Finding lost notebooks with 'LoJack for laptops'

Finding lost notebooks with 'LoJack for laptops'

What can you tell me about the market for products that promise to act like a LoJack for your laptop? How do these products work, and do they really help an organization recover stolen hardware? In what scenarios are they worth the investment?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

These PC-finder applications are pretty simple. They involve loading a software agent on a laptop that will periodically (when connected to the Internet) phone home and figure out if the device is listed as stolen. In the event the device is stolen, it provides information about the IP address and other network characteristics to assist law enforcement in locating the device. Presumably, this allows the proper authorities to find the device and return it to its rightful owner.

These services do work, as long as the local police are responsive to finding and retrieving the device. Is it worth the investment? There is no generic answer to that. The reality is a machine itself is worth a couple hundred bucks. This is a traditional insurance calculation. Security professionals should figure out the likelihood of their machine being stolen and its replacement value, and then make a decision on whether the insurance is a good bet – especially when there is no guarantee the machine will be recovered.

Another aspect of this decision isn't so much the value of the machine, but the value of the data it contains. If private data is kept on the device, then retrieving it as quickly as possible is critical, unless it has some type of full-disk encryption, so even if it is stolen and not recovered, the data on the computer is not exposed. Of course, if the machine's data is not backed up properly, the data could be invaluable.

Currently many more organizations opt for full-disk encryption over LoJack-type services. So I think it's safe to say that for a lot of organizations, the investment is not worth it.

More information:

This was first published in February 2008