Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Tracking A Thief Via The Sircam Virus?

Posted by timothy on Wed Jul 25, 2001 11:08 AM
from the more-than-500-for-me-so-far dept.
func writes with a rather strange situation: "Hey, my house was robbed, and they stole my computer, vcr, rc heli, and all my beer (!bastards!). But, on the positive side, the thief has been using the computer, and managed to infect himself with the Sircam virus. Now, some of my friends are getting virii sent to them by my stolen computer! Any way to track this guy via email, or even an ip or something stored in the virus code itself? And if I do find him, do I send the cops, or just my 6-foot-4, 260-lb ex-eastern-block buddy Radek?"

Since this virus' spread (cross fingers) seems to be slowing down a bit, this may take fast work. If you can reply with any suggestions for func, please include "Radek" or "Cops" in your subject line. (Just not the FBI.) Perhaps he could send a friendly letter to the thief offering free tech support?

This discussion has been archived. No new comments can be posted.
Display Options Threshold:
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1) | 2 | 3 | 4
  • Headers by Anonymous Coward (Score:1) Wednesday July 25 2001, @07:13AM
  • Re:excuse me... by Anonymous Coward (Score:1) Wednesday July 25 2001, @07:32AM
  • So... is it legal to infect YOUR OWN MACHINE? by Anonymous Coward (Score:1) Wednesday July 25 2001, @07:34AM
  • Re:of course now it won't matter by Anonymous Coward (Score:1) Wednesday July 25 2001, @07:42AM
  • And this is supposed to help me how? by Anonymous Coward (Score:1) Wednesday July 25 2001, @07:45AM
  • Forget "Anti-Virus". . . by Anonymous Coward (Score:1) Wednesday July 25 2001, @08:34AM
  • Re:Keep in contact with him! by Anonymous Coward (Score:2) Wednesday July 25 2001, @07:38AM
  • HTML email? (Score:4)

    by Anonymous Coward on Wednesday July 25 2001, @07:20AM (#61958)
    If he's been emailing your friends, why not setup a quick webserver which hosts a .gif or .jpg and send the guy an HTML email back with an img tag referencing to the website you setup. Turn on logging on the website and you'll have his IP address and the access time. From there you can email the upstream/the cops and you should be set.
  • Re:what an idiot. by Nick (Score:2) Wednesday July 25 2001, @12:05PM
  • Re:IP address in mail header by narf (Score:1) Wednesday July 25 2001, @08:13AM
  • re car theives by vipw (Score:1) Wednesday July 25 2001, @12:53PM
  • Re:Headers by Alex Belits (Score:2) Wednesday July 25 2001, @07:22AM
  • Headers (Score:3)

    by Alex Belits (437) on Wednesday July 25 2001, @07:18AM (#61963) Homepage
    "Received:" headers in he mail usually contain IP addresses and dates -- when checked against ISP logs they can point to the user, or a phone number if he used a dialup with your account.

    Of course, email MUST be copied in the form it was received, not mutilated by Outlook or other kind of garbage. If the recipient is unlucky enough to use Exchange, enable POP or IMAP support and download email from it using fetchmail or pine.
  • by Tim Macinta (1052) <twm@alum.mit.edu> on Wednesday July 25 2001, @08:26AM (#61964) Homepage
    If he's running any old binary sent to him, why not have one of your friends send a gift in reply? All it needs to do is grab the IP and timestamp, then email those details to you. Forward that to the police who can get location data from the ISP.

    Why not bypass the ISP (and the accompanying red-tape) entirely? If the laptop is using a modem to connect to the net, send the thief a binary which would cause the modem to call your home or work number and immediately play a sound clip that you can identify. When you receive a call that plays the sound clip, look on your caller ID and then use a reverse directory to map the phone number to a physical address.

    If the laptop is using ethernet to connect... well, that's a bit tougher. I'm not sure how to track it without the assistance of the ISP it in that case.

