School officials in Pennsylvania who admit remotely activating webcams to locate missing laptops could have used far less intrusive methods of finding the machines, such as GPS tracking or “call home” systems, technology and privacy experts say.
Instead, the Lower Merion School District finds itself defending a potential class-action lawsuit after a student complained of being photographed inside his home and accused of selling drugs.
The FBI also is investigating the school district for possible wiretap and computer-use violations.
“The issues raised by these allegations are wide-ranging and involve the meeting of the new world of cyberspace with that of physical space. Our focus will … be on whether anyone committed any crimes,” U.S. Attorney Michael Levy said Feb. 22, taking the unusual step of confirming the FBI and Justice Department investigation.
While pledging to cooperate with any criminal probe, lawyers for the district also appeared in court for the first time in the civil case on Feb. 22, negotiating an agreement aimed at preserving computer evidence. The district agreed not to destroy any evidence that might be found on its servers or on the nearly 2,300 laptops issued to students at its two high schools.
Harriton High School student Blake Robbins and his family hope to learn “whether there were systematic violations or whether this is an isolated instance,” according to their lawyer, Mark Haltzman.
The district activated the webcams after 42 laptops disappeared in the past 14 months. Eighteen were located, district spokesman Doug Young said. He did not immediately know whether any were found in students’ homes as a result of the district’s action.
Either way, technology and privacy experts agree that GPS, “call home,” and other location-tracking software offers better results without raising privacy concerns.
“There are less intrusive ways to track stolen laptops, no question about it,” said Marc Rotenberg, a Georgetown University law professor who serves as president of the Electronic Privacy Information Center in Washington, D.C.
The company that owns the LANrev remote-activation software allegedly used by Lower Merion no longer promotes its use for anti-theft purposes.
“Webcam pictures are not useful in tracking down the culprit,” said Stephen Midgely, vice president of global marketing for Absolute Software, which recently bought the LANrev software. The user in the picture is often not the person who stole the computer, and the photos are usually inadmissible in court, he said.
Nonetheless, a Lower Merion network technician marveled at LANrev’s theft-tracking potential in a May 2008 MacEnterprise.org webcast.
“Fantastic feature—I can’t speak highly enough of it,” network technician Michael Perbix said, describing how the system could not only provide network address data to help police track down a missing machine but also send back screen shots and pictures from the built-in camera at regular intervals.
Perbix said he had once used the feature to try to locate laptops mistakenly thought to be missing. “By the time we found out they were back, I had to turn the tracking off and I had a good 20 snapshots of the teacher and students using the machines in the classroom,” he said.