Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

0
votes
1answer
39 views

google site tag resuts [closed]

If I go to http://sppp.rajasthan.gov.in/robots.txt I get: User-Agent: * Disallow: Allow: / That means that crawlers are allowed to fully access the website and index everything. If so then why ...
2
votes
0answers
30 views

Is there an iframe attack surface to webcache.googleusercontent.com?

I've noticed that one of my web-sites shows up pretty much blank when viewed from Google Cache at webcache.googleusercontent.com, because Google apparently must be inserting the following extra ...
3
votes
0answers
43 views

Ideal Location For Google Identity Toolkit *.p12 file [migrated]

I'm working on the Google Identity Toolkit, and have come across what appears to be a riddle. "Put the *.p12 file you just downloaded in a directory of your choosing which is private (you can't let ...
-1
votes
2answers
79 views

Do you keep using a compromised gmail account? [closed]

if you see under account info that your gmail account had suspicious activities, do you keep using the account after you beef up the security (such as changing the password)?
-1
votes
1answer
35 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
4
votes
3answers
119 views

Is my Google session safe when my computer is logged out or locked?

I've recently uploaded all the family photos to my Google Drive account. I have a strong password and 2 step verification enabled on my Google account. My home computer is (naturally) trusted and ...
8
votes
2answers
4k views

How to prove my Gmail has been hacked?

I believed that someone had hacked my Gmail because they were using information contained within my emails in an attempt to try to convince me that they were psychic. I told them that I didn't believe ...
5
votes
3answers
136 views

Is google saving clear text passwords? [closed]

On your GMail account you have the option to add other POP3 accounts to automatically fetch mail from them; Google Mail Fetcher. When enabled you have to specify your username and password, and the ...
10
votes
1answer
488 views

Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

I can't believe it happened to me but I entered Gmail account's user-name and password into a website as part of a phishing scam. I use Gmail's 2-step verification and have changed my password. Is ...
5
votes
0answers
113 views

Google blocks 100000..100000 [closed]

It's a simple question, if you search this string exactly 100000..100000 on Google, you get blocked. That doesn't happen with other search engines which makes me wonder if anybody knows why this ...
-2
votes
1answer
38 views

Google calendar security [closed]

What security measure has Google calendar offered us when I can view the calendar of people in my circle? Yeterday i was able to view my colleague's calendar by just entering his name from the ...
61
votes
3answers
6k views

Why is Google still using a sha1 certificate on its own site when they are phasing them out in Chrome?

Firefox dev tools shows that https://www.google.com is using a certificate signed with SHA1. Why is Google doing this when they are phasing out the certificate themselves? Shouldn't this only hurt ...
1
vote
1answer
152 views

Why does Google.com still support SSL v3?

The POODLE vulnerability was discovered by Google in October 2014, and unlike heartbleed, it had a simple solution: just disable SSL v3. Now, most of the websites have disabled SSL v3 but ironically ...
6
votes
1answer
293 views

How to fix a repeatedly hacked gmail account (where 2FA is enabled and passwords are changed)?

A friend of mine came to me for help with this issues. Her Gmail account has been hacked and keeps sending out spam emails to her contacts. This is happening to her on a monthly basis. Each time it ...
0
votes
1answer
86 views

What is safebrowsing.google.com ?Does it impact the security testing?

I recently security tested my web application using Firefox browser and while pentesting my webapplication i noticed safebrowsing.google.com,while i diged more about it ,i could able to retreive only ...
13
votes
4answers
1k views

Why will Google no longer allow me to end or begin passwords with a space? [closed]

Why won't Google allow me to use a password ending in a space anymore? Backstory: I have memorized a cipher that allows me to generate a different and very strong password across many different ...
0
votes
1answer
103 views

How to specifically whitelist JS libraries which need unsafe-eval

Is it possible to specify source list values based on the script src. The RFC mentions it, but I'm not sure about its usage. For example: Content-Security-Policy:default-src *; script-src ...
2
votes
2answers
76 views

What will happen to my Windows PC if I visit a site from a network marked as malicious by google safebrowsing [closed]

Google rated a whole network in china as malicious: http://www.google.com/safebrowsing/diagnostic?site=AS:4134 Quite a few of our customers have their websites hosted in that network (e.g. ...
0
votes
1answer
64 views

Does google store all the IPs since you opened the account?

As in title: Does google store all the IPs since you opened the account? What to do to see all logs since I created a gmail account?
2
votes
0answers
105 views

Can Google tech be trusted? [closed]

With the Snowden leaks, Google has been implicated in the activities of the NSA. There really is no way for ordinary citizens to know with certainty what the exact reality of this involvement is. In ...
1
vote
3answers
72 views

External JS Security

I'm kinda new to security development. I've work mostly with backend processing stuff. I've been assign on how to secure external javascript that we import from facebook, twitter and google. One ...
1
vote
0answers
65 views

How do I interact with Google to import email via imapsync? [closed]

I am developing an webapp that allows users to migrate a backup of their old mail into an existing webmail account using imapsync. The source of the mail is an old webmail system owned and ...
3
votes
1answer
111 views

How to implement application-specific passwords using strong hashes?