  • Re:IP address in mail header by ptomblin (Score:2) Wednesday July 25 2001, @07:41AM
  • Re:IP address in mail header by ptomblin (Score:2) Wednesday July 25 2001, @08:33AM
  • Nope, no open containers by marcus (Score:1) Wednesday July 25 2001, @09:15AM
  • Re:excuse me... by Plutor (Score:1) Wednesday July 25 2001, @10:33AM
  • Re:just a thought? by VAXGeek (Score:1) Wednesday July 25 2001, @10:48AM
  • Contact the isp by laertes (Score:2) Wednesday July 25 2001, @07:28AM
  • Correct, but make sure police know procedure by mortonda (Score:1) Wednesday July 25 2001, @11:35AM
  • Re:OTOH... by mortonda (Score:1) Wednesday July 25 2001, @11:38AM
  • Re:IP address in mail header by bonehead (Score:1) Wednesday July 25 2001, @08:16AM
  • Re:heh, tempting... by bonehead (Score:1) Wednesday July 25 2001, @08:33AM
  • Re:Some laptops phones home by CMiYC (Score:2) Wednesday July 25 2001, @07:54AM
  • simple... and laptop tracking by Oo.et.oO (Score:1) Wednesday July 25 2001, @07:19AM
  • Jeezus that is a scary thought by Archfeld (Score:2) Wednesday July 25 2001, @10:18AM
  • Re:excuse me... by sacherjj (Score:1) Wednesday July 25 2001, @12:18PM
  • Re:Hidden radio transmitter instead perhaps? by sacherjj (Score:1) Wednesday July 25 2001, @12:27PM
  • Hidden Bomb? (Score:4)

    by sacherjj (7595) on Wednesday July 25 2001, @07:16AM (#61980)
    I never thought about this, but it is an interesting idea. Has anyone programmed a hidden bomb that must be disabled every couple times you boot up, by the user. If this disabling action isn't completed after a few boots, it starts sending information to a secure location. Just give them enough leway to hang themselves. (Of course, this assumes they are on the net.)

    Although, the first thing I would do if someone handed me a computer is format and reload all the drives...
  • by mattkime (8466) on Wednesday July 25 2001, @07:20AM (#61981)
    You need to give him a reason to keep in contact with someone. I suggest you ask a female friend to take nude pictures of herself which she will send on a regular basis to this guy. Eventually, she will meet him in a sleezy hotel room and crush him between her thighs.
  • make sure to print full headers by Barbarian (Score:2) Wednesday July 25 2001, @02:24PM
  • Re:Keep in contact with him! by teasea (Score:2) Wednesday July 25 2001, @09:21AM
  • Re:Keep in contact with him! by Tricot (Score:1) Wednesday July 25 2001, @12:41PM
  • Re:IP address in mail header by StDave (Score:1) Wednesday July 25 2001, @09:16AM
  • Re:Im not so sure this will help by nix (Score:1) Wednesday July 25 2001, @07:29AM
  • Re:Hidden Bomb? by freq (Score:1) Wednesday July 25 2001, @08:22AM
  • Re:Yes. by IanCarlson (Score:1) Wednesday July 25 2001, @10:31AM
  • Re:Yes. (Score:5)

    by shri (17709) <shriramc@g[ ]l.com ['mai' in gap]> on Wednesday July 25 2001, @07:41AM (#61989) Homepage
    Assuming that the poor guy's startup page is not set to slashdot! If thats the case the thief knows whats going on. ;)
  • by eddy (18759) on Wednesday July 25 2001, @07:36AM (#61990) Homepage Journal

    Somewhat related...

    A long time ago a friend of mine ran a BBS on his Amiga. He had the startup rigged with a boot-meny containing a fake "Start BBS"-entry as a default, which - if chosen - would encrypt the RDB (Rigid Disk-Block) and reset. Or something to that effect.

    Hey, don't look at me, it wasn't my computer, nor my idea.

  • as an IT guy in a stock brokerage... by No-op (Score:1) Wednesday July 25 2001, @10:40AM
  • My vote by JoeLinux (Score:1) Wednesday July 25 2001, @07:18AM
  • What he's really asking by ugglan (Score:1) Wednesday July 25 2001, @07:19AM
  • Re:Radek! by MindStalker (Score:1) Wednesday July 25 2001, @07:37AM
  • Re:Hidden Bomb? by Fishtank (Score:1) Wednesday July 25 2001, @08:36AM
  • SecurID was Re:Hidden Bomb? by Camarones (Score:1) Wednesday July 25 2001, @11:15AM
  • Re:Hidden Bomb? by gmhowell (Score:2) Wednesday July 25 2001, @09:05AM
  • If it's YOUR ISP... by SEWilco (Score:1) Wednesday July 25 2001, @01:47PM
  • Re:Bear in mind by Unknown Poltroon (Score:1) Wednesday July 25 2001, @07:21AM
  • it depends (Score:5)

    by Unknown Poltroon (31628) <unknown_poltroon1sp@myahoo.com> on Wednesday July 25 2001, @07:16AM (#62000)

