Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

1
vote
1answer
35 views

How someone would routinely email out a Google Doc [on hold]

I have seen an issue where an account has been compromised and someone is routinely emailing out the contents of a google doc to another gmail account. The account password has been changed and the ...
1
vote
2answers
103 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
0
votes
1answer
43 views

Google Accounts login - is it good enough for financial services?

I am wondering - is using Google Accounts login (in a setup similar to this) secure enough for financial services (you can assume that if someone logs into your account, your money gets stolen)? On ...
0
votes
1answer
63 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
0
votes
1answer
64 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
1
vote
1answer
41 views

Does use of OpenID Connect for login imply Google can impersonate my users?

I am looking at integrating Google OpenID Connect (OAuth 2.0 for Login) as a login option for a web application. https://developers.google.com/accounts/docs/OpenIDConnect My question: Does use of ...
0
votes
2answers
95 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it most likely belong to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From ...
0
votes
1answer
94 views

Can Google's administrators be trusted with Google Authenticator? [duplicate]

Suppose there is an evil Google administrator who has full access to every server or network at Google. Will such a person be able to abuse the Google Authenticator technology to gain access to ...
2
votes
2answers
126 views

Stealing document.cookie from Google domain, is this a privacy breach?

When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...
0
votes
2answers
131 views

Google Analytics: Hacked or Ghost Referers?

I posted this question (Hacked or Ghost Referers) on Google groups earlier today, but I also wanted to see if the security experts here have any insight into this behavior. I've got a web application ...
3
votes
0answers
110 views

REST API stateless authentication using social login

I am implementing a REST API for our mobile applications in which user will login using the SDKs of various social media. Currently, the login strategy is as follows: The token(s) (access_token in ...
0
votes
2answers
72 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
7
votes
0answers
468 views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert Now, In a course assignment, we are asked to ...
0
votes
1answer
112 views

Why isn't Google oauth2 giving a refresh token for Client-side applications?

I've been reading Google's oauth2 documentation for Client-side applications. I was surprised that nowhere does it mention refresh tokens. Also, their examples hint that the access_token has a default ...
-1
votes
2answers
177 views

Google is going to mark all HTTP traffics as insecure in 2015? [closed]

Firstly I would like to mention that I got this news from a blog I have read in last few days. This is only, perhaps, a rumor. If this is true, does this mean that anyone using Google Chrome or apps ...
0
votes
0answers
53 views

Request for Google Password for Calendar Updates

A website that I trust (Delta Airlines) offers a link to add flight information to Google Calendar; that link opens a window asking for my Google login and password. Based on the advice in a similar ...
-3
votes
2answers
131 views

Do website owners know what keywords a visitor typed in google search to get to their site? [closed]

Does google give the info to website owners / administrators... is I guess how it would work?
4
votes
3answers
1k views

Protected excel sheet is unprotected without permission in google spreadsheet [closed]

I created an Excel spreadsheet using Microsoft Excel 2013 with password protected cells (only particular cells. Other cells can be edited). When I open this spreadsheet in Google spreadsheet, I am ...
2
votes
2answers
125 views

Does using the Google Maps client-side Javascript API leak data?

I am currently working on a project where we are using Google Maps to display some data by using the client-side JS API to manually add the points on to the map once the user has clicked on a button. ...
0
votes
1answer
121 views

should I not accept cookies for the sake of anonymity?

Let's say I had a Gmail account. Should I just not have a Gmail account, or should I not use their cookies? How bad are the cookies, in of themselves? I obviously wouldn't log into it, with my VPN or ...
2
votes
1answer
323 views

Is Google's password recovery by entering an old password a bad practice?

When you try and recover your password on Google, you will eventually stumble across this screen, and it made me wonder: Isn't this type of password recovery from Google essentially the same as ...
2
votes
1answer
104 views

While logged in to Google etc., can a malicious site discover my ID?

If I visited a malicious site while being logged in to Google, Hotmail, Facebook, or Twitter in the same browser window, how hard is it for the site to discover my account IDs without my explicit ...
1
vote
1answer
82 views

encryption of Google's android apps

Does Google use encryption on it's Android apps like Gmail, drive, Google Play, docs, others in authentication and transit? What the type of encryption is it? Is it secure? I have tried searching ...
1
vote
2answers
279 views

bit.ly is not safe and an attack page? [duplicate]

I click on a bit.ly link on a Youtube video and I was fronted with this. I have used bit.ly before and I entered the url manually, but Firefox came up with this. Any ideas?
0
votes
2answers
119 views

Does Google catches and keeps users typing patterns [closed]

Does Google catches and keeps users typing patterns for identifying purposes? for example when I'm logged in my Google account and Searching for things Google records my "Typing Pattern" like typing ...
-4
votes
3answers
214 views

Why doesn't Google Safe Browsing block the IP addresses of malicious websites?

If you visit a blocked domain name like www.thelotbet.cn from Google Chrome, Opera or Firefox, you will get a warning from Google Safe Browsing that this is a malicious website. But if you visit the ...
0
votes
0answers
23 views

return list of sites with similar unique IDs (e.g. Adwords)

I have been using http://sameid.net/ to discover sites which have the same unique ID as a page in question for a number of affiliate and advertising networks. However, I am wondering if there is a ...
0
votes
1answer
79 views

How do you log into Amazon Web Services if you lose your phone which has Google 2-factor authentication set up?