I am implementing a service where application-specific passwords seem a good choice to improve security. A question on why and when they might make sense has already been discussed here Google ...
1
vote
2answers
130 views

is it a virus I bring up google.com and it shows up as google.com.br I am in United States [closed]

https://www.google.com.br/?gfe_rd=cr&ei=QJsgVZWrNPKy8wfqroG4Dg Screen-reader users, click here to turn off Google Instant. +David Gmail Images Brasil Google.com.br offered in: português (Brasil) ...
-1
votes
1answer
158 views

What lasts 21 seconds at Google ? Pattern analysis

I'm kinda new in IT security and i'm analyzing some flows. The only informations i have are : *ip dst *timestamp *port dst *numbers of sources and flows. I noticed some suspicious flows coming from ...
1
vote
1answer
45 views

How someone would routinely email out a Google Doc [closed]

I have seen an issue where an account has been compromised and someone is routinely emailing out the contents of a google doc to another gmail account. The account password has been changed and the ...
2
votes
2answers
214 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
0
votes
1answer
60 views

Google Accounts login - is it good enough for financial services?

I am wondering - is using Google Accounts login (in a setup similar to this) secure enough for financial services (you can assume that if someone logs into your account, your money gets stolen)? On ...
0
votes
1answer
73 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
0
votes
1answer
188 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
1
vote
1answer
71 views

Does use of OpenID Connect for login imply Google can impersonate my users?

I am looking at integrating Google OpenID Connect (OAuth 2.0 for Login) as a login option for a web application. https://developers.google.com/accounts/docs/OpenIDConnect My question: Does use of ...
2
votes
2answers
205 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it belongs to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From here on, how ...
0
votes
1answer
140 views

Can Google's administrators be trusted with Google Authenticator? [duplicate]

Suppose there is an evil Google administrator who has full access to every server or network at Google. Will such a person be able to abuse the Google Authenticator technology to gain access to ...
2
votes
2answers
203 views

Stealing document.cookie from Google domain, is this a privacy breach?

When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...
0
votes
2answers
244 views

Google Analytics: Hacked or Ghost Referers?

I posted this question (Hacked or Ghost Referers) on Google groups earlier today, but I also wanted to see if the security experts here have any insight into this behavior. I've got a web application ...
3
votes
1answer
193 views

REST API stateless authentication using social login

I am implementing a REST API for our mobile applications in which user will login using the SDKs of various social media. Currently, the login strategy is as follows: The token(s) (access_token in ...
0
votes
2answers
92 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
11
votes
0answers
1k views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert. Now, In a course assignment, we are asked to ...
1
vote
1answer
299 views

Why isn't Google oauth2 giving a refresh token for Client-side applications?

I've been reading Google's oauth2 documentation for Client-side applications. I was surprised that nowhere does it mention refresh tokens. Also, their examples hint that the access_token has a default ...
-2
votes
2answers
204 views

Google is going to mark all HTTP traffics as insecure in 2015? [closed]

Firstly I would like to mention that I got this news from a blog I have read in last few days. This is only, perhaps, a rumor. If this is true, does this mean that anyone using Google Chrome or apps ...
0
votes
0answers
60 views

Request for Google Password for Calendar Updates

A website that I trust (Delta Airlines) offers a link to add flight information to Google Calendar; that link opens a window asking for my Google login and password. Based on the advice in a similar ...
-3
votes
2answers
161 views

Do website owners know what keywords a visitor typed in google search to get to their site? [closed]

Does google give the info to website owners / administrators... is I guess how it would work?
4
votes
3answers
2k views

Protected excel sheet is unprotected without permission in google spreadsheet [closed]

I created an Excel spreadsheet using Microsoft Excel 2013 with password protected cells (only particular cells. Other cells can be edited). When I open this spreadsheet in Google spreadsheet, I am ...
2
votes
2answers
246 views

Does using the Google Maps client-side Javascript API leak data?

I am currently working on a project where we are using Google Maps to display some data by using the client-side JS API to manually add the points on to the map once the user has clicked on a button. ...
0
votes
1answer
221 views

should I not accept cookies for the sake of anonymity?

Let's say I had a Gmail account. Should I just not have a Gmail account, or should I not use their cookies? How bad are the cookies, in of themselves? I obviously wouldn't log into it, with my VPN or ...
2
votes
1answer
454 views

Is Google's password recovery by entering an old password a bad practice?

When you try and recover your password on Google, you will eventually stumble across this screen, and it made me wonder: Isn't this type of password recovery from Google essentially the same as ...
2
votes
1answer
120 views

While logged in to Google etc., can a malicious site discover my ID?

If I visited a malicious site while being logged in to Google, Hotmail, Facebook, or Twitter in the same browser window, how hard is it for the site to discover my account IDs without my explicit ...
1
vote
1answer
97 views

encryption of Google's android apps

Does Google use encryption on it's Android apps like Gmail, drive, Google Play, docs, others in authentication and transit? What the type of encryption is it? Is it secure? I have tried searching ...
1
vote
2answers
294 views

bit.ly is not safe and an attack page? [duplicate]

I click on a bit.ly link on a Youtube video and I was fronted with this. I have used bit.ly before and I entered the url manually, but Firefox came up with this. Any ideas?
0
votes
2answers
135 views

Does Google catches and keeps users typing patterns [closed]

Does Google catches and keeps users typing patterns for identifying purposes? for example when I'm logged in my Google account and Searching for things Google records my "Typing Pattern" like typing ...