    If it was good beer, leave the cops out of it. If it was bad beer, sic the law on him.
    If it was BUD, have Radek slap some sense into you.
  • Re:Hidden Bomb? by brokeninside (Score:1) Wednesday July 25 2001, @09:10AM
  • Re:Should be pretty easy. by mefus (Score:1) Wednesday July 25 2001, @08:14AM
  • Re:Bear in mind by mefus (Score:1) Wednesday July 25 2001, @08:32AM
  • Re:Hold on a minute... by mefus (Score:1) Wednesday July 25 2001, @08:46AM
  • Re:Should be pretty easy. by mefus (Score:1) Wednesday July 25 2001, @08:58AM
  • Re:Should be pretty easy. by mefus (Score:1) Wednesday July 25 2001, @09:32AM
  • Re:Should be pretty easy. by mefus (Score:1) Wednesday July 25 2001, @12:10PM
  • Radek! (Score:3)

    by wiredog (43288) on Wednesday July 25 2001, @07:15AM (#62008) Journal
    Someone who steals your computer and then disables the security deserves what he gets.

    I assume he disabled your security. And not that you forgot to secure it.

  • Re:Bear in mind by M-G (Score:1) Wednesday July 25 2001, @07:56AM
  • Re:Bear in mind (Cops) by darkonc (Score:2) Wednesday July 25 2001, @09:32AM
  • Re:just a thought? by tapiwa (Score:1) Wednesday July 25 2001, @08:46AM
  • by Tackhead (54550) on Wednesday July 25 2001, @09:45AM (#62012)
    > The cops will just get snitty with you cuz you solved the crime.

    If you walk in to your local PD and say "I 0wn h1m! j00 cl00less fux0rz list3n 2 m33!", yeah, they'll get snitty.

    If you walk in, and behind closed doors (or cubicles :), outline how you solved it, in such a way that the officer you're talking to also has enough of an understanding on how to solve it, you've just taught a cop a new way to solve crime that none of his buddies know, and you've probably just made a friend.

    Beat a man over the head with a fish, and he'll slap you across the face with one. Teach a man to fish and you're both fed for life.

  • by Tackhead (54550) on Wednesday July 25 2001, @09:39AM (#62013)
    > This probibly wont help you get right to your robber, he probibly sold all your stuff. And if he was smart he probibly sold it to a used computer store that would resell it. Although most pilfers arent the smartest bunch, good luck ;)

    IANAL, but ISTR that in these cases, the used computer store (pawnshop) is guilty of "posession of stolen property". As is, for that matter, the innocent sucker who walks in off the street and buys it. As such, you can still get your computer back.

    Option 1: (There's only one bad guy, the thief.) The guy who bought the computer will be pissed, he'll be pissed at the computer store. The guy who runs the computer store will be really pissed, and he'll be pissed at the guy who sold it to him. End result -- the thief loses his ability to sell stuff at that store.

    Option 2: (There's another bad guy, in that there's a store or pawnshop operating as a "fence", that is, reselling goods they know are stolen). The guy who bought the computer will be pissed. The cops will have evidence to use in their (likely ongoing) case against the fencing operation. End result -- the thief may get away, but the fencing operation goes down.

    Either way, by providing evidence to the cops, you increase the odds of getting your stuff back and cleaning up your town.

  • by Tackhead (54550) on Wednesday July 25 2001, @09:34AM (#62014)
    > ...if they are willing to look at technical details.

    Very true, the trick is to get someone at your local PD interested in the case. Routine burglaries are, well, routine. Just as the FBI laughs if the losses are less than $BIGNUM, your local cops generally don't give a damn about property theft, because the odds are slim and the cases are boring as hell.

    1) So don't call - show up in meatspace at your local police department. (Or if you've filed a police report on the burglary, you probably have an officer's business card. In that case, call and try to set up a 15-minute appointment.)

    2) You may want to talk to a detective, rather than the beat cop. Dunno how lucky you'll be at finding one. Might be worth a shot. Go through channels.

    3) (Here's the kicker). YOU know how to solve the crime. The cops don't. So YOU explain it to the cop or detective - in detail. Bring printouts. Use highlighters. Emphasize the point that even though you did the legwork, you don't want credit - you want the cop to get credit for solving the "high-tech" case. This means career advancement to the cop/dick, and ought to interest him, even if the dollar value of the case is peanuts.

    "My house was broken into and bad guys stole my stuff" - a boring case, like dozens of others, involving all the paperwork with no chance of recovering the goods.

    "Here's an open-and-shut case on how to track a thief through cyberspace" - something new, possibly a promotion for finding a new way to solve cases, and a reputation within the department as "the guy who knows how to track criminals through cyberspace, he's even smarter than that moron the Feds send us every few months".

