{"id":11,"date":"2014-09-01T23:36:00","date_gmt":"2014-09-01T23:36:00","guid":{"rendered":"http:\/\/www.appledomination.co.za\/index.php\/2014\/09\/01\/review-undercover-bad-news-for-mac\/"},"modified":"2015-08-10T16:33:00","modified_gmt":"2015-08-10T16:33:00","slug":"review-undercover-bad-news-for-mac","status":"publish","type":"post","link":"http:\/\/www.appledomination.co.za\/index.php\/2014\/09\/01\/review-undercover-bad-news-for-mac\/","title":{"rendered":"[Review] Undercover – Bad news for Mac Thieves"},"content":{"rendered":"
\n<\/a>Undercover was easily one of the best pieces of software that I have had the privilege of reviewing for 2014!
\nLike any good Apple user, you probably have Find my Mac (Find my iPhone, you know what I mean) enabled, and hope to heck that you will never need to use it.<\/p>\n

Touch wood though, should that day ever come, will it be enough to get your own back?<\/p>\n

While I have the utmost respect for Apple’s native software and services, this is clearly a tool that is playing in a league of its own. 
\nFmM feels like a lonely peg-leg pirate at a square-dance competition.<\/p>\n

So, once you head over to Undercover’s<\/a> website, you will be presented with an option to Try or Buy.<\/p>\n

While I recommend this software 110%, and urge you not to even bother with the trial and just go and buy it outright, I do get it. <\/p>\n

Press the Try button and get the process started. This will get you going with a 7-day trial.<\/p>\n

When you select the Try<\/a> option, you will be required to enter an email address.
\nDo it! There’s no getting the trial without it, as your email address becomes your username.<\/p>\n

You will receive an email with simple instructions, asking you to select a link that will take you to the UndercoverHQ<\/a> dashboard and force you to select a new password.<\/p>\n

\nThat’s it, you are ready to get to the good stuff!<\/p>\n

\nIn the dashboard, you are presented with a side panel and a menu bar.<\/p>\n

\n<\/a><\/div>\n
\n<\/div>\n

\nIn the side bar, you will see any and all Macs that you have enlisted for protection, and the menu bar will be specific to each machine you select.<\/p>\n

Since you have no Macs enrolled just yet, you can tap on the huge option called “Add your Mac”.
\nOnce selected, you will see 2 important items.<\/p>\n

    \n
  1. The link to download the pkg installer for version 6<\/li>\n
  2. How many Macs you can still enrol under your registered licensing option<\/li>\n
      \n
    1. For now it will be 1 \ud83d\ude42<\/li>\n<\/ol>\n<\/ol>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \nHit the download Link and install the magical software.<\/div>\n
      \nIt’s just a normal installer, but there is a bit of voodoo in the background.<\/div>\n
      \nFor instance, it doesn’t actually install an app, and it most definitely does not install a System Preference pane either. “So what does it do then” I hear you ask?<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \nFirst, it installs a Launch Agent in \/Library\/LaunchAgents<\/i> called com.orbicule.ucagent.plist<\/u><\/div>\n
      \nThen it installs a Launch Daemon in \/Library\/LaunchDaemon<\/i> called com.orbicule.uc.plist<\/i><\/div>\n
      \nAnd finally, the payload. It installs a folder called UC inside of \/usr\/local<\/i> . This is where the actual agent is located.<\/div>\n
      \n(These locations are great for when\/if it ever comes time to uninstall)<\/div>\n
      \n<\/div>\n
      \nAfter you install the agent, reboot the Mac and voila! Your Mac is now registered within your UndercoverHQ dashboard.<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nWithout doing anything further, you will be on the INFO tab on top of the page.<\/div>\n

