Comments on: Mastering Safari, understanding security http://osxhelp.com/mastering-safari-understanding-security/ Insanely Simple Tutorials for the First Time Macintosh User Fri, 30 Jul 2010 19:16:04 -0700 http://wordpress.org/?v=2.8.4 hourly 1 By: William http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6905 William Fri, 15 Jan 2010 23:26:51 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6905 Thank you for the speed at which you answered. Your response was very helpful. I will take one of those routes, and I will sleep soundly knowing my nephew who wants to work in programming isn't getting his hands where they shouldn't be. Thank you for the speed at which you answered. Your response was very helpful. I will take one of those routes, and I will sleep soundly knowing my nephew who wants to work in programming isn’t getting his hands where they shouldn’t be.

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6904 Scott Haneda Fri, 15 Jan 2010 23:21:23 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6904 William, I would probably approach this different. The 7 pass erase is really not needed. I can not find the link at this time, but there has been a long running contest where a drive was given a few text files, then simply reformatted. The idea is, you win a prize if you can recover the files. To date, and it has been years, no one has. Erase free space will be more than enough, in my strong opinion, to keep you safe. However, what you are not considering, is all the places you have data and preferences that you may not be aware of. There are two ways to pass a computer off to someone, in order of quality: 1) Use the original DVD that came with the computer, reformat the drive, and install the OS clean and new. 2) Create a new account, as an admin account, login to that account, and delete your old account. This will delete all the files that you had no matter where they are hidden. From there, you can do the erase free space if you feel you need to, though the reality is, it probably is not that needed. Certainly is not going to hurt, other than you time to wait on it to finish erasing. For the cookies, it could be that you have some bookmarks that are RSS driven, those poll the site very 15 minutes or so, depending on your RSS preferences. When that happens, a number of cookies will generally be set. William,
I would probably approach this different. The 7 pass erase is really not needed. I can not find the link at this time, but there has been a long running contest where a drive was given a few text files, then simply reformatted. The idea is, you win a prize if you can recover the files. To date, and it has been years, no one has.

Erase free space will be more than enough, in my strong opinion, to keep you safe.

However, what you are not considering, is all the places you have data and preferences that you may not be aware of.

There are two ways to pass a computer off to someone, in order of quality:

1) Use the original DVD that came with the computer, reformat the drive, and install the OS clean and new.

2) Create a new account, as an admin account, login to that account, and delete your old account. This will delete all the files that you had no matter where they are hidden. From there, you can do the erase free space if you feel you need to, though the reality is, it probably is not that needed. Certainly is not going to hurt, other than you time to wait on it to finish erasing.

For the cookies, it could be that you have some bookmarks that are RSS driven, those poll the site very 15 minutes or so, depending on your RSS preferences. When that happens, a number of cookies will generally be set.

]]> By: William http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6901 William Fri, 15 Jan 2010 23:09:45 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6901 I am considering giving my laptop to a family member, and I know about the empty securely feature in the trash bin, and I am also aware of erasing any free space on the hard drive through disk utility. While I am not doing anything illegal, I like having piece of mind when my financial investments and medical history is at stake. I would like to do a seven pass erase on my browser history before giving it to my relative. Is there an easy way of doing this? Also as a side note, when i remove cookies, it seems like even when I do not go back to those sites, they may appear again, am I just being forgetful, or are they reappearing after I have removed them? I am considering giving my laptop to a family member, and I know about the empty securely feature in the trash bin, and I am also aware of erasing any free space on the hard drive through disk utility. While I am not doing anything illegal, I like having piece of mind when my financial investments and medical history is at stake. I would like to do a seven pass erase on my browser history before giving it to my relative. Is there an easy way of doing this?

Also as a side note, when i remove cookies, it seems like even when I do not go back to those sites, they may appear again, am I just being forgetful, or are they reappearing after I have removed them?

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6680 Scott Haneda Thu, 24 Sep 2009 00:03:54 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6680 @troy, I am not aware of any way to set a password for Private Browsing. @troy, I am not aware of any way to set a password for Private Browsing.

]]> By: Troy http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6679 Troy Wed, 23 Sep 2009 23:04:45 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6679 No, I was referring to Private Browsing (PB). I want to create a situation where if you click on PB, it will ask you for a password BEFORE enabling it. Info: Running OX X 10.6.1. No, I was referring to Private Browsing (PB). I want to create a situation where if you click on PB, it will ask you for a password BEFORE enabling it.

Info: Running OX X 10.6.1.