    If you're helpful your local cops, they just might be able to help you.

  • Re:Fuck the police, get some vengence by cobar (Score:1) Wednesday July 25 2001, @08:48AM
  • It's funny, but it sucks. by thetechweenie (Score:1) Wednesday July 25 2001, @07:17AM
  • Re:Trace account, then trace to phone # by thetechweenie (Score:1) Wednesday July 25 2001, @07:21AM
  • Re:Bear in mind (Radek) by reflector (Score:1) Wednesday July 25 2001, @01:34PM
  • Forget Radek. . . by fizik (Score:2) Wednesday July 25 2001, @07:11AM
  • Re:simple... and laptop tracking by steeljaw (Score:1) Wednesday July 25 2001, @09:59AM
  • Re:what an idiot. by wumingzi (Score:1) Wednesday July 25 2001, @12:28PM
  • Re:Hidden Bomb? by Patton (Score:2) Wednesday July 25 2001, @07:19AM
  • Re:Use his stupidity against him... by BlueUnderwear (Score:2) Wednesday July 25 2001, @07:27AM
  • by BlueUnderwear (73957) on Wednesday July 25 2001, @07:25AM (#62024)
    > Worst case, the current user is somebody who bought the computer from your thief and not the thief her- or himself, but it still gets you close.

    No, that's not the worst case. Worst case is that the virus didn't actually infect the stolen computer, but rather the replacement computer that you're using now...

  • by BlueUnderwear (73957) on Wednesday July 25 2001, @07:48AM (#62025)
    > Send you friend over and tell him to bring back both the thief's thumbs.

    Nowthat'sacruelandunusualpunishment!

  • Re:Bear in mind (Radek) by Phork (Score:1) Wednesday July 25 2001, @09:19AM
  • Re:IP address in mail header by poptix@work (Score:2) Wednesday July 25 2001, @08:10AM
  • Re:you were warned..... by Lxy (Score:2) Wednesday July 25 2001, @08:32AM
  • by Lxy (80823) on Wednesday July 25 2001, @07:20AM (#62029) Journal
    How quickly we forget. Or was I the only one who ran out and filled my computer with cement [slashdot.org]?

  • by szcx (81006) on Wednesday July 25 2001, @07:15AM (#62030)
    If he's running any old binary sent to him, why not have one of your friends send a gift in reply? All it needs to do is grab the IP and timestamp, then email those details to you. Forward that to the police who can get location data from the ISP.
  • Re:Hidden Bomb? (Score:3)

    by szcx (81006) on Wednesday July 25 2001, @07:21AM (#62031)
    I was contracted to write one a few years ago for installation onto all of a company's notebooks. Once a week it had to be reset, or the machine would purge documents and lock out.

  • Well... by Wind_Walker (Score:1) Wednesday July 25 2001, @07:10AM
  • Re:excuse me... by passion (Score:2) Wednesday July 25 2001, @08:18AM
  • Re:Use his stupidity against him... by bluetoad (Score:1) Wednesday July 25 2001, @07:25AM
  • by SuperguyA1 (90398) on Wednesday July 25 2001, @07:21AM (#62035) Homepage
    And if I do find him, do I send the cops, or just my 6-foot-4, 260-lb ex-eastern-block buddy Radek?"

    Given what I know from my own Eastern block friends.
    If you ever want to see your beer again... send the cops:)

  • Re:Bear in mind (Radek) by TheCarp (Score:2) Wednesday July 25 2001, @07:22AM
  • Re:Hidden Bomb? by gfxguy (Score:1) Wednesday July 25 2001, @08:28AM
  • Re:Radek! by Fjord (Score:1) Wednesday July 25 2001, @11:51AM
  • Re:Bear in mind (Cops) by Fjord (Score:2) Wednesday July 25 2001, @07:34AM
  • Re:Bear in mind (Cops) by Fjord (Score:2) Wednesday July 25 2001, @11:54AM
  • Re:Radek! (Score:3)

    by Fjord (99230) on Wednesday July 25 2001, @07:41AM (#62041) Homepage Journal
    What security? Up until a few days ago, there wasn't a virus package that would detect SirCam. Do you expect him to update virus checkers on computers not in his possession? Presumably you don't mean security by disabling the ability to retrieve email, so then what do you mean?

    Note: I do disable VBS files (by associating them with notepad) on my home WinME machine, but this isn't common practice. I do it because many people use my home machine. Disabiling VBS files like this isn't considered "security enablement" in the sense of updating patches and locking down ports.

