Difference between pages "Google Chrome" and "Talk:FCCU Gnu/Linux Boot CD"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
Google Chrome is a [[Web Browser|web browser]] developed by Google Inc.
+
[[User:Joachim Metz|Joachim]] 03:36, 28 July 2012 (PDT) According to project site the last release is 07 Oct 2008, anyone knows if this is still actively maintained? For now I'm marking this as deprecated
 
+
== Configuration ==
+
The Google Chrome configuration can be found in the Preferences file.
+
 
+
On Windows XP
+
<pre>
+
C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
+
</pre>
+
 
+
On Windows 7
+
<pre>
+
C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Preferences
+
</pre>
+
 
+
On Linux
+
<pre>
+
/home/$USER/.config/google-chrome/Default/Preferences
+
</pre>
+
 
+
=== DNS Prefetching ===
+
 
+
DNS is prefetched for related sites, e.g. links on the page.
+
This behavior is controlled by the setting "Predict network actions to improve page load performance"
+
Which is enabled by default.
+
 
+
If enabled the Preferences file contains:
+
<pre>
+
  "dns_prefetching": {
+
      "enabled": true,
+
</pre>
+
 
+
If disabled the Preferences file contains:
+
<pre>
+
  "dns_prefetching": {
+
      "enabled": false,
+
</pre>
+
 
+
== Start-up DNS queries ==
+
 
+
When Chrome starts it queries for several non-existing hostnames that consists of a 10 random characters, E.g.
+
<pre>
+
ttrgoiknff.mydomain.com
+
bxjhgftsyu.mydomain.com
+
yokjbjiagd.mydomain.com
+
</pre>
+
 
+
This is used to determine if your ISP is hijacking NXDOMAIN results [http://www.google.com/support/forum/p/Chrome/thread?tid=3511015c72a7b314&hl=en].
+
 
+
== History ==
+
Chrome stores the history of visited sites in a file named History. This files uses the [[SQLite database format]].
+
 
+
=== Timestamps ===
+
The History file uses the following timestamps.
+
 
+
==== visits.visit_time ====
+
 
+
The visit date and time values in the visit table are in (the number of) microseconds since January 1, 1601 UTC
+
 
+
Some Python code to do the conversion into human readable format:
+
<pre>
+
date_string = datetime.datetime( 1601, 1, 1 )
+
            + datetime.timedelta( microseconds=timestamp )
+
</pre>
+
 
+
Note that this timestamp is not the same as a Windows filetime which is (the number of) 100 nanoseconds since January 1, 1601 UTC
+
 
+
==== downloads.start_time ====
+
 
+
The start date and time values in the downloads table are in (the number of) seconds since January 1, 1970 UTC
+
 
+
Some Python code to do the conversion into human readable format:
+
<pre>
+
date_string = datetime.datetime( 1970, 1, 1 )
+
            + datetime.timedelta( seconds=timestamp )
+
</pre>
+
 
+
== See Also ==
+
 
+
* [[SQLite database format]]
+
 
+
== External Links ==
+
* [http://en.wikipedia.org/wiki/Google_Chrome Wikipedia article on Google Chrome]
+
* [http://www.google.com/support/forum/p/Chrome/thread?tid=3511015c72a7b314&hl=en Chrome support forum article random 10 character hostnames on startup]
+
 
+
[[Category:Applications]]
+
[[Category:Web Browsers]]
+

Latest revision as of 09:22, 28 July 2012

Joachim 03:36, 28 July 2012 (PDT) According to project site the last release is 07 Oct 2008, anyone knows if this is still actively maintained? For now I'm marking this as deprecated