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6676 Scott Haneda Wed, 23 Sep 2009 19:10:44 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6676 @Troy, what is PB? Popup Blocker? No, there is no way to require a password when enabling it. What is your line of thinking here, why would you want to require a password to enable a feature that is more or less mandatory to use the web these days? @Troy, what is PB? Popup Blocker? No, there is no way to require a password when enabling it. What is your line of thinking here, why would you want to require a password to enable a feature that is more or less mandatory to use the web these days?

]]> By: Troy http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6674 Troy Wed, 23 Sep 2009 16:24:20 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6674 any way to require a password to be entered when enabling PB? any way to require a password to be entered when enabling PB?

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6649 Scott Haneda Wed, 09 Sep 2009 21:36:28 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6649 @Evan If the user deleted the data, and then erased the free space, the chances of getting that data that was erased are slim. I would suggest that all use of this computer be stopped. The only chances you have of recovering any data will be dependent on no new data having the chance of sitting on top of the spots in which the old data was located at. You will need to either connect the machine in FireWire target mode, so you can access the drive as a remove volume, or pull the drive out and put it in another machine in the event it does not have firewire. Were backups made? Perhaps you can look at that backup data? From there, you would look into the preference and cache files area for all browsers you suspect were used. You may find cookie files, favicon files, or other data that is often overlooked when clearing a cache. More than likely, the favicon files, and possibly even the top sites previews if a new version of Safari, still exist. While a favicon is very small in size, you can compare its md5 to that of the suspected sites, and be confident that site was visited. If you would like, you can email me directly, and I can possibly work out a way in which to help you. At this point, the best suggestion I can make it to turn off the machine, and not turn it on for any reason until you have a plan for accessing the data remotely. @Evan If the user deleted the data, and then erased the free space, the chances of getting that data that was erased are slim.

I would suggest that all use of this computer be stopped. The only chances you have of recovering any data will be dependent on no new data having the chance of sitting on top of the spots in which the old data was located at.

You will need to either connect the machine in FireWire target mode, so you can access the drive as a remove volume, or pull the drive out and put it in another machine in the event it does not have firewire.

Were backups made? Perhaps you can look at that backup data?

From there, you would look into the preference and cache files area for all browsers you suspect were used. You may find cookie files, favicon files, or other data that is often overlooked when clearing a cache.

More than likely, the favicon files, and possibly even the top sites previews if a new version of Safari, still exist. While a favicon is very small in size, you can compare its md5 to that of the suspected sites, and be confident that site was visited.

If you would like, you can email me directly, and I can possibly work out a way in which to help you. At this point, the best suggestion I can make it to turn off the machine, and not turn it on for any reason until you have a plan for accessing the data remotely.

]]> By: Evan http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6648 Evan Wed, 09 Sep 2009 09:57:13 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6648 I am an IT Manager at a primary school, one of my colleagues was suspected to have been on inappropriate sites, etc, at home on their school MacBook, they have (from what I can see) done a "Erase Free Space" and cleared all their cache and reset safari (as they knew we were onto them) - is there any way I can retrieve the data, or any program I can get to examine their hard drive? Thanks I am an IT Manager at a primary school, one of my colleagues was suspected to have been on inappropriate sites, etc, at home on their school MacBook, they have (from what I can see) done a “Erase Free Space” and cleared all their cache and reset safari (as they knew we were onto them) – is there any way I can retrieve the data, or any program I can get to examine their hard drive?

Thanks

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6328 Scott Haneda Sat, 06 Dec 2008 21:41:14 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6328 @Misato, yes, while in private browsing, Safari will work as a normal non private session. Everything will be the same, it will save cookies, allow you to login to sites, and in your case, even allow you to use paypal. In essence, there is no difference with private browsing, as normal browsing. The only change happens when you disable private browsing. At that point, Safari will delete whatever data it has collected about you during your private browsing. @Misato, yes, while in private browsing, Safari will work as a normal non private session. Everything will be the same, it will save cookies, allow you to login to sites, and in your case, even allow you to use paypal.

In essence, there is no difference with private browsing, as normal browsing. The only change happens when you disable private browsing. At that point, Safari will delete whatever data it has collected about you during your private browsing.

]]> By: Misato http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6327 Misato Sat, 06 Dec 2008 19:24:03 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6327 Can u use private browsing when your on ebay paying for something on paypal? Can u use private browsing when your on ebay paying for something on paypal?

]]> By: Hmmdude http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6322 Hmmdude Sun, 30 Nov 2008 00:50:33 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6322 Thanks for the quick response. Restart didn't work. Other ideas please. Thanks for the quick response.

Restart didn’t work. Other ideas please.