  • Re:Hidden Bomb? (Score:4)

    by martin-k (99343) on Wednesday July 25 2001, @08:42AM (#62042) Homepage
    I was contracted to write one a few years ago for installation onto all of a company's notebooks. Once a week it had to be reset, or the machine would purge documents and lock out.

    Yeah, I heard about that program. It's called Microsoft Windows.

    -Martin

  • heh, tempting... (Score:3)

    by bencc99 (100555) on Wednesday July 25 2001, @07:18AM (#62043) Homepage
    it'd be tempting to send Radek round, but you've got the problem of finding them in the first place. Get in touch with the police, and get your friends to note down the message headers of the emails. Then with a selection of times and IP's the police should be able to contact the ISP, and find out what phone number the theif is dialling from. Of course, this hinges on the chances of you finding a cop with a clue ;)
  • Re:Hold on a minute... by DangerTenor (Score:1) Wednesday July 25 2001, @07:32AM
  • Re:Hold on a minute... by DangerTenor (Score:1) Wednesday July 25 2001, @08:51AM
  • Re:Hidden Bomb? by Cheshire Cat (Score:1) Wednesday July 25 2001, @07:26AM
  • Re:Use his stupidity against him... by Ethidium (Score:1) Wednesday July 25 2001, @07:27AM
  • Re:Cops can help... by errxn (Score:1) Wednesday July 25 2001, @12:28PM
  • virus by zerocool^ (Score:1) Wednesday July 25 2001, @07:27AM
  • Re:just a thought? by zulux (Score:1) Wednesday July 25 2001, @09:34AM
  • Re:Yes. by swordgeek (Score:2) Wednesday July 25 2001, @12:46PM
  • [COPS}Re:Another approach... by 13013dobbs (Score:2) Wednesday July 25 2001, @07:37AM
  • Re:Contact the isp by 13013dobbs (Score:2) Wednesday July 25 2001, @07:40AM
  • Re:tracking machines by frost22 (Score:1) Wednesday July 25 2001, @07:35AM
  • IP address in mail header by djn (Score:1) Wednesday July 25 2001, @07:14AM
  • This is way easy... by pi_rules (Score:2) Wednesday July 25 2001, @07:41AM
  • Re:Bear in mind (Cops) by markbthomas (Score:1) Wednesday July 25 2001, @07:54AM
  • Re:Trace account, then trace to phone # by SuiteSisterMary (Score:2) Wednesday July 25 2001, @07:56AM
  • Re:Use his stupidity against him... by SuiteSisterMary (Score:2) Wednesday July 25 2001, @08:01AM
  • of course now it won't matter by MousePotato (Score:2) Wednesday July 25 2001, @07:18AM
  • Re:Bear in mind by pallex (Score:2) Wednesday July 25 2001, @07:28AM
  • civil court by Beckman (Score:1) Wednesday July 25 2001, @07:21AM
  • Re:IP address in mail header by Beckman (Score:1) Wednesday July 25 2001, @07:24AM
  • Re:Hidden Bomb? by stungod (Score:1) Wednesday July 25 2001, @12:16PM
  • Nobody ever went broke... by laymusic (Score:1) Wednesday July 25 2001, @07:19AM
  • Hidden radio transmitter instead perhaps? by edunbar93 (Score:1) Wednesday July 25 2001, @11:10AM
  • Bear in mind (Score:4)

