Securing/Recovering a Stolen Mac?

From TMUG - The Triangle Macintosh Users Group

There's a good bit of hype about recovering a stolen Mac - we're here to provide some details that can help you make an informed decision about what is possible, what your expectations should be, and how to implement our suggestions.

First on the discussion list is how to make your Mac more secure from the standpoint of protecting your data. The only thing worse than having your computer stolen is having your personal information compromised on top of that. A thief will have access to your browsing history, your e-mails, your financial information, etc... anything on your computer is fair game.

Second on the discussion list is the concept of recovering your Mac through means of direct spying on the person who has or is using your computer. There are a number of ways this might be done, with varying requirements on your part. We will review VNC-like techniques (Apple Remote Desktop, BackToMyMac, WebEx) and stealth techniques (LoJack, Undercover, Bak2u).

VNC-1. Apple Remote Desktop. This is Apple's built-in screen-sharing and screen-control software, based on AT&T's (Cambridge in the UK, not USA!) VNC (virtual network computing) software. Both Tiger and Leopard have a built-in server, so there is no need to install the open-source version. To activate it, go to the Sharing Control Panel, and turn on Remote Management (Leopard) or Apple Remote Desktop (Tiger). There, you can set a password for access, but it's unclear how the restrictions for different users work (if at all).

VNC-2. BackToMyMac is part of Apple's MobileMe service, at $99/yr. It appears to give you the same capability as Apple Remote Desktop, with one critical exception - since MobileMe is designed to be easy to use, it can find your MobileMe computers across the internet. BackToMyMac is a Leopard-only feature.

VNC-3. WebEx - a catch-all term to describe any of many services to share your computer via a VNC-like connection. GoToMyPC is the best-advertised of the group, and is PC-only. WebEx is owned by Cisco and provides virtually the same capability, and has the additional claim of being Mac-compatible; however, the accuracy of this statement can be strongly debated. There are a number of lesser-known services that get better reviews on the Mac, such as CoPilot, Avacast, Yuuguu. However, big caveat, these programs are designed to be used as helper programs, and most require a handshake to work. WebEx does not necessarily require this (nor GoToMyPC), but none of them get around the fact that, as a collaborative tools, they are not designed to work as hidden programs. IOW, they are conceptually similar to VNC.

Stealth Techniques. For the PC, Lojack for Laptops seems to be the most well-known, and has a recently released Mac version. For Macs specifically, the main game in town is Undercover. These 2 programs work very similarly, but there are significant differences in certain areas. In general, these softwares are NOT do-it-yourself surveillance tools. They install software on your computer that a) watches for an IP change, b) contacts company-run servers to report status, and c) depends on you reporting your computer stolen. The company then works to get more information and coordinate with law enforcement to recover your computer. There may be some degree of interaction with you (for example, Undercover claims to send you regular screenshots), but in general, this is something you pay for and then do not ever use until the dreaded day that you discover your Mac to be stolen. Pricing is a bit confusing, but ranges between $40 and $60. Both companies reserve the right to install additional software on your computer in an attempt to recover it.

Stealth-1. Lojack. Beware, appears to be a yearly subscription. Premium edition includes $1000 recovery guarantee. With a 14-page set of terms. Caveat Emptor. American company.

Stealth-2. Undercover. One price one time, but they specifically reserve the right to charge for upgrades. Belgian company. If they fail to recover your computer, you get your license money back. They go a second step -