Tracking Down a Cell Phone Thief 254
Zone-MR writes "Last Saturday, MoDaCo (the world's largest smartphone community) held a get-together for their forum members. Unfortunately the positive community spirit was soured by an individual who decided to steal one of the charity raffle prizes - a C550 mobile phone. Check out the story of how we tracked the thief down, got the phone back, and secured the thief's place in the interweb's hall-of-shame."
Interweb? (Score:3, Funny)
Re:Interweb? (Score:5, Funny)
Re:Interweb? (Score:3, Informative)
Re:Interweb? (Score:5, Funny)
Nope. Wikipedia disagrees. But mentions Intarweb as an alternate spelling. http://en.wikipedia.org/wiki/Interweb [wikipedia.org]
You must be fun at parties.
Innerwha? (Score:3, Funny)
Re:Interweb? (Score:2, Funny)
Re:Interweb? (Score:2)
Among other things, the dad says: "I want to be surfing up the email and webbed up to net pages and such."
Re:Interweb? (Score:2)
Who says Interweb? (Score:3, Funny)
Re:Interweb? (Score:2)
Why would you do it? (Score:5, Insightful)
Happened to me (Score:3, Interesting)
I went to the campus police and filed a report. They said they'll get their detective to work on it later that day. I fought it was just a waste of time at first but then I slowly realized how stupid it is to steal a cell phone. Any call from that phone can be traced by the phone company. And sure enough that evening the police
Re:Happened to me (Score:2)
Pardon me for being ignorant but how can you check someones court records? Isn't that private info?
Re:Happened to me (Score:3, Insightful)
Now in most states (not in Ohio, Hamilton county yet), there are companies that will compile and publish the records online for a fee. Some counties just publish it themselves. It is always fun to check out your professors' or co-worker's traffic tickets and other run-ins with the law.
Re:Happened to me (Score:5, Funny)
"This is the Cincinnati Police. This is a stolen phone."
"Cincinnati Bell Telephone Theft Tracking Services - LAST CELL TOWER CONTACTED: #28302"
"THEFT NOTICE: ALL CALLS ARE MONITORED AND RECORDED"
And so forth... The next day she got it back before her first class started. It passed through six hands all with the note: "Return this to Sadie XXXXXXX"
Re:Happened to me (Score:2)
Re:Happened to me (Score:3, Insightful)
Re:Happened to me (Score:2, Insightful)
Re:Happened to me (Score:2)
Yes but this is only valid for GSM phones. With CDMA phones there is no SIM card. This is the thing that makes changing a CDMA phone complicated, since you have to call up to transfer the account, and I know that phone company support lines have a great reputation
Re:Happened to me (Score:3, Informative)
yes, I know it totally bites. but in the states, cingular and t-mobile are gsm.
Re:Happened to me (Score:2)
Re:Happened to me (Score:2)
Re:Why would you do it? (Score:2)
Re:Why would you do it? (Score:2)
Re:Why would you do it? (Score:2)
Re:Why would you do it? (Score:2, Interesting)
Let me guess, you live in the suburbs? You see homeless people on a irregular basis. I live and work downtown every day I have people ask me for money, then you see them later that day drinking booze or passed out in some sort of puddle. Then there are the aggressive hobos
Fantastic (Score:2)
Oh how I wish I could moderate in pairs (Score:2)
How I wish they could stay together forever!
Re:Fantastic (Score:2)
To clarify: a side effect of using a foreign SIM, hence a foreign network, that evidently doesn't check the UK EMEI blacklist.
I would have hoped there would be an international/european database by now with all the expensive hand held hardware floating about, but I guess not.
text of the article (Score:4, Informative)
Last Saturday, MoDaCo (the world's largest smartphone community) held a get-together for their forum members. Unfortunately the positive community spirit was soured by an individual who decided to steal one of the charity raffle prizes - a C550 mobile phone.
On Monday, Paul O'Brien (MoDaCo founder) contacted me with information on the stolen phone's IMEI number. I operate the SPV-Developers community which offers the free online SPV-Services unlock tool for this type of phone. It seemed likely that the thief would attempt to remove the SIMLock using this service in order to switch the phone to a non-UK network - bypassing the UK's IMEI blacklist which renders stolen phones useless.