    by michaelsimms (141209) on Wednesday July 25 2001, @07:16AM (#62067) Homepage
    It MAY be an innocant person that bought a second hand computer. Id go with the cop method, not the Radek method.
  • Fake contest/prize sting operation by Frank T. Lofaro Jr. (Score:2) Wednesday July 25 2001, @12:18PM
  • Re:Bear in mind (Radek) by Frank T. Lofaro Jr. (Score:2) Wednesday July 25 2001, @12:21PM
  • Re:Bear in mind by Frank T. Lofaro Jr. (Score:2) Wednesday July 25 2001, @12:26PM
  • Im not so sure this will help by king_ (Score:1) Wednesday July 25 2001, @07:19AM
  • Re:Hidden Bomb? by homer_ca (Score:1) Wednesday July 25 2001, @10:06AM
  • Re:simple... and laptop tracking by kochsr (Score:1) Wednesday July 25 2001, @11:39AM
  • Re:what an idiot. by don_carnage (Score:2) Wednesday July 25 2001, @08:16AM
  • Re:you were warned..... by wedg (Score:1) Wednesday July 25 2001, @08:02AM
  • Re:Contact the isp by S.Lemmon (Score:1) Wednesday July 25 2001, @07:52AM
  • About Ztrace by Radium_ (Score:2) Wednesday July 25 2001, @08:22AM
  • Cops can help... by Martin Blank (Score:1) Wednesday July 25 2001, @07:17AM
  • Re:Cops can help... by Martin Blank (Score:1) Wednesday July 25 2001, @10:53AM
  • will be widely used in the future by STREMF (Score:1) Wednesday July 25 2001, @10:52AM
  • Re:Yes. by TotallyUseless (Score:1) Wednesday July 25 2001, @07:47AM
  • Check the headers by Friendly (Score:1) Wednesday July 25 2001, @07:27AM
  • Re:Hidden Bomb? by RedOregon (Score:1) Wednesday July 25 2001, @07:49AM
  • Re:Hidden Bomb? by Kryptonomic (Score:2) Wednesday July 25 2001, @07:34AM
  • Re:Bear in mind by bentini (Score:1) Wednesday July 25 2001, @09:00AM
  • Re:Your ISP?? by IronChef (Score:2) Wednesday July 25 2001, @08:46AM
  • Re:Should be pretty easy. by IronChef (Score:2) Wednesday July 25 2001, @08:52AM
  • Re:Should be pretty easy. by IronChef (Score:2) Wednesday July 25 2001, @10:33AM
  • Re:You sound like PD telling us "comply with robbe by Redbird79 (Score:1) Wednesday July 25 2001, @09:03AM
  • Re:Bear in mind by neo-phyter (Score:1) Wednesday July 25 2001, @08:11AM
  • Lead the cops to his front door by squeegee-me (Score:1) Wednesday July 25 2001, @07:17AM
  • Looking at home.... by squeegee-me (Score:1) Wednesday July 25 2001, @07:23AM
  • Re:Use his stupidity against him... by squeegee-me (Score:1) Wednesday July 25 2001, @07:38AM
  • Re:Bear in mind by sensate_mass (Score:1) Wednesday July 25 2001, @07:59AM
  • Re:Bear in mind (Cops) by daveisoverlord (Score:1) Wednesday July 25 2001, @09:00AM
  • Re:Nope, no open containers by laxian (Score:1) Wednesday July 25 2001, @02:20PM
  • Call Microsoft by Captain Pooh (Score:2) Wednesday July 25 2001, @07:19AM
  • Re:wait a min by WebBug (Score:1) Wednesday July 25 2001, @12:12PM
  • Re:Hidden Bomb? by Mr 44 (Score:1) Wednesday July 25 2001, @09:44AM
  • Another approach... by xjosh (Score:1) Wednesday July 25 2001, @07:27AM
  • Re:Bear in mind by ahrenritter (Score:1) Wednesday July 25 2001, @10:52AM
  • Re:Even easier/quicker by ahrenritter (Score:1) Wednesday July 25 2001, @11:13AM
  • Re:Should be pretty easy. by jdunlevy (Score:1) Wednesday July 25 2001, @07:21AM
  • Maybe through IP by Vain (Score:1) Wednesday July 25 2001, @07:22AM
  • Re:just a thought? by linzeal (Score:1) Wednesday July 25 2001, @07:41AM
  • Re:what an idiot. (Score:3)

    by BluedemonX (198949) on Wednesday July 25 2001, @09:26AM (#62106)
    My wife had her computer stolen - and her old ICQ popped up. Someone traced the computer to an IP and an ISP, and we called the cops.

    Did they act on this? No way.

    The thief was basically handed to the OTTAWA POLICE on a silver platter, but apparently donut eating and beating defenceless women's heads against cars was more important.

    I'd say send Radek, that is if the ISP will tell you who it is...
  • Re:Hidden Bomb? by interstellar_donkey (Score:2) Wednesday July 25 2001, @10:20AM
  • Re:Yes. by 11223 (Score:2) Wednesday July 25 2001, @07:31AM
  • maybe you lost it? by maddogsparky (Score:1) Wednesday July 25 2001, @08:06AM
  • Re:what an idiot. (Score:3)

    by abolith (204863) on Wednesday July 25 2001, @11:29AM (#62110) Homepage
    if your ISP gives you the info, don't bother with the cops, use Radek OR just wait unitl he/she has left the location you compter is residing at and then STEAL IT BACK !! What thief would belive that the Original owner tracked him/her down and did the same thing right back.
    besides if you have home owners insurance you could still collect the value of the computer, then use that cash to upgrade to a better system, or use it to put out a contract on the thiefs head. either way.
  • Your ISP?? (Score:5)

    by QwkHyenA (207573) on Wednesday July 25 2001, @08:12AM (#62111) Homepage
    Odds are good he's using YOUR ISP seeing how you probably checked that 'remember password' box. If that's the case, I'd take a copy of the police report and goto your ISP (assuming it IS your ISP the dude dialed into, which is easily checked by looking at the header of the email message) and talk to management right-a-way!

