Checking pupils internet history

[Leozack]

Hi all - we have some pupil accounts that have IE set to clear cache on close, using mandatory .man profiles (cookies folder only contains index.dat) and I've been asked to see if there is anyway to know if a pupil has been to dodgy sites. Outside of the nonwritable profile and apparently nonsaving cookies - is there anywhere that would have traces? I know people sell software purely to hide your traces so maybe other areas in the registry save things - though possibly not as standard users without admin rights? All thoughts appreciated

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[NortonES2]

Do you use a proxy server? If so that may keep logs of all web pages visited and who by.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[goombawaho]

That is WHY many educational institutions and businesses use proxy servers or one of the top reasons. Nobody can mess with the "history" that the proxy server can divulge.

With no proxy server, you must resort to history or "spy software" of some kind.

 

[spamjim]

...and with no proxy server, you can't then block a dodgy site once you know it is popular with your students.

 

[Leozack]

Schools go through proxies on the grid level but not on a local level. I'm fairly sure the pc/user aren't included in the grid logs but I may be wrong. Right now I haven't even been given any names/sites/anything to look for so it's more a case of finding where there might be traces. And if all it takes to have none locally is a mandatory profile and emptying the cache then I'm surprised anyone sold a single copy of any privacy software

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[NortonES2]

Emptying your cache doesn't destroy your browsing history, there is software available that can recover deleted files. You generally have to purchase it as the evaluation copies generally just display the files that could be recovered.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[Leozack]

Well file recovery is a possibility but that involves knowing which pc/user exactly was involved I guess - and chances are it's been voerwritten with later logons by them/other users etc.

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[NortonES2]

If you go through a proxy then that should be configured to restrict web access to certain site categories.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[Leozack]

Of course there are filters. But the fact remains no computer can ever filter things fully. Only a human check is 100% valid. For instance I could put any images online and call them cat dog plane etc and no filter is going to say actually that looks more like a nekid chick than a cat, pal ;P Rule #1 - don't use google images in front of a class without testing the keywords you're searching for first

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[NortonES2]

True but some proxies include image recognition software as well.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[Leozack]

Never seen one, and doesn't sound cheap Also it's not just images that you would want filtered. But like I said - no filtering will be perfect, so user management is better option for everyone. And preferably tracking software and the threat of all dodgy keywords and such being logged with screenshots to deter people (even if you don't have it). But most schools won't pay out for that stuff unless they have problems. Secondaries perhaps - but not primaries.

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[NortonES2]

Yep, I guess that budget (or lack of it) is what it always comes down to.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[Leozack]

Tempts me to write my own keylogger/screenshotter instead -_-

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[goombawaho]

As I mentioned, there are individual products that can be installed on PCs to log everthing and take screen captures. Had a company use it to nail/fire an employee for doing something against her company.

But, A) it has to be installed on every computer, B) it has to be purchased, C) it has to be monitored.

Without money, I think you're out of luck - software or proxy server.

As mentioned, some companies have software that can sense "skin tones" on web pages and that might be a flag for nude photos and it will send a note to an administrator. You just can't have fun at work any more IF your employer has the money to watch you properly.

 

[Leozack]

tbh keep your porn at home is what I say ;P especially if it's a school ffs!

and yeah well schools here get internet through a big conglomorate that use filtering etc and you can customise it with whitelist/blacklist entries and so on. but it can only filter based on text/sites like most filters, no skintone crap, and no direct reporting. secondary schools probably use the monitoring software cos I heard it makes you blush to see what they email eachother about what they'll do after school ...

but none of this is relevant if we're talking post-event detective work trying to find whatever windows by default keeps - and I think with a non-writeable profile (no regentries/history saved then) and cleared cache sessions, I'm out of luck really. The best I have is the grid's list of all websites surfed through that proxy in the last month. Don't think I could nail it by user/machine though possibly machine via internal IP but no use wiht shared pcs

_________________________________
Leozack

MakeUniverse($infinity,1,42);

 

[eyec]

give "indexdat suite" a try. you will be suprised what it reveals.

 

[goombawaho]

Think of it this way - it makes your life easier if you don't have to be the police, because you don't have a way to police this the way you're set up.

heard it makes you blush to see what they email each other

I'm sure it would be quite entertaining to be a fly on the wall.

 

[spamjim]

Detecting skin tones can be a waste of processing power. Porn peddlers are not trying to hide smut from search engines. Easily detected keywords will appear on 99.9999% of these dodgy sites.

As a basic step, you just need to filter the words that accompany these images. However, filtering such words will likely block the average teen from typing anything on a computer. It is their lingo.

 

[mscallisto]

I have to agree with eyec about index.dat


At least read the intro:

http://www.acesoft.net/delete_index.dat_files.htm

 

[hairlessupportmonkey]

Id install an untangle box.

ideal for schools and its free / cheap.

http://www.untangle.com/untangle/features/

ACSS - SME
General Geek