The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Calling all detectives! [Mac]

FallingmanFallingman Registered User regular
edited June 2007 in Help / Advice Forum
Dear H/A.

Stick around: There's porn.

A few months back, I bought the girlfriend a Macbook. I'm a recent convert, and although I'm still learning I set up a "guest" account for her sister, so she didnt clutter up my girlfriends profile. I also removed any admin privileges so that she couldn't install anything dodgy.

I was in the guest login today, looking at how it was locked down, and I noticed some porn sites on Safari's History. No biggy - I'm not uptight about porn, power to them (there wasnt anything sinister or disturbing). However, this is my girlfiends notebook.

Now, I know her sister (so I was a little surprised)- and my initial thought is that it might have been one of her friends. The history dropdown listed "Today" as the date. Now I checked this at lunchtime and thought - "hmmm, early morning - before work shennanigins? Odd". But then realised that anything after midnight would be today, so It's probably a late night thing if one of her friends drove her home or something.

I was trying to find the time these pages were visited. The cookies (accessed via the preferences window) didnt give me this info...

So my question is:

Is there a more comprehensive history anywhere? And how to I access it?

I just want to get a fuller picture before anything is said.

Thoughts?

[SIGPIC][/SIGPIC]
Fallingman on

Posts

  • lordswinglordswing Registered User regular
    edited June 2007
    I've nothing to say about an extended history, but <3 Private Browsing.

    lordswing on
    D2:LoD East -> *FlipPaulHewitt
  • RuckusRuckus Registered User regular
    edited June 2007
    Fallingman wrote: »
    Dear H/A.

    Stick around: There's porn.

    A few months back, I bought the girlfriend a Macbook. I'm a recent convert, and although I'm still learning I set up a "guest" account for her sister, so she didnt clutter up my girlfriends profile. I also removed any admin privileges so that she couldn't install anything dodgy.

    I was in the guest login today, looking at how it was locked down, and I noticed some porn sites on Safari's History. No biggy - I'm not uptight about porn, power to them (there wasnt anything sinister or disturbing). However, this is my girlfiends notebook.

    Now, I know her sister (so I was a little surprised)- and my initial thought is that it might have been one of her friends. The history dropdown listed "Today" as the date. Now I checked this at lunchtime and thought - "hmmm, early morning - before work shennanigins? Odd". But then realised that anything after midnight would be today, so It's probably a late night thing if one of her friends drove her home or something.

    I was trying to find the time these pages were visited. The cookies (accessed via the preferences window) didnt give me this info...

    So my question is:

    Is there a more comprehensive history anywhere? And how to I access it?

    I just want to get a fuller picture before anything is said.

    Thoughts?

    The actual file creation date in the cookie's file properties should be the date/time when the site was first accessed.

    Ruckus on
  • CailYoungCailYoung Registered User regular
    edited June 2007
    Safari stores cookies in a database, not flat files. http://www.macupdate.com/info.php/id/19784 Cocoa Cookies will get you at 'em.

    CailYoung on
    Freak this, I'm going to the toilet - Shaun Micallef
  • FristleFristle Registered User regular
    edited June 2007
    Ok, looks like cookies aren't time-stamped. How about cached pages? ~/Library -> Cache -> Safari

    Edit: Go here to get an application that will browse these cache files for you and show you the contents.

    Fristle on
    Fristle.jpg
  • FFFF Once Upon a Time In OaklandRegistered User regular
    edited June 2007
    I know this has nothing to do with Safari's hostiry or cache, but if the computer hasn't been restarted since then you could go into the Terminal and issue the 'last' command. (So type 'last' without the quotes)

    That will show you the times any account last logged on. Might give you a better idea of when Guest initally logged on to the computer, and maybe the porning began soon after?

    FF on
    Huh...
  • FallingmanFallingman Registered User regular
    edited June 2007
    Hmm, ok - got some software(cocoa cookie) but the cache files dont have a date viewed, only a cookie expiry date. Unfortunately, the machine has been turned off. I just went back further... happened a few days ago. If I can get times, I can narrow down the culprit. If its the sister - no sweat, but if its one of her bloody mates, thats not really on.

    Any more ideas guys?

    Also: Would facebook have porn popups? I dont use it myself...

    Fallingman on
    [SIGPIC][/SIGPIC]
  • lordswinglordswing Registered User regular
    edited June 2007
    Fallingman wrote: »
    Also: Would facebook have porn popups? I dont use it myself...

    Nope, I've only seen ads related to my school, for stuff like apartments and events.

    lordswing on
    D2:LoD East -> *FlipPaulHewitt
  • mcpmcp Registered User regular
    edited June 2007
    You don't really need any special programs to view cookies.

    In Safari: Preferences -> Security -> Show Cookies.

    The cookies are actually in a plist. user/Library/Cookies. You can open that plist in a text editor and view it that way, too. You can tell when the plist was last modified, but not when a specific entry is created.

    Safari's cache is at user/Library/Caches/Safari. Opening those files doesn't tell you much. I'm not sure if there's a program out there that will help decipher those things.

    mcp on
  • FristleFristle Registered User regular
    edited June 2007
    mcp wrote: »
    Safari's cache is at user/Library/Caches/Safari. Opening those files doesn't tell you much. I'm not sure if there's a program out there that will help decipher those things.

    You must have missed my remark on this earlier.
    Also: Would facebook have porn popups? I dont use it myself...

    He says he found these porn sites in the browser History, and popups and assorted ad banners don't show in the history. History only contains pages you actually navigated to.

    Fristle on
    Fristle.jpg
Sign In or Register to comment.