    If it was one of my local ISP's I'd take about 1 case of beer with you as a small incentive.

  • Re:Hidden Bomb? by TOTKChief (Score:2) Wednesday July 25 2001, @09:20AM
  • Re:Bear in mind (Cops) by feorlen (Score:1) Wednesday July 25 2001, @07:48AM
  • Re:Bear in mind (Radek) by Crizp (Score:1) Wednesday July 25 2001, @07:39AM
  • Re:Bear in mind by SlamMan (Score:2) Wednesday July 25 2001, @07:54AM
  • radek. by gagganator (Score:1) Wednesday July 25 2001, @10:01AM
  • Re:Hidden Bomb? by mike260 (Score:2) Wednesday July 25 2001, @07:32AM
  • better yet (Score:3)

    by unformed (225214) on Wednesday July 25 2001, @07:16AM (#62118)
    Call the BSA
  • Radek for Rent? by Bahamuto (Score:1) Wednesday July 25 2001, @07:13AM
  • DON'T DO THAT!! by canning (Score:1) Wednesday July 25 2001, @07:37AM
  • Re:Radek! by StormRider01 (Score:1) Wednesday July 25 2001, @07:59AM
  • Advice: by gwizah (Score:1) Wednesday July 25 2001, @07:18AM
  • Anyone thought about "who" the theif actually is? by gwizah (Score:1) Wednesday July 25 2001, @07:22AM
  • what an idiot. (Score:5)

    by rigor6969 (240549) on Wednesday July 25 2001, @07:12AM (#62124) Homepage
    all the major isp's now record your DNR phone # per call. Easy to trace via the ip and date and time. You'll need to get the isp and police involved.
  • Re:Bear in mind by DBett (Score:1) Wednesday July 25 2001, @08:13AM
  • Yeah-- we could call it CoJak! by delorean (Score:1) Wednesday July 25 2001, @09:36AM
  • vengance. by bellers (Score:1) Wednesday July 25 2001, @07:12AM
  • NOT Re:Maybe through IP by samjam (Score:1) Wednesday July 25 2001, @08:50AM
  • Some laptops phones home by AdamInParadise (Score:1) Wednesday July 25 2001, @07:17AM
  • Re:Some laptops phones home by AdamInParadise (Score:1) Wednesday July 25 2001, @08:10AM
  • by AdamInParadise (257888) on Wednesday July 25 2001, @07:23AM (#62131) Homepage
    Actually I was quite sure that I've seen some company actually doint that. Here is a story on The Register:
    http://www.theregister.co.uk/content/archive/20026 .html [theregister.co.uk]

    And a link to the company doing it: http://www.ztrace.com/ [ztrace.com]
  • Fuck the police, get some vengence by Ryokos_boytoy (Score:1) Wednesday July 25 2001, @07:25AM
  • Re:What adventure game did you get your sig from by ceesco (Score:1) Wednesday July 25 2001, @07:48AM
  • Re:Yes. by Shoten (Score:2) Wednesday July 25 2001, @08:36AM
  • Re:Yes. by Shoten (Score:2) Wednesday July 25 2001, @09:58AM
  • Yes. (Score:5)

    by Shoten (260439) on Wednesday July 25 2001, @07:22AM (#62136)
    Ok, here's what you do. The emails he's sending contain a few bits of data that are critical. One is the IP address that he is using at the time he sends the email, and the other is the time (according to the mail server; both bits are in the header of the email) at which the mail is sent.

    Get an attorney, and file a "John Doe" lawsuit against the thief...the goal here is to get a lawsuit, so that you can get a subpoena. And who are you subpoena'ing, and for what? The ISP the thief uses, for the logs of the phone number that was connected at that time, and the account information of the owner of that account. Turn that over to the police, and you should be good to go. That information is sufficient (explain it well to them) to get a search warrant and...voila! He's crispy.

    Happy hunting!

