New track-and-snap anti-theft software roams freely...and privately

By Angela Gunn | Published September 26, 2008, 5:01 PM


Download Adeona for Windows 0.2.1a Beta from FileForum now.

A software project from U. of Washington and U. C.-San Diego researchers will make its way to ToorCon next week, and if your laptop should happen to go to that conference without you, you could use this software to see that it makes it there.

Adeona loads code onto your system that periodically updates online servers with the machine's current IP address and traceroute information. That's not new functionality; other products do that too. Adeona's difference -- other than being free and open source -- is that it's concerned from the outset with making sure that your privacy is protected.

The details are in a paper that Thomas Ristenpart, Gabriel Maganis, Arvind Krishnamurthy, and Tadayoshi Kohno presented at this years Usenix conference (PDF available here), but the gist is this: Current tracking systems, because they must continually acquire the machine's data (do yougo out in the morning planning to have your laptop stolen?), also pick up location information even when the machine is with its rightful owner -- and they store it in systems that make it easy to reverse-engineer who the user is and, by extension, what she or he might be doing. Users must then choose between laptop security and location privacy.

In addition, "trust-us" systems, where a single company holds sway over the accumulated data, make people nervous simply because there's no telling what might happen to that information in third-party hands. Third, a really sophisticated thief can alter a stolen machine or even destroy it to keep from getting caught.

In their paper, Adeona's risk-managing creators admit, refreshingly, that a really determined and smart thief is a formidable foe. However, they note, most thieves are anything but knowledgeable, and that location privacy should therefore be taken more seriously by makers of traffic software.

Adeona collects IP address info from the machine at irregular intervals (the better to avoid timed attacks). The software can also gather traceroute info or, for maximum findability, "passive location data" from the nearest Akamai nodes. The data, encrypted, anonymous and unlinkable, is stored in OpenDHT, the public distributed hash table. Adeona handles the encryption in such a way as to keep anyone who doesn't know that laptop's secret cryptographic seed from seeing the data or even examining a cache to reconstruct earlier data; likewise, location updates can't be linked to any sort of unchanging identifier such as a device ID number.

But wait, there's more! Mac users with iSight cameras built into their systems can set the software to take a "mug shot" if the machine senses something's wrong and enters an emergency-broadcast "panic mode." And since the software's open-source, the research team expects more functionality to come along as people work with the program.

The one thing it lacks? A badge. Once you have all that information, there's not much you can do beyond turning the information over to law enforcement -- or, as some have done previously, to the eagle eyes of the Internet.

Comments

View comments by with a score of at least

university of washington?
privacy orientated?
smell a rat?

Score: 0

|

Wow this is cool not bad.

Score: 0

|

Open-source security software ...

Score: 0

|

Is there something wrong with that?
Isn't TrueCrypt open source?

Score: 0

|

...has a lot of people poking at it looking for
problems while closed source just sues anybody
who says "Uh, hey, guys...."

Score: 0

|

The PDF redaction problem: TSA may have been using old software

Betanews tests and research reveals that if the Transportation Security Administration was using modern software, it might not have a security issue now.

Google Maps doesn't prevent car accidents, only search accidents

This week, Google updated Maps for Android 3.3.1, adding topography, nearby points of interest, and error reporting.

The $1 DVD rental debate: LA group says Redbox will lose movie makers $1B

A report from the Los Angeles Economic Development Corporation says cheap Redbox DVD rentals could seriously damage the movie business.

After telling US to mind its own business, Kroes slaps caps on Rambus royalties

The holder of many patents worldwide pertaining to DDR memory offered to reduce its royalty stake in that technology, and today the EU said yes.

Third-party mobile browsers Skyfire and Bolt give Opera a run for its money

Opera may be the biggest name in third party mobile browsers, but Skyfire and Bolt are charging forth with compelling updates.

In a peace offering to newspapers, Google offers a new news format

It's probably not a solution to the woes of major news publishers, but Living Stories may gather a few of those publishers together in search of one.

DOJ: Microsoft interop docs are now 'substantially complete'

A major milestone in the US Government's oversight of Microsoft is passed, as the Justice Dept. is now saying the company's protocol documents make sense.

First impressions of Droid: Easy, breezy, friendly, if a little fat

Though it's not quite as well-polished as Apple's iPhone OS, the version of Android that Motorola's Droid phone sports is still a breeze to use.

EC's Kroes to US senators: Mind your own business on Oracle + Sun

UPDATED The EU's antitrust chief told the United States Senate Tuesday that any merger that takes place in the world is more her affair than theirs.

Betanews Podcast: Rupert Murdoch and the buying stuff online problem

We'll have a more difficult time paying for online news if the underlying protocol for online payment has a big gaping hole in it.

Windows fix for TLS security bug still forthcoming, won't be Tuesday

Anyone looking for a fix for last month's discovery of a potentially serious security hole in TLS and SSL may have to wait until everyone is ready to act together.