And if it is possible, how do you prevent other people from claiming they are you and lost their phone? Amazon only directs you to a page which does not exist. http://aws.amazon.com/iam/faqs/ If ...
1
vote
1answer
123 views

Mentioned On A Blog By A “Hacker” - Should I Care?

Some (insert noun here) who seems to be a black hat hacker thinks that I am his #1 enemy and has posted some of my information on his blog. He is mad because I am advertising for others. The ...
1
vote
1answer
119 views

Securing an OAuth / OpenID Connect identity in a cookie for easy login

I have a website that uses Azure Active Directory or Google+ for logging in. I go through an OAuth2 login flow, and the users email along with their tokens are returned to me by their identity ...
1
vote
2answers
117 views

Unexpected emails have been sent - do I need to wipe my Android?

A few days ago I received a Notification from my Android saying that it could not send mail because an attachment was too large. I opened my Gmail App and found 5 messages in the Sent Mail folder ...
1
vote
0answers
44 views

Google Eclipse plugin manual telling to skip security warning. What are the risks?

I'm trying to install GWT plugin for Eclipse. The Google manual says among other things Eclipse indeed shows that message during installation. The questions are: What exactly does that message ...
4
votes
2answers
300 views

Google+ Sign In - One Time Code Flow vs Pure Server Side flow

I'm reading the documentation about Google+ Sign In, more specifically, its server side flow. It says (https://developers.google.com/+/web/signin/redirect-uri-flow) that one-time code flow has ...
3
votes
1answer
2k views

How secure are Google (Drive) Web Forms?

My child's school is using a Google Web Form to collect student and parent information, including occupations, addresses, maiden name, birthdays, contact information, and who the child resides with. ...
1
vote
1answer
692 views

How does wifi-based geolocation work? [closed]

Looking at the Google geolocation API it claims: Geolocation API returns a location and accuracy radius based on information about cell towers and WiFi nodes that the mobile client can detect. ...
20
votes
3answers
7k views

What are the dangers of allowing “less secure apps” to access my Google account?

According to https://support.google.com/accounts/answer/6010255: Google may block sign in attempts from some apps or devices that do not use modern security standards. Since these apps and devices ...
12
votes
4answers
1k views

Downsides to using HTTPS [duplicate]

Recently Google has indicated that a HTTPS certificate will be used as a positive signal in it's search rankings. This has caused some discussion within our company as to if we should apply a HTTPS ...
51
votes
6answers
23k views

Can my IT department read my Google Hangouts chats while at work?

Is Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but ...
0
votes
2answers
300 views

What tools does the Google safe browsing service rely on?

What are the tools Google uses to blacklist a website as being malicious (hosting a web malware)? I know it is partly fed by users themselves who can enter unsafe URLs into Google's database. But ...
2
votes
0answers
378 views

Why does Google allow non-HTTPS searches? [closed]

I found today that Google allows you to reach its search engine and submit searches over non-https connection. Visiting http://google.com, results in a redirect to the URL ...
1
vote
1answer
204 views

Is there any need to penetration test a GoogleAppEngine solution?

Is there any need to penetration test a GoogleAppEngine solution? Or will it be protected by googles existing infrastructure?
1
vote
1answer
380 views

How long does it take for Google to detect click fraud and suspend an AdSense account? [closed]

Click farms can be hired to boost ad revenue. http://www.security-faqs.com/what-is-a-click-farm.html The click farm is made up of armies of low paid workers who’s job is to click on links, surf ...
41
votes
8answers
6k views

What are some considerations before moving personal data to Google Drive?

I am considering uploading some (all) of my digital personal data to Google Drive. I guess this would instantly grant access for NSA to my data. (Is that right?) Who would have access to my data on ...
0
votes
1answer
364 views

My cookies have been stolen. What to do?

About a month and a half ago I got infected by a virus called MSIL.Bladabindi. I noticed the virus quite soon because google notified me that someone from Turkey tried to access my account (I'm in ...
2
votes
4answers
129 views

Can webpages using the Google plus button get my name?

When I'm logged into my Google account, and I visit a web page that contains the Google Plus "+1" button, does a script have access to my name, even if I don't interact with the Google Plus widget?
8
votes
5answers
2k views

Is it ethical to use ReCAPTCHA to decode house addresses? [closed]

I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode. How ethical is it for Google to do this to this? Does it hamper privacy of an ...
0
votes
0answers
184 views

Starting database security for web app that logs in with Facebook/Google JS SDKs

I have been making a web app that uses Facebook and Google JavaScript APIs to login (no email login) on the client side and currently it accesses a localhost MySQL database directly using PHP and ...
6
votes
1answer
153 views

Google Authenticator Error on Reboot

I have set up an SSH server to accept only login using codes generated by Google Authenticator (I have disabled all other forms of authentication on that port). After having rebooted my remote ...
2
votes
1answer
403 views

How can the Google web crawler bypass portals?

This is a situation that I have encountered on a number of occasions. I will conduct a web search in Google, a link to a file (.pdf for example) will take you to that file on the server. It opens up ...
1
vote
2answers
576 views

Does gmail's TOS allow Google to steal your emailed ideas?

Is it unwise to use gmail to discuss business ideas that Google could snoop on and use to their business advantage? I know that email is not secure and anyone could read it along its path of ...