Tuesday, July 7, 2015

Find My Mac: Good Idea, Incomplete Execution

In IT, stolen hardware is a fact of life. Laptops walk out the door. It happens in offices, coffee shops, airports, and cars. So when Apple extended its Find My iPhone feature to the Mac platform through iCloud, it should have been a meaningful step forward. The problem is that on the Mac side, it falls well short of what it could and should be.

Here is why this matters. The Activation Lock feature Apple introduced for iPhones has produced measurable results. A New York City Police Department report from October 2014 showed that iPhone thefts dropped 19% and grand larcenies involving Apple devices dropped 29% after Activation Lock launched. CNET reported shortly after that stolen iPhone volumes dropped 25% in New York, 40% in San Francisco, and 50% in London in the twelve months following the feature's introduction. Those are not small numbers. The feature works.

So why does the Mac version not work the same way?

Find My Mac exists, but it has a fundamental weakness: wiping the machine defeats it entirely. A thief who knows what they are doing can erase the drive, reinstall the operating system, and the device has no memory of who it belonged to. The serial number to iCloud account association disappears. The machine becomes anonymous.

That does not have to be the case, and fixing it does not require a dramatic rethinking of how Macs work.

Every Mac periodically checks for software updates. That is already built in. Why could that check-in process not also include a reference back to iCloud to verify whether the device's serial number is associated with an account? If it is, and the machine has been wiped and a new iCloud account is being added, the system could simply respond: this Mac is already registered to another account. Just like an iPhone. Just like an iPad.

The responsibility chain would mirror what already exists in the iOS world. If you are selling a Mac, you remove the activation lock before handing it over. If you are buying one, you verify the lock is clear before completing the purchase. Simple, familiar, and already proven to reduce theft.

The serial number is permanent. The iCloud association does not have to disappear just because someone reformatted the drive. Keeping that link intact across a wipe is technically achievable, and the real-world impact on theft rates would likely mirror what we have already seen on iOS.

Apple has built the foundation. The logic for how this should work is straightforward. The data showing it would make a difference is already there.

Apple, if you are hiring, I am available.

Today, the world feels a little quieter, a little dimmer.

We knew this day would come, but we held onto the hope that there would be more time. John Michael "Ozzy" Osbourne—our beloved Pri...