Initially it seemed like there was little I could do to help. The SPV-Services server was not programmed to log the IMEI numbers of it's users. It seemed like a dead end, until I remembered something. When a user unlocks their phone, our server keeps a backup of the phone's first flash block (kept for a few days, in case the changes need to be reversed). This block contains 64kB of RSA-encrypted data such as the phone's SIMLock state, Carrier ID, and other concealed information - it seemed likely the IMEI would be buried within it. Shortly my suspicion was confirmed - after decrypting the block, the IMEI can be found inside (albeit scrambled with a simple transposition).
I started writing a short script - which would check each backup in turn to see if it originated from the stolen phone. After 30 minutes of writing, testing, and running the script - we had a match! The stolen phone had been unlocked. The creation timestamp on the backup file gave us an exact time - August 21, 2005, 10:18:32 PM.
The next step was cross-referencing this information with our web server logs. When a user uses our software to unlock their phone the software uploads the encrypted block to our server, which sends back a list of modifications which need to be made in order to remove the SIMLock. As we knew the exact time when this happened, we could find the corresponding web server entry :
2005-08-21 22:18:32 POST
Bingo! I passed this IP address back to Paul who cross-referenced it with Modaco's database. From this, he was able to identify the guilty member. A quick lookup confirmed that the IP was used by the account "Cocky" - a member which had attended the get-together. The event registrations contained the name of our theif, and his mobile number. The next day, Cocky (AKA Krassen P.) received a short phone call:
Paul: Hi, this is Paul from MoDaCo.
Cocky: Er, Hi.
Paul: You have something of mine, and I want it back.
Not surprisingly, Paul could hear the faint sound of the guy crapping himself at the other end of the line. The phone was returned, via special delivery, the following day. Moral of the story - even if you're enough of a cunt to steal from a charity raffle, don't be fucktarded enough to steal a phone from a community of phone experts.
Re:text of the article (Score:5, Informative)
Detailed Account [modaco.com]
Mono, Orange and Microsoft arrived early, and set out all of the stuff for the event... including the raffle prizes. The prizes were, foolishly it seems, laid out in the corner... footballs, kites, goodies and an SPV C550!
We are not entirely sure at which point the phone was stolen... but a number of people witnessed what appeared to be the C550 being wrapped in a cardigan and placed in a bag along with a couple of other items including an Orange football, and a kite that was apparently discarded.
At some point, probably prior to the raffle, the thief or his companion probably left the building, and took the C550 somewhere for safe keeping.
As those present at the event will know, when the theft was discovered, Monolithix (who should be commended for staying calm!) offered the thief every opportunity to return the phone with no comeback, pointing out the phone would be useless anyway as it would be blocked on all UK networks... but nobody came forward. Having spoken to 'cocky', he said he was afraid to come forward.
At this point, there was not a lot more we could do... we liaised with the staff at the Microsoft building, and determined that although there was no CCTV in the room, there was CCTV in the foyer.
On the following Monday, I contacted Orange to ask for the IMEI of the stolen phone so that we could conduct investigations, which Orange duly provided. I also investigated whether we could determine whether the stolen phone had been used with an Orange SIM (99% necessary if the thief unlocks the phone), and Orange confirmed that they could do this, albeit with a 1 week delay. This provided us with one possible avenue... although for Data Protection reasons, pursuing this route would have required the action to be taken with the Police.
I considered it very likely that the thief would have tried to unlock the phone... so armed with the IMEI of the stolen phone... I contacted the key players in the C550 unlock scene, Florin from IMEI-check and zone-mr from SPV-Developers.
Florin confirmed that the phone had not been unlocked with IMEI-check... however zone-mr couldn't confirm immediately, as he only retains an temporary backup of encrypted data from the phone, which he wasn't sure included the IMEI
A couple of hours later, on Monday evening, zone-mr contacted me to let me know he WAS storing the IMEI... and we had a match! Our thief HAD unlocked his C550... at 10:30pm on Saturday in fact! Even better news... careful analysis of the server logs on the spv-developers unlock server gave us the IP address of our thief!
