in

This Blog

Syndication

Tags

AlertBoot Endpoint Security

Laptop Encryption Software And Wi-Fi: Signals Lead To Break-Ins, Theft (Updated)

A couple of days back I read an article describing how thieves in Jamaica use wi-fi detectors to find laptops in parked cars.  I couldn't quite make sense of it, and dropped the matter despite being interesting.  Hard disk encryption like AlertBoot would be extremely useful if this were true, since the protection of data becomes even more paramount.  I mean, thieves can now find your laptop despite your best intentions to hide it?

(Please jump to the bottom for an update)

Only Affects Laptops That Are Not Fully Shut Down

I notice today, however, that Credant Technologies has warned laptop owners to shut down their laptops completely, or at least turn their wi-fi signals off when laptops are put away, with a direct reference to the "Jamaica news" I had read.

According to Credant, it can take up to half an hour for a computer to actually turn off when it is put into sleep mode by closing the laptop lid; and that long for the wi-fi signal to turn off as well.  While it's still up and running, a wi-fi signal locator can be used to find the laptop.

This is the part that puzzles me.  I've used a wi-fi signal locator, and never have I had it point to anything other than an internet access point, like a router or such.  I mean, when I'm at a Starbucks, and there are dozens of customers pecking away at their machines, and I hit the button on the signal locator...I don't see 13 signals; I see the one wi-fi connection offered by Starbucks.

I've done some research on-line, though, and it looks like detecting laptops as a wi-fi access point happens often enough.

Same Problem Affects Bluetooth?

In hindsight, perhaps this is not so surprising.  There were reports, back in 2005, that laptops with Bluetooth connectivity were being stolen from cars.  Thieves used Bluetooth-enabled phones to find the laptops, so it didn't matter whether people placed their computers out of sight: inside the trunk, beneath the passenger seat, in an inconspicuous plastic bag, etc.

If I'm not wrong, though, further updates to Bluetooth put an end to those shenanigans...

How Prevalent Is The Problem?

I've got to say I'm pretty skeptical about thefts happening in either way.  Maybe I'm just anchoring on my own personal experience, but it just doesn't seem to make sense nor happen frequently enough.

If anything, the tried-and-true method of thieves waiting in parking lots and observing drivers place their laptops in their car trunks seems like a better option.  This way, they can get machines that are fully shut off as well as the ones that are in sleep mode.

Regardless, leaving a laptop behind in your car is always a bad idea, especially if you're carrying around sensitive data and the information is not protected with encryption software.  Remember, people hardly ever get fired for having a laptop stolen.  But having a laptop with sensitive information stolen?  That's an entirely different story.

Update, March 03, 2010

Well, several other sources have picked up on the story, including Wired, and I guess I gave Credant waaaay too much credence: Wired points out that the article--a press release, actually--was written up by a person in marketing (Wired link at the bottom).  OK, I can understand that I've been had.  At least I can take comfort that in the fact that I didn't believe the story nilly-willy the first time I heard of it.

Related Articles and Sites:
http://www.eweekeurope.co.uk/news/credant-warns-users-to-switch-off-laptop-wi-fi-to-prevent-theft-5609
http://www.radiojamaica.com/content/view/25363/26/
http://www.wired.com/gadgetlab/2010/03/security-expert-claims-thieves-can-detect-wi-fi-in-sleeping-computers/

<Previous Next>

Drive Encryption Software: Arkansas National Guard Hard Drive Missing

Disk Encryption Software: UK Oldham Council Breached Again, Why Data Security Requires Layers

Comments

No Comments

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.