot when it compiles its reports. It was only a matter of time before the young man logged into Facebook.

Martin quickly had his name, where he graduated from high school and his address. The man was just two blocks away, and Martin actually recognized a building that appeared in the background of a photograph taken by the webcam. He was even able to give police an estimate of what floor the suspect lives on.

The police had trouble getting a search warrant immediately, but when Martin returned from his trip, they sent him an e-mail asking the location of the suspect.

"I almost gave them [the police] an entire dossier on the guy," said Martin, whose laptop was returned to him by police. "They had no problems picking him up."

The teenager has been charged with handling stolen goods and is expected to appear in court on Friday, Martin said.

Send news tips and comments to jeremy_kirk@idg.com

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: ArcSight, Facebook, Google, Hewlett-Packard, HP, Kensington, Tesco, West
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: Facebook, Google, Fork, legal, Criminal, Internet-based applications and services, Maps, internet, social networking
Latest Blog Posts
Whitepapers
  • Endpoint Buyers Guide
    It takes more than antivirus to stop today’s advanced threats. Protecting corporate assets requires a complete security solution that includes anti-malware, host-based intrusion prevention (HIPS), web protection, patch assessment, application and device control, network access control, data loss prevention, firewall and other capabilities. In short, you need an endpoint protection solution. We examine the top vendors according to market share and industry analysis: Kaspersky Lab, McAfee, Sophos, Symantec and Trend Micro. Each vendor’s solutions are evaluated according to: Product features and capabilities, Effectiveness, Performance, Usability, Data protection, and Technical support.
    Learn more »
  • Teleworking made simple—and secure—with desktop virtualisation technology
    Businesses of all sizes are increasingly focused on creating flexible work environments and offering telework options for employees. By administering policies and providing the technical capability for employees to work remotely, these companies can improve job satisfaction and worker attraction and retention. This paper explores the implementation of teleworking based on a foundation of desktop and server virtualisation.
    Learn more »
  • Getting real about Virtual Backup and Recovery
    Virtualisation continues to grow in popularity with real implications when it comes to backup and disaster recovery. Acronis compiles an annual survey of worldwide confidence in backup and disaster recovery. This year the survey has also thrown up a number of key global findings some of which are discussed further in this whitepaper, where we look at the continued spread of virtualisation, the implications in terms of backup and recovery.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments