Tagged Questions

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

1
vote
0answers
28 views

AppEngine Sandbox

Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
20
votes
2answers
524 views

How does Google Authenticator work?

Google Authenticator is an alternative to SMS for 2Step verification, installing an app on Android where the codes will be sent. It works without any connectivity; it even works on plane mode. This ...
14
votes
2answers
669 views

Can robots.txt for your face be made effective?

As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
1
vote
3answers
515 views

How to use information from GHDB and FSDB (Google-Dorks)?

I am new to information security and analysis. Recently, I came across FSDB (Foundstone database) and GHDB (Google Hacking database) while exploring the McAfee Foundstone Sitedigger tool. What are ...
-1
votes
1answer
116 views

Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]

Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
-1
votes
2answers
143 views

Hiding emails from Google [closed]

From what I understand Google reads/scans all my emails so that they cab "provide" targeted ads and maybe for other reasons. If a have a group of people who want to hide their emails from Google, how ...
-3
votes
3answers
291 views

How does Google get information about FTP servers - and how to avoid it?

I searched the internet like this inurl:ftp -inurl:(http|https). I found many FTP hosts. I can add or remove files from some hosts. How does Google get information about FTP servers? How can one avoid ...
1
vote
1answer
199 views

Google Cloud Messaging Spoof

I have few question on security of Google Cloud Messaging Service (GCM) Is it possible to spoof messages that GCM server sends to android clients? Does server pushes data in encrypted format? Data ...
3
votes
2answers
228 views

Is Chrome giving out information about me?

I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
-2
votes
1answer
96 views

Google getting your information everywhere [closed]

What Google is doing, is it right, I don't know if it is legal or not, like is it legal for youtube to continually giving recommendation inspite of you deleting all the history. I'm not an expert in ...
6
votes
2answers
240 views

Will reporting phishing emails cause problems for the victim?

On GMail, I've received a phishing email from someone I know, and the email has been sent to other people the victim knows. One of the emails is claiming to be from their GMail address, while the ...
11
votes
2answers
464 views

Which SSH security is stronger? 2 Factor or Public key

For SSH authentication, which is more secure? 2 Factor Authentication using a USB token/Google Authenticator(time based) OR Public/private key with password Or could they be both used at the same ...
1
vote
1answer
375 views

Can I used Google Authenticator with Radius and VMwareview

We're looking to add 2 factor and one of the options is google authenticator and I was wondering if we can attach that to a radius server attached to our VM infrastructure for remote access. All ...
1
vote
2answers
325 views

What should I do if I type my password in the address bar, or type password in google search?

When someone accidentally types his or her password in one of the following three locations and presses enter, what should they do? username text box address bar Google search What do you suggest, ...
4
votes
1answer
467 views

How does automated query compromise other Google users?

Sometimes when using TOR browser / tor proxy, Google refuses to process the request you issue, especially if it's in a different language (e.g. searching for Arabic word while using German proxy). ...
-1
votes
2answers
101 views

Can 2FA help handle mixed personal and business accounts after leaving a company?

I do not want a super administrator in Google Apps to log to my account after leaving company, so I enabled 2-step verification. He could login to many sites as me with just a link in "forget ...
3
votes
5answers
358 views

Should I change password after servicing a tablet?

Recently I had problems with my android tablet. I sent it for repair, and they replaced it because it was not possible to repair it. But, before sending I forgot to disable my accounts. Are people ...
86
votes
8answers
8k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
2
votes
2answers
335 views

Use HTTP POST for Google Search queries

When searching on Google from a browser, the actual search query is visible in the address bar of the browser, even when using Google's secure search (https). Is there a way to submit the search query ...
3
votes
1answer
74 views

Application communication monitoring

I am seeking a way to monitor communication between Android applications in order to detect their suspicious behaviour but I am not sure where to start the development process from. As far I have ...
2
votes
2answers
468 views

Google Mail alert message. Hacker from China

I have had a red warning box on top of the page when I access GMail. It says that there have been three attacks from China: IP Address: 117.70.121.33 Location: Xuancheng, Anhui, China and ...
3
votes
1answer
214 views

How strong are google's Application-specific passwords? [duplicate]

Possible Duplicate: Google Account: implications of using application-specific passwords In 2-step verification of google accounts, we need to use the Application-specific passwords ...
3
votes
1answer
123 views

Amavisd-New and Google safe browsing

I am studying the Google Safe Browsing. How do I know that it is possible to intercept a content of an email via amavis, I wonder if I can, for each url found, consult the Google safe browsing? Do ...
1
vote
4answers
291 views

Security implications of using a OAuth-enabled password manager

I've resisted the idea of password managers for a long time. Bringing together passwords for all your online accounts in one place that is only protected by difficult-to-remember master password ...
11
votes
4answers
2k views

Google Account: implications of using application-specific passwords

In the wake of the recent Mat Honan story I decided to try out two-factor authentication on my Google account. But in order to keep using it with Exchange, the Android OS, Google Talk and Google ...
2
votes
2answers
662 views

How do I protect my Gmail account when accessing it via an Android smartphone?

I have a Gmail account that I also access via an Android smartphone. The mail account could be used to reset passwords for other online accounts, so I want to tighten up the security around this ...
1
vote
1answer
73 views

How does google docs know password for published googledocs document on a public site?

Google Docs documents can be published on public sites. How does Google know the password to use (to get the document) when all you specify in the HTML is a string like: ...
1
vote
3answers
1k views

Block the HTTPS version of a website

I would like to block some websites from their HTTPS version and allow them on HTTP. The main websites involved are Youtube and Google Images/Videos. I am using K9 Web Protection on each computer, and ...
11
votes
6answers
6k views

How does Google Maps know where I am, when I'm using a VPN?

How does Google Maps determine my location? I've gotten some understanding of Google Maps' geolocation methods from here: http://friendlybit.com/js/geolocation-and-google-maps/ In the newer ...
1
vote
2answers
1k views

Storing passwords online using Gmail documents

Following this discussion about "Online Passwords Managers" I wonder whether it is a good idea to store the passwords using a spreadsheet inside Gmail documents? I mean, it seems to me that these ...
1
vote
1answer
115 views

How would you make a comprehensive list of Google domains? [closed]

If you wanted to block access of a single machine to all sites whose domain is owned or controlled by Google, how would you go about generating a comprehensive list to add to /etc/hosts? How would ...
2
votes
2answers
227 views

Google Account Compromised - Possible Investigation?

This morning, I've not been able to login to my Google Account. Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
3
votes
1answer
346 views

What is chrome.googleechotest.com?

I use chrome (dev channel) on mac osx lion and every now and then it tries to access chrome.googleechotest.com on port 80 (EDIT: and other ports!). Anybody knows what is the deal with ...
5
votes
2answers
430 views

Does Google log my activity on service A when logged in to service B or by IP address?

Now that Google's new Privacy Policy will combine data from their various services... Will Google associate me to my activity on one service even if I am not logged in to that service? Did they ...
4
votes
2answers
1k views

Does Google record search / source IP [/ user] pairs?

Does Google record search / source IP [/ user] pairs? What if my Search History is off?
6
votes
2answers
297 views

With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?

From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
2
votes
4answers
1k views

If a hacker were to compromise a GMail database

Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database? I assume nothing, and in order for ...
1
vote
1answer
1k views

What algorithm/encryption type does Gmail use for security?

In the wake of the recent database hacks, i.e. Sony, Gawker, etc.. where the hackers have access to the hashed usernames and passwords, i've been more keen in paying attention to the sites and ...
7
votes
2answers
538 views

How does Google not care about “spaces” in Application-specific passwords?

I have recently setup "2-step verification" for my Google account. One of the features is the ability to create "Application-specific passwords " for devices that do not support the 2 step process. ...
1
vote
2answers
423 views

Are there any strange things with google.com over HTTPS?

So I'm always browsing the web through Privoxy using minimum these rules: vi /etc/privoxy/user.action { +redirect{s@http://@https://@} } .chrome.google.com .code.google.com .docs.google.com ...
12
votes
9answers
4k views

Encrypting email for gmail

My friend who is an accountant was asking me what the best way to exchange documents with clients. He was trying to tell me that just sending via email was sufficient and I told him he was insane. I ...
3
votes
3answers
919 views

Google App Engine Security

I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine and test how secure it is. Does anyone know if there was ...
0
votes
0answers
99 views

Google App Engine Security [duplicate]

Possible Duplicate: Google App Engine Security I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine ...
10
votes
2answers
253 views

Anyone know of security tools utilizing google's prediction API?

http://code.google.com/apis/predict/ From google: What is the Google Prediction API? The Prediction API enables you to make your smart apps even smarter. The API accesses Google's machine ...