      <\/p>\n

      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \n<\/a>Here you will see 3 sections, including the basic information about your Mac, any recent activity logged and what the current status of the Mac is (Stolen or not)<\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nSo without further stalling, what can Undercover do exactly?<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nIf that day every comes that your machine gets misplaced within the hands that are not your own,  first things first, head to the THEFT REPORT tab.<\/div>\n
      \n<\/div>\n
      \nHere is the all-important button, Report Stolen<\/i>.<\/div>\n
      \n<\/div>\n
      \nThis puts the Mac into Stolen mode, and kicks in all the various services to begin the hunt to get your own back.<\/div>\n
      \n<\/div>\n
      \nThis not only puts it into Stolen mode, but it actually generates an official-looking theft report.<\/div>\n
      \nThe moment you put your machine into stolen mode, an email is generated informing you of the state of the Machine too, i.e. Stolen.<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nYou can then tap on the button to set the Police Contact Details<\/i> for this case.<\/div>\n
      \n<\/div>\n
      \nWhile this actually works in the USA, unfortunately SAPS does not play well with these auto-generated black-magic self-proclaimed police reports. They want to do it their own way, the hard way.<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nWith or without the Police contact details, you will be able to generate your theft report, and download a package with all the little goodies that Undercover has been collecting since your machine was marked as stolen.<\/div>\n
      \n<\/div>\n
      \nWhen you download your package (no snickering please, we’re all grown-ups here) it will include amongst other things, a PDF report with as much detail as you could hope for, for an official investigation.<\/div>\n
      \n<\/div>\n
      \nSo, what are these goodies that Undercover collects for you, to bust your perpetrator in the act?<\/div>\n
      \n<\/div>\n
      \nHead over to LOCATION.<\/div>\n
      \n<\/div>\n
      \nThe obvious thing to expect here is the current location of your stolen device.<\/div>\n
      \nBut Find my Mac can also do that?<\/div>\n
      \nBut what FmM cannot do, is scrub the timeline at the bottom of the screen, to see the history of locations since your machine was put into Stolen mode.<\/div>\n
      \nThe location is transmitted every 30 minutes.<\/div>\n
      \n<\/div>\n
      \nI feel like Nifty Points +1<\/b> is in order here.<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \nWhen you tap on your location marker, it will show you the GPS coordinates, the internal AND external IP addresses, as well as the network name that it is connected to.<\/div>\n
      \n<\/div>\n
      \nNifty Points +1 <\/b>anyone?<\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nNow that we know where the master-douche is hanging out, let’s take a look as to who exactly is behind this dastardly crime.<\/div>\n
      \n<\/div>\n
      \nTap on PHOTOS.<\/div>\n
      \n<\/div>\n
      \nThe built-in iSight camera will take a selfie every 8 minutes, hopefully catching the perp in the act, or at least enough to catch his\/her mug.<\/div>\n
      \n<\/div>\n
      \nIf you would like to see a photo within the 8-minute window, just tap on take photo <\/i>for instant selfies. <\/div>\n
      \n<\/div>\n
      \nThe only cue is the green light on the camera, which is so quick, it is often missed.<\/div>\n
      \nI don’t recall FmM taking photos?<\/div>\n
      \n<\/div>\n
      \nNifty Points +1<\/b> indeed.<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \nWant to see what the bad guy\/girl is up to?<\/div>\n
      \n<\/div>\n
      \nHead over to SCREEN SHOTS.<\/div>\n
      \n<\/div>\n
      \nWhile you know it can’t be good, whatever it is they are doing, at least this way you will be able to see if they are after something super-specific, like data-espionage or simply looking for some juicy photos.<\/div>\n
      \nScreenshots, like photos, take place every 8 minutes.<\/div>\n
      \nBut these screenshots leave no visual cues behind, like the photos.<\/div>\n
      \n<\/div>\n
      \nWhile unnecessary, we are definitely adding this feature to the Nifty pile.<\/div>\n
      \n<\/div>\n
      \nNifty Points +1<\/b><\/div>\n
      \n
      <\/b><\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nNot only can you see the screens that they are working on, but you will also be able to see physically what they are typing, character for character.<\/div>\n
      \n<\/div>\n
      \nEvery single little things gets logged under the KEY LOGS section.<\/div>\n
      \n<\/div>\n
      \nWell, all except for usernames and passwords!<\/div>\n
      \n<\/div>\n
      \nThis puts even my mind at rest.<\/div>\n
      \nThis means the good folks at Undercover won’t be able to get into my sensitive accounts, and neither will the feds. (Apart from the 128-bit encryption between your machine and the mothership of course)<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n
      \n<\/div>\n
      \nAt the bottom of the screen, you will be able to filter the Key logs according to apps, as well as text typed<\/i> versus text highlighted<\/i>.<\/div>\n
      \nInteresting choices.<\/div>\n
      \n<\/div>\n
      \nKey logs are recorded continuously. No time intervals for this one.<\/div>\n
      \n<\/div>\n
      \nNifty Points +1<\/b> for sure!<\/div>\n
      \n<\/div>\n
      \n<\/a><\/div>\n
      \n<\/div>\n