  • Re:IP address in mail header by kilgore_47 (Score:2) Wednesday July 25 2001, @07:32AM
  • Re:Cops by kilgore_47 (Score:2) Wednesday July 25 2001, @07:37AM
  • Re:Use his stupidity against him... by kilgore_47 (Score:2) Wednesday July 25 2001, @07:46AM
  • Re:IP address in mail header by kilgore_47 (Score:2) Wednesday July 25 2001, @11:10AM
  • Re:IP address in mail header by kilgore_47 (Score:2) Wednesday July 25 2001, @11:43AM
  • tracking machines by CTho9305 (Score:1) Wednesday July 25 2001, @07:18AM
  • Re:tracking machines by CTho9305 (Score:1) Wednesday July 25 2001, @07:48AM
  • Trace account, then trace to phone # by moosesocks (Score:1) Wednesday July 25 2001, @07:17AM
  • Re:you were warned..... by picoears (Score:1) Wednesday July 25 2001, @08:18AM
  • Re:Hidden Bomb? by cavemanf16 (Score:2) Wednesday July 25 2001, @07:52AM
  • Re:Yes. by blair1q (Score:2) Wednesday July 25 2001, @08:00AM
  • Re:Yes. by blair1q (Score:2) Wednesday July 25 2001, @09:25AM
  • Re:Bear in mind (Cops) by EulerX07 (Score:1) Wednesday July 25 2001, @09:22AM
  • just a thought? by 3am (Score:2) Wednesday July 25 2001, @07:17AM
  • Re:Bear in mind by terrymah (Score:1) Wednesday July 25 2001, @10:12AM
  • Re:Bear in mind by terrymah (Score:1) Wednesday July 25 2001, @10:54AM
  • Re:maybe you lost it? by Dunfall (Score:1) Wednesday July 25 2001, @09:24AM
  • Re:as an IT guy in a stock brokerage... by SumDeusExMachina (Score:1) Wednesday July 25 2001, @12:58PM
  • Re:Cops by Chakat (Score:1) Wednesday July 25 2001, @07:58AM
  • by Chakat (320875) on Wednesday July 25 2001, @07:13AM (#62156) Homepage
    All you should have to do is check the headers and to standard spamcopesque ip tracing. At that point, you have an IP address. Take that info to the ISP the crook is using, and ask for the dialup node log. You'll probably need at the very least a subpoena to get the cid logs, but you should have no problem as long as you can prove that it is coming from your property.

    If you could post the Headers of the offending emails, I'll bet most people here could tell you where the thief is in 5 minutes.

    D - M - C - A

  • Just charge him with the DMCA... by Tricolor Paulista (Score:1) Wednesday July 25 2001, @07:18AM
  • Re:Hold on a minute... by damiam (Score:1) Wednesday July 25 2001, @10:48AM
  • Re:Your ISP?? by bark76 (Score:2) Wednesday July 25 2001, @11:06AM
  • Re:Should be pretty easy. by PW2 (Score:1) Wednesday July 25 2001, @01:47PM
  • Re:Bear in mind by masoncooper (Score:2) Wednesday July 25 2001, @07:50AM
  • Cops by Anixamander (Score:1) Wednesday July 25 2001, @07:15AM
  • wait a min by sgups (Score:1) Wednesday July 25 2001, @11:33AM
  • Re:excuse me... by freerangegeek (Score:1) Wednesday July 25 2001, @12:46PM
  • Re:of course now it won't matter by ArtEnvironment (Score:1) Wednesday July 25 2001, @09:17AM
  • Hold on a minute... by communist rabbi (Score:1) Wednesday July 25 2001, @07:23AM
  • Re:IP address in mail header by jrp2 (Score:1) Wednesday July 25 2001, @09:45AM
  • Re:IP address in mail header by jrp2 (Score:2) Wednesday July 25 2001, @08:41AM
  • Already widely available. by Lordship (Score:1) Wednesday July 25 2001, @10:31AM
  • Re:You sound like PD telling us "comply with robbe by Unknown Bovine Group (Score:2) Wednesday July 25 2001, @08:01AM
  • Re:Cops can help... by Soaponarope123 (Score:1) Wednesday July 25 2001, @07:31AM
  • Re:You sound like PD telling us "comply with robbe by prdugan (Score:1) Wednesday July 25 2001, @08:01AM
  • Lojac for computers by selway (Score:1) Wednesday July 25 2001, @07:24AM
  • Re:Well... by wateronthebrain (Score:1) Wednesday July 25 2001, @07:13AM
  • excuse me... (Score:5)

    by dermotfitz (470733) <dfitzgerald@s[ ] ... m ['cho' in gap]> on Wednesday July 25 2001, @07:13AM (#62175)
    just how will that get your beer back?
  • Re:Hidden Bomb? by jsindell (Score:1) Wednesday July 25 2001, @10:17AM
  • either way... by linsalad (Score:1) Wednesday July 25 2001, @07:27AM
(1) | 2 | 3 | 4