The next step was to find out as much information as possible about the thief. We determined their ISP and some other information, and thought about how to proceed. On an off chance that the thief was foolish enough to unlock the phone from the same connection they used to browse MoDaCo... I checked out the MoDaCo logs, and the MoDaCo sessions table.
Success!
Our thief was logged on, and the logs were full of the IP address in question... all pointing to one user.... COCKY!
Cross matching this address with the Event registration list confirmed that cocky HAD attended the event... and not only that... upon further consultation we determined that cocky was the person that witnesses had cast suspicion on.
The next step was how to decide how to proceed, armed with the evidence that we were sure conclusively led us to our thief. I stayed up late on Monday night and prepared a dossier of evidence, with excerpts from server logs, witness statements etc. to pass to the Police. After a late night... I decided to sleep on it before deciding how to proceed.
Tuesday came, and I decided that I was going to contact the Police... and spoke to both our contacts at Orange, and a contact at Orange security, about how to proceed. As the morning prog
Re:text of the article (Score:5, Informative)
From http://en.wikipedia.org/wiki/Cunt [wikipedia.org] : "In British usage it is mainly directed at men, and is considered an insulting swear word."
I feel sorry for all of the people in your life, you probably have some of them fooled into thinking that you're not a judgmental ass.
Re:Usage of female genitalia as a term of abuse. (Score:2)
I've carefully considered the usage of the word "cunt" as an insult, along with the other insult "pussy." Both have negative connotations for something that should not have them. There is no good reason why the word "cunt" should be an insult.
Therefore, I've concluded that we should start from scratch with a new word for female genitalia that has not been spoilt. Furthermore, in order to prevent this word being appropriated, I believe it should be something that could not be used as an insult.
I have
Re:text of the article (Score:3, Insightful)
Mod me down by all means, I guess we don't really need this kind of discussion in a phone article.
some good detective work... (Score:5, Interesting)
While some good detective work was done by the MoDaCo admin(s?), a lot of thanks can be given to chance, because the cultprit was stupid enough to unlock his phone a) from a source well known to MoDaCo and b) from the same IP address. I'm calling it 25% good sleuthing, 75% dumb criminal.
Re:some good detective work... (Score:4, Insightful)
Re:some good detective work... (Score:5, Insightful)
Sure there are some good, and thus rich criminals out there. But the majority of them are fairly dumb.
Re:some good detective work... (Score:2)
Re:some good detective work... (Score:2, Insightful)
Re:some good detective work... (Score:2)
Re:some good detective work... (Score:2)
Do you have any numbers to back that up? I regularly see this claim, and for the life of me I cannot figure out where people pull these numbers from.
If a criminal is never caught because he is smart enough to evade detection, how can his existence even be measured? Heck, perhaps 90% of all criminals are geniuses and we just don't know it.
I think the "smart people can usually fi
Re:some good detective work... (Score:2)
Please allow me to clarify- I should have said, most crimes that are solved are solved because the criminal does something stupid.
Unfortunately, much crime is not solved:
Keep in mind that cleared means "solved". This is from 2000
(http://www.fbi.gov/pressrel/pressrel01/cius2000. h tm [fbi.gov])
Index Crime Clearances * Law enforcement agencies nationwide reported a 20.5-percent Crime Index offense clearance rate for 2000. The
Re:some good detective work... (Score:3, Insightful)
Yup, the majority of people who find themselves in the "life of crime" don't do it because they're criminal masterminds looking to build their great underground lair, but because they're dumbasses who fall into the "lowest common denominator" of how to survive in a world with no marketable skills and few personal assets. Of course there are a lot more that do it to support drug habits and such.
N.
Re:some good detective work... (Score:5, Funny)
Re:some good detective work... (Score:2, Funny)
"You mean to tell me that real police officers can't zoom in on footage taken from a $5 security camera and enhance it enough to read the room number off the keycard in someones hand?"
...including looking around the back if the card is flipped over.
Re:some good detective work... (Score:3, Interesting)
I always assumed this is done
Re:some good detective work... (Score:4, Interesting)
Re:some good detective work... (Score:2)
Re:some good detective work... (Score:2)
There are many nearly perfect crimes that are solved due to one single clue... like leaving residue of specialty clay used to make masks when there is only one theatrical shop worldwide that makes and sells that specific mix, something the criminals did not know beforehand.