      \nSo now that you know everything about the person that has mistakenly taken your laptop and is mistakenly trying to log into your internet banking sites, what else does Undercover provide yo with.<\/p>\n

      Well you have a PRIVACY tab on top for, wait for it, privacy settings.<\/p>\n

      Basically, do you want Undercover to be taking photos, logging key strokes, snapping screens and locations ALL the time, or only when Stolen?
      \nI think we all have the same answer here…only when stolen please!<\/p>\n

      No nifty points, but critical nonetheless.<\/p>\n

      <\/p>\n

      \n<\/a><\/div>\n

      Oh yeah, then there’s PLAN B. My fav!<\/p>\n

      Plan B is taking the perp-tracking tool to a new level.<\/p>\n

      <\/p>\n

      \n<\/a><\/div>\n
      \n<\/div>\n

      \nYou have 3 options for Plan B. Or Plans B, C and D if you will.
      \nNo not really, they are all called Plan B, whether you will or won’t.<\/p>\n

      Firstly, you can simply leave Plan B on the default option, which is Off<\/i>.
      \nI know it seems counter-intuitive, but this basically means do nothing that will give our game away<\/i>, and keep tracking in the back ground. 
      \nApart from potential emails coming in, and the odd green-light selfies, there is no indication to the thief that you are tracking them.<\/p>\n

      <\/p>\n

      \n<\/a><\/div>\n
      \n<\/div>\n

      \nYou could set Plan B into Hardware Failure mode<\/i>.
      \nThis is brilliant!<\/p>\n

      It runs a script in the background that randomly adjusts the brightness of the screen at incredibly quick intervals, making it look like a hardware failure with the display.
      \nDon’t worry, this won’t damage your Mac, but it will make the would-be thief want to get rid of it ASAP. 
      \nPerhaps this will lead to the recovery of your Mac, perhaps not.<\/p>\n

      Either way, Nifty Points +1 <\/b>in the bag!<\/p>\n

      And finally, your 3rd Plan B option is to lock the screen with a good old-fashioned screen message.<\/p>\n

      This message can be whatever you want it to be.
      \nPolite and sincere or obnoxious and rude. 
      \nI would opt for somewhere in the middle.<\/p>\n

      <\/a><\/p>\n

      The nifty points for this will come from the fact that not only does this message take control of the screen, and does not allow for any other key stroke or mouse click, but it also calls the message back if you hard-reset the computer.<\/p>\n

      A few moments after restarting the box, the message will take control of the screen, and the thief can see and do nothing, nada, zip!
      \nAnd to top it all off, Voiceover kicks in at full volume and reads the contents of the message out LOUD! How embarrassing! <\/p>\n

      Yes, you can turn the volume down, or even off, but once the voiceover finishes reading the screen, it starts all over again, and resets the sounds settings, to LOUD.<\/p>\n

      Definitely +1<\/b> in the Nifty Jar.<\/p>\n

      <\/p>\n

      \n<\/a><\/div>\n

      Anything else that Undercover can do to help get your machine back?<\/p>\n

      Why yes, now that you ask.<\/p>\n

      \nUndercover version 6.0 now supports Undercover Watch<\/i>.<\/p>\n

      This gives you 2 options to begin Auto-Tracking<\/b> a machine, without you actually clicking on Report Stolen<\/i>.<\/p>\n

