Dear H/A.
Stick around: There's porn.
A few months back, I bought the girlfriend a Macbook. I'm a recent convert, and although I'm still learning I set up a "guest" account for her sister, so she didnt clutter up my girlfriends profile. I also removed any admin privileges so that she couldn't install anything dodgy.
I was in the guest login today, looking at how it was locked down, and I noticed some porn sites on Safari's History. No biggy - I'm not uptight about porn, power to them (there wasnt anything sinister or disturbing). However, this is my girlfiends notebook.
Now, I know her sister (so I was a little surprised)- and my initial thought is that it might have been one of her friends. The history dropdown listed "Today" as the date. Now I checked this at lunchtime and thought - "hmmm, early morning - before work shennanigins? Odd". But then realised that anything after midnight would be today, so It's probably a late night thing if one of her friends drove her home or something.
I was trying to find the time these pages were visited. The cookies (accessed via the preferences window) didnt give me this info...
So my question is:
Is there a more comprehensive history anywhere? And how to I access it?
I just want to get a fuller picture before anything is said.
Thoughts?
Posts
The actual file creation date in the cookie's file properties should be the date/time when the site was first accessed.
Edit: Go here to get an application that will browse these cache files for you and show you the contents.
That will show you the times any account last logged on. Might give you a better idea of when Guest initally logged on to the computer, and maybe the porning began soon after?
Any more ideas guys?
Also: Would facebook have porn popups? I dont use it myself...
Nope, I've only seen ads related to my school, for stuff like apartments and events.
In Safari: Preferences -> Security -> Show Cookies.
The cookies are actually in a plist. user/Library/Cookies. You can open that plist in a text editor and view it that way, too. You can tell when the plist was last modified, but not when a specific entry is created.
Safari's cache is at user/Library/Caches/Safari. Opening those files doesn't tell you much. I'm not sure if there's a program out there that will help decipher those things.
You must have missed my remark on this earlier.
He says he found these porn sites in the browser History, and popups and assorted ad banners don't show in the history. History only contains pages you actually navigated to.