But... never steal a camera phone (Score:5, Funny)
http://www.longislandpress.com/bb/viewtopic.php?p
can you say misogyny? (Score:2)
"...even if you're enough of a cunt to steal from a charity raffle,..."
uhm... and why is it geeks don't get laid?
Re:can you say misogyny? (Score:5, Informative)
noun (vulgar slang) 1. a woman's genitals. 2. an unpleasant or stupid person.
You've obviously never heard UKers insult someone before.
Re:can you say misogyny? (Score:2)
252 occurrences of "cunt" found.
Yes, I'm an old school quaker.
Re:can you say misogyny? (Score:2, Informative)
Re:can you say misogyny? (Score:2)
The same is true of using "dick" or "prick" as an insult, of course - there's the same implication about a man's genitalia.
However, the word's use is so common that it's true origins as an insult really don't matter any more. I don't see anything misogynist about calling someone a cunt, just as
Re:can you say misogyny? (Score:2)
Maybe this is true where you live, but it is VERY rare in the circles I socialize and work in. Seriously, this is the only swear word I know that will actually offend many of the people I know. (Most of these people are not exactly thrilled about "dick" either, and will usually only use it to make fun of certain US political figures.) I understand that UK speakers are using it differently. Still, it mi
Re:can you say misogyny? (Score:2)
Re: (Score:2)
Maybe they should send the perp... (Score:3)
Re:Uh (Score:2)
And I would have gotten away with it (Score:5, Funny)
+1 Funny (Score:2)
Re:And I would have gotten away with it (Score:2, Funny)
Good thing this was in the UK... (Score:4, Insightful)
Re:Good thing this was in the UK... (Score:3, Informative)
No, because the encryption is not for the purpose of controlling access to copyrighted material. DMCA is about copyright, not encryption.
The rat speaks (Score:5, Interesting)
http://www.modaco.com/Event_pictures_and_a_plea_-
What an idiot.
Re:The rat speaks (Score:2, Informative)
http://www.modaco.com/MoDaCo_Summer_Event_2005_C55 0_theft_SOLVED_-t227175.html [modaco.com]
Excerpt:
Me: Hi, this is Paul from MoDaCo.
Cocky: Er, Hi.
Me: You have something of mine, and I want it back.
Cocky: So what do we do now?
Me: Do you still have the phone? Have you sold it?
Cocky: I still have it - minus the box. What are you going to do?
Me: I'm giving you one chance... send me the phone, via Special Delivery,
Re:The rat speaks (Score:2)
excerpt:
My reply would have been:
ok, now its $600 plus my phone back, or its prison time for you. any more questions?
Howard forums are MUCH larger than modaco (Score:2, Informative)
Howard forums are MUCH larger than modaco, re: smartphones. See for yourself.
http://smartphone.modaco.com/index.php [modaco.com]
has:
414 user(s) active in the past 30 minutes
379 guests, 35 members 0 anonymous members
while
http://howardforums.com/ [howardforums.com]
has:
Currently Active Users: 3410 (1128 members and 2282 guests)
This 7+ minute wait between replys is excessive. I'll contact my councilwoman... when she gets back from her vacation.
Not exactly the same thing (Score:2)
Re:Not exactly the same thing (Score:2)
35members members interested enough in microsoft phones, 1128 members interested in smartphones generally.
Looks like despite the trendy hiphop style on modaco foru,, microsoft is still uninteresting and boring.
Bill Engvall would be proud (Score:3, Funny)
HERE'S YOUR SIGN
whats up with this dossier crap? (Score:2)
I mean look blair did it, the idiot who lost his phone did it...
dossier this dossier that, if you call me names i'm going to make a dossier on you and present it somewhere of little importance
get over it already!
Arash
Re:whats up with this dossier crap? (Score:2)
"In the BBC2 Top Gear programme, two of the presenters use this word frequently when mentioning their website. This is partly to do with their own personas, pretending to be reactionary in a self-mocking way - which is why they also describe a particular mp3 player as an 'ipp-odd' - but is also part of a more general English character trait of pretending to know less than you really do."
Do what?