      The 2 options are:<\/p>\n

        \n
      1. When I leave this network (You can specify a few)<\/li>\n
      2. When a user logs into a specific “dummy” account, or more commonly, OS X’s guest account.<\/li>\n<\/ol>\n
        \nAny\/both of these options will auto-trigger the stolen attribute, and begin tracking and taking a few snaps shots for the photo album.<\/div>\n
        \n<\/div>\n
        \nThat deserves +2 Nifty Points<\/b>.<\/div>\n
        \n<\/div>\n
        \n<\/a><\/div>\n
        \n<\/div>\n
        \n<\/div>\n
        \nSo, that’s it. Finally!<\/div>\n
        \n<\/div>\n
        \nThat is all<\/i> that Undercover can do for you and your home, business, studio or classroom. It will give you peace of mind, that no matter what, you will have options to get your own back again.<\/div>\n
        \n<\/div>\n
        \n<\/div>\n
        \nSome overall thoughts?<\/div>\n
        \n<\/div>\n
        \nIn the beginning I was instantly put off by the price<\/a> of the software.<\/div>\n
        \n<\/div>\n
        \nCosting R540 to cover 1 Mac or R640 to cover 5…there isn’t really a choice is there?<\/div>\n
        \n<\/div>\n
        \nYou can also up this license to cover up to 25 machines, but it will set you back R5500, or R220 per machine.<\/div>\n
        \n<\/div>\n
        \nWhen you look at all of the above features and consider the entirety of the 9 Nifty points, Undercover should be charging more!<\/div>\n
        \n<\/div>\n
        \n<\/a><\/div>\n
        \n<\/div>\n
        \nSo what are the pitfalls and considerations?<\/div>\n
        \n<\/div>\n
        \nWell, first and foremost; If someone manages to format and reinstall your Mac, your tracking days are over, since the agent will have been wiped off the machine for good.<\/div>\n
        \n<\/div>\n
        \nHow do you prevent this? Set a firmware password!<\/div>\n
        \n<\/div>\n
        \nReboot the Mac and hold CMD+R, tap on Tools, and choose to set a Firmware password.<\/div>\n
        \n<\/div>\n
        \n<\/a><\/a><\/a><\/div>\n
        \n<\/div>\n
        \nThen, why can’t someone just remove the agent manually, since I have listed the exact locations above?<\/div>\n
        \n<\/div>\n
        \nWell, firstly the user would need your administrator password in order to do this.<\/div>\n
        \n<\/div>\n
        \n“But what about the builtin Password Reset Utility found in the Recovery partition” I hear you say?<\/div>\n
        \n“Please refer to the above point of setting a firmware password” you will hear me say in return.<\/div>\n
        \nThis will prevent anybody from getting into the recovery console in order to reset your password.<\/div>\n
        \n<\/div>\n
        \nDoes Undercover play nice with FileVault2?<\/div>\n
        \nNO!<\/div>\n
        \n<\/div>\n
        \nApple specifically designed FileVault2 to not allow any 3rd party utilities or apps to alter the booting process or drive encryption. <\/div>\n
        \nSo unfortunately, you either use FileVault2 or Undercover, not both.<\/div>\n
        \n<\/div>\n
        \nBut what if you want the benefits of both? Tracking and drive encryption? Well, invest in a 3rd party drive encrypting utility out there, there are many to choose from.<\/div>\n
        \n<\/div>\n
        \n<\/a><\/a><\/a><\/div>\n
        \n<\/div>\n
        \nSo all in all, Undercover is definitely going into the hall of fame for 2014 of Apple Domination!<\/div>\n
        \n<\/div>\n
        \nI always feel that if I don’t personally believe in something, like a piece of software, I cannot endorse it.<\/div>\n
        \n<\/div>\n
        \nI am extremely happy to endorse Undercover!<\/div>\n
        \n<\/div>\n
        \nNot only will I be using it on my household Macs, but I will also be providing it as a service to my Mac Clients.<\/div>\n
        \n<\/div>\n
        \nGo out, get it, and feel better knowing that you have done everything that you can to prevent and recover your machine from theft!<\/div>\n
        \n<\/div>\n
        \nEnjoy!<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