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6321 Scott Haneda Sat, 29 Nov 2008 23:09:24 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6321 @Hmmdude, what are you trying to accomplish my forcing cookies to not be allowed? I would estimate you can not login to almost all websites out there. I am curious what risks you will be mitigating by the turning off of accepting cookies. I suspect, in your case, you will need to quit and restart safari, for the changes to take full effect of sites you have already navigated to. @Hmmdude, what are you trying to accomplish my forcing cookies to not be allowed? I would estimate you can not login to almost all websites out there. I am curious what risks you will be mitigating by the turning off of accepting cookies.

I suspect, in your case, you will need to quit and restart safari, for the changes to take full effect of sites you have already navigated to.

]]> By: Hmmdude http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-6320 Hmmdude Sat, 29 Nov 2008 22:55:44 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-6320 Why is Google cookie get thru when Safari:Security is set ot "Never" ?? Why is Google cookie get thru when Safari:Security is set ot “Never” ??

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-4262 Scott Haneda Tue, 01 Apr 2008 21:10:46 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-4262 @Boston, shame on you, then again, I guess I am one to talk with looking forward to this Paris Hilton BFF show :-) @Boston, shame on you, then again, I guess I am one to talk with looking forward to this Paris Hilton BFF show :-)

]]> By: Boston http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-4205 Boston Tue, 01 Apr 2008 03:54:20 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-4205 I use it so that people dont know that I watch Flavor of Love! I use it so that people dont know that I watch Flavor of Love!

]]> By: Nex http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-1765 Nex Wed, 05 Mar 2008 15:09:19 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-1765 Private Browsing is for erasing your trails and covering your tracks. This is primarily used for making you feel more secure about what browsing remnants are left on your system. Also, very handy if you have multiple users on the machine (using the same log-in). Not a feature I use personally as you have to reenter your user ID and passwords on all your sites every time you log in again. Private Browsing is for erasing your trails and covering your tracks. This is primarily used for making you feel more secure about what browsing remnants are left on your system.
Also, very handy if you have multiple users on the machine (using the same log-in).
Not a feature I use personally as you have to reenter your user ID and passwords on all your sites every time you log in again.

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-1242 Scott Haneda Fri, 29 Feb 2008 03:12:06 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-1242 @Julius, I do not use private browsing even when on my banking site. Banking sites tend to be rather protective, and will even auto log you out after a certain period of browser inactivity. That being said, I have never seen one harmed by being overly cautious on the web. Private browsing is more an issue of personal security. It will not help you keep your data secure from someone remotely hacking your bank site, or anyone doing anything remote. Private browsing will prevent those with physical access to your computer, from being able to snoop around and find where and what you have been up to. @Julius, I do not use private browsing even when on my banking site. Banking sites tend to be rather protective, and will even auto log you out after a certain period of browser inactivity.

That being said, I have never seen one harmed by being overly cautious on the web.

Private browsing is more an issue of personal security. It will not help you keep your data secure from someone remotely hacking your bank site, or anyone doing anything remote.

Private browsing will prevent those with physical access to your computer, from being able to snoop around and find where and what you have been up to.

]]> By: Scott Haneda http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-1241 Scott Haneda Fri, 29 Feb 2008 03:09:13 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-1241 @Nathan, if private browsing was on, you indeed will not have access to your password. Even were it not, you still may not be able to get to it. Every site I am aware of, allows you to get your password, either by email, or by answering a set of questions. If you want to reply back here with the web address (URL) of the site, I can certainly see what I can do to help you out. @Nathan, if private browsing was on, you indeed will not have access to your password. Even were it not, you still may not be able to get to it.

Every site I am aware of, allows you to get your password, either by email, or by answering a set of questions. If you want to reply back here with the web address (URL) of the site, I can certainly see what I can do to help you out.

]]> By: Julius Hjulian http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-1207 Julius Hjulian Thu, 28 Feb 2008 22:32:14 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-1207 Is “Private Browsing” to be used basically any time you are doing a bank card payment or checking on your bank or investment accounts? Can you think of any other times it would be appropriate? Thank you for all these helpful tips. Is “Private Browsing” to be used basically any time you are doing a bank card payment or checking on your bank or investment accounts? Can you think of any other times it would be appropriate? Thank you for all these helpful tips.

]]> By: Nathan http://osxhelp.com/mastering-safari-understanding-security/comment-page-1/#comment-1197 Nathan Thu, 28 Feb 2008 17:35:32 +0000 http://osxhelp.com/mastering-safari-part-7-understanding-security/#comment-1197 If I had private browsing on and have forgotten a login and password, is there any possible way to dig that back out of my computer or is it gone forever? If I had private browsing on and have forgotten a login and password, is there any possible way to dig that back out of my computer or is it gone forever?

]]>