Re:whats up with this dossier crap? (Score:2)
Department of Homeland Security Response (Score:4, Funny)
Anyone seen using a cellphone in a dark corner or putting a cellphone in an inside pocket (trying to conceal it!) will be immediately taken in for questioning.
Henceforth, all cellphone usage will require a licence at the county courthouse, and people must submit valid reasons for having one, and give their fingerprints and DNA for registration.
As a detective friend once told me... (Score:2)
Re:Heartwarming (Score:2)
Re:Set a Thief To Catch a Thief (Score:5, Insightful)
The only "personal info" they found was the IMEI (serial number) of the phone that was unlocked, and the IP address that the request was generated from. Neither of which is "personal", BTW (the phone was stolen, and the IP address belongs to his ISP).
They just matched that IP address against people who post in their usergroup forum and tracked the guy down.
So the only "personal info" they used was the phone's serial number and the IP address the server logged the request coming from. So I fail to see the point of your rant.
N.
Re:Set a Thief To Catch a Thief (Score:3, Interesting)
Re:Set a Thief To Catch a Thief (Score:2)
At least that's the system that people exp
Re:Set a Thief To Catch a Thief (Score:2)
So, the lesson to be learned is to not send anything to a third party that you want kept private. At least, not unless that third party is bound by law or policy to keep your information private.
If the investigators in
Re:Set a Thief To Catch a Thief (Score:2)
Again: the unacceptable breach of privacy in this case is that of everyone else whose personal info was first cracked, then searched, while looking for the thief. There's a reason police need warrants issued by a judge on real evidence before they c
Re:Set a Thief To Catch a Thief (Score:2)
Re:Set a Thief To Catch a Thief (Score:2)
Thanks for patiently maintaining your position,
Re:Set a Thief To Catch a Thief (Score:2)
Re:Set a Thief To Catch a Thief (Score:2)
Re:Set a Thief To Catch a Thief (Score:2)
Re:Set a Thief To Catch a Thief (Score:2)
Unless you don't unde
Re:Set a Thief To Catch a Thief (Score:2)
However, having known about server logs, etc, I think this is a good thing to have happen. Let some punk kid get really embarassed, no real harm done. Not like some company files 10,000+ John Doe su
Re:Set a Thief To Catch a Thief (Score:2)
Re:Violated the thief's freedoms (Score:2, Insightful)
The guy goes and decrypts a bunch of info from everyone's phone using a script.
So, he violated everyone else's privacy as well.
Never mind the fact that he took info from a web server and told someone else another user's IP addy to 'track them down'.
Probably violated his own website's privacy statement.
Re:Violated the thief's freedoms (Score:2)
Oh, and you should learn the definition of hypocrite as well a
Link to MoDaCo's forum rules about privacy. (Score:2, Informative)
"You agree, through your use of this service, that you will not use MoDaCo to post any material which is knowingly false and/or defamatory, inaccurate, abusive, vulgar, hateful, harassing, obscene, profane, sexually oriented, threatening, invasive of a person's privacy , or otherwise violative of any law. "
I prefer: (Score:2)
Re:A rule on cell phones (Score:2)
This has little to do with "poorer countries".
Phone companies make a profit from the stealing of cell phones. It would be foolish to try to combat it (at the cost of maintaining some blacklist server). A stolen phone needs replacement, and the stolen phone is put on the network by someone else, bringing in revenue.
They only setup a blacklisting system when they are somehow forced into it, and they get some guarantee that all competitors will get one as well
Re:A rule on cell phones (Score:2)
*cough* bullshit. Phone companies do not make a profit from the stealing of a phone. They lose money on it. The price of new phones is artificially deflated, because the phone companies subsidize the purchase. You ever wonder why you pay twic
Re:A rule on cell phones (Score:2)
When your phone is stolen, you don't get a new phone for that same price. You have to pay the full price or else you will be paying out the contract term for your original subscription.
So, the operator is not going to lose a dime on this new phone, and the store will make its usual profits on selling equipment.
The only one losing here is the customer.
Re:You are missing the real issue. These guys are (Score:5, Informative)
We have repeatedly stated that we keep a TEMPORARY backup of the flash block we change - generally as a precaution in case we screw something up and need to restore the phone.
Re:hahah! (Score:2)