        Undercover was easily one of the best pieces of software that I have had the privilege of reviewing for 2014! Like any good Apple user, you probably have Find my Mac (Find my iPhone, you know what I mean) enabled, and hope to heck that you will never need to use it. Touch wood though,[…]<\/a><\/p>\n","protected":false},"author":2,"featured_media":274,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[1],"tags":[18,19,20,21,4,22,23],"jetpack_featured_media_url":"https:\/\/i2.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2014\/09\/logo_big2.png?fit=1600%2C1531","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6OBBc-b","jetpack-related-posts":[{"id":78,"url":"http:\/\/www.appledomination.co.za\/index.php\/2012\/01\/14\/use-one-keyboard-for-your-pc-or-mac-as\/","url_meta":{"origin":11,"position":0},"title":"Use one keyboard for your PC or Mac, as well as your iPhone\/iPod","date":"January 14, 2012","format":false,"excerpt":"In today's technology age, having your iPhone along side your production laptop is almost a given. Texting, searching contacts, map locations, even emailing, helps our generation to be more productive with multi-tasking. But changing between the iPhone and the laptop tends to slow us down, using the bigger and smaller\u2026","rel":"","context":"In \"iPhone\"","img":{"alt_text":"","src":"https:\/\/i1.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2012\/01\/rizer.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":68,"url":"http:\/\/www.appledomination.co.za\/index.php\/2012\/02\/20\/mac-os-x-mountain-lion-its-officia\/","url_meta":{"origin":11,"position":1},"title":"OS X Mountain Lion, It's official.","date":"February 20, 2012","format":false,"excerpt":"7 Months after the launch of Lion, Apple has announce its successor, Mountain Lion. Catchy name right? The Developer's preview is now available for download, and the official release should be available around May\/June (Summer in the States). There is a serious range of new features that have been added,\u2026","rel":"","context":"In \"AirPlay Mirroring\"","img":{"alt_text":"","src":"https:\/\/i2.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2012\/02\/ML_GateKeeper_SS.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":64,"url":"http:\/\/www.appledomination.co.za\/index.php\/2012\/03\/05\/share-your-external-drive-between-mac\/","url_meta":{"origin":11,"position":2},"title":"Share your External drive between Mac and Windows","date":"March 5, 2012","format":false,"excerpt":"If you've ever tried to use your external storage between Windows and Mac, you will already know that it is not that simple. Props to AllNewsMac Here's why: Mac OS X Snow Leopard and Lion (and Mountain Lion?) can read drives formatted as NTFS, but cannot write to them. As\u2026","rel":"","context":"In \"Hard Drives\"","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2012\/03\/Mac_format.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":70,"url":"http:\/\/www.appledomination.co.za\/index.php\/2012\/02\/13\/turn-your-macs-into-motion-detection\/","url_meta":{"origin":11,"position":3},"title":"Turn your Macs into a motion detection alarm system.","date":"February 13, 2012","format":false,"excerpt":"Do you have a handful of Mac computers at your home right now? Maybe at the office, your department is filled with Macs? Your child's Mac-Lab at school is most certainly filled to the brim with iMacs. Are they safe? Well, as safe as they could be, I suppose? Try\u2026","rel":"","context":"In \"Apps\"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":87,"url":"http:\/\/www.appledomination.co.za\/index.php\/2012\/01\/01\/icloud-what-you-need-to-know\/","url_meta":{"origin":11,"position":4},"title":"iCloud: What you need to know.","date":"January 1, 2012","format":false,"excerpt":"Whether you managed to talk the bank manager into letting you get your hands on the new iPad 2 or iPhone 4s, or simply upgraded to IOS 5 on any other of your iThingies, you will have most likely already come into contact with iCloud. With the release of IOS\u2026","rel":"","context":"In \"iCloud\"","img":{"alt_text":"","src":"https:\/\/i2.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2012\/01\/iCloud_screen.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1145,"url":"http:\/\/www.appledomination.co.za\/index.php\/2017\/05\/15\/mac-monitored-services\/","url_meta":{"origin":11,"position":5},"title":"Mac Monitored Services...","date":"May 15, 2017","format":false,"excerpt":"Just like a dog can sense a disaster before it happens, we can treat\u00a0issues on your Mac\u00a0before they turn into catastrophes... Apple Domination has partnered with an international Managed-Services Provider, Watchman Monitoring,\u00a0and is now offering this to all of our clients, old and new. Essentially, Managed-Services means that we will\u2026","rel":"","context":"In "Guide"","img":{"alt_text":"","src":"https:\/\/i2.wp.com\/www.appledomination.co.za\/wp-content\/uploads\/2017\/05\/ccd8b816-021a-439c-9404-cec140361f90.png?resize=350%2C200","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/posts\/11"}],"collection":[{"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/comments?post=11"}],"version-history":[{"count":1,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/posts\/11\/revisions"}],"predecessor-version":[{"id":191,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/posts\/11\/revisions\/191"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/media\/274"}],"wp:attachment":[{"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/media?parent=11"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/categories?post=11"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.appledomination.co.za\/index.php\/wp-json\/wp\/v2\/tags?post=11"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}