Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

3
votes
1answer
242 views

3000 new contacts being added to gmail after receiving an email

Recently I realized that there are three thousand contacts with same name and email address in my Google contacts. The name belongs to an email that I have recently received and responded to, nothing ...
32
votes
2answers
2k views

Why does Google cripple the 2FA Google Authenticator PAM module?

If you enable 2FA for Google Apps the shared secret is 160 bits. The google_authenticator PAM module on the other hand seems to use 80 bits for the shared secret. According to RFC 4226: R6 - The ...
2
votes
1answer
973 views

Android access tokens and access to all google services

My questions is based on the asnwer on that question: Can the Gmail password be recovered from the Android Gmail app? So, as I understand when we setup google account on Android devices, it stores ...
10
votes
7answers
15k views

Using google dorks for a specific site?

I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this. Traditionally, one uses a 'dork' by searching "Index ...
2
votes
2answers
273 views

how is Google Ads managing to track me? (even if I don't keep cookies!??) [duplicate]

NOTE: in this question I am interested in discovering the actual method used by Google to track me -in my particular case- and in exploring eventual ways to circumvent it. This is completely different ...
0
votes
1answer
853 views

Google Chrome - save usernames NOT passwords [closed]

I've scoured the settings page and googled this to no avail. I want Chrome to stop saving my passwords BUT keep saving usernames/email. Is that possible? All I seem to be able to do is disable ...
4
votes
3answers
772 views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
0
votes
2answers
940 views

Google Authenticator - Counter Based [duplicate]

I'm trying to understand How google authenticator - counter based work. I have tried googling around finding a demo or at least how this work. I understand its a one time password but not like TOTP. I ...
-4
votes
5answers
820 views

Google Calendar has events that I didn't create and it's not shared

This has been rewritten because at first I thought this may be an accident but now it’s clear there’s a security compromise. In my Google Calendar I noticed an event that occurred each day from ...
1
vote
2answers
1k views

Privacy of Gmail for business?

Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent ...
6
votes
3answers
1k views

Telemedicine on Google+ Hangouts or Skype. Is it encrypted?

Would one be able to have a telemedicine conversation with a patient with google+ hangouts the way one can over a telephone? In other words does the security satisfy the HIPAA regulations that say ...
0
votes
1answer
17k views

Error150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a forgery [duplicate]

Help me guys please i'm having an problem with my google account. I can't log in it keeps saying : Error 150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a ...
10
votes
4answers
676 views

What is the use of the “secret” displayed when setting up 2 Factor Authentication?

What is the purpose of the "secret" that is displayed when you take the picture of the QR code to set up 2 Factor Authentication on a non-Google site? Why would you need it? If you save it, doesn't ...
0
votes
2answers
86 views

How to log into sites that you have set up Google 2 Step Authenticator if you lose your phone?

If you use Google Authenticator to log into sites using 2 Factor Authentication, how do you log in after you lose your phone? Can you install Google Authenticator on another device?
0
votes
2answers
361 views

Do Google 2 Factor Auth backup codes work for logging into Google or other sites?

I set up Google 2 Factor Auth to log into other sites. I see there are backup codes if you lose your device. Are these used only to log into Google, or can they be used to log into other sites?
-2
votes
2answers
364 views

Why doesn't Google 2 Factor Auth ask for a code? [closed]

I set up Google 2 Factor auth to use 2 Factor Auth with certain sites. But reading over the help suggests that Google 2 Factor Auth is only used to log into Google services like Gmail. But when I log ...
-2
votes
1answer
590 views

What are some good user login/authentication libraries or protocols to use with Python on Google App Engine? [closed]

I've read elsewhere (http://forums.udacity.com/questions/6028436/bcrypt-not-suitable-for-pythongae) that bcrypt is not suitable for use on Google App Engine. What are some good ways to create a user ...
5
votes
1answer
2k views

What are the privacy pros and cons of using a public DNS server vs. your own?

Whether I'm using a normal internet connection setup, or tunnelling it through an anonymizing VPN or through TOR, what information of mine is revealed to whatever DNS server that I choose (e.g. Google ...
4
votes
1answer
404 views

Authenticate users through Google using only an OAuth2 access token

I have a question about having users logon to my service using their Google Credentials. I've gone through the Using OAuth 2.0 for Login documentation provided by Google. The documentation mentions ...
1
vote
1answer
210 views

When a browser extension or user script pulls a JS file from Google's CDN, how does this compromise the user's privacy in terms of Google's reach? [duplicate]

The context from which my question has arisen is this user script which locally removes ads from Ixquick.com, which is an anonymizing 'proxy' search engine that gives the results from Google's index ...
9
votes
1answer
38k views

Can the Gmail password be recovered from the Android Gmail app?

I have an Android device with the Gmail app installed. This app can access the mailbox so there must be some kind of authentication data stored on the device (possibly an application specific ...
9
votes
2answers
904 views

Privacy risk in using Google APIs

If I use JQuery from Google APIs: http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js Is there a privacy risk to my site? E.g. does this link enable Google to read my pages, track my ...
1
vote
1answer
50 views

How to avoid GAE app traffic being abused?

I am going to develop a simple CMS site on top of Google App Engine using webapp2. I am wondering how avoid malicious data scrapers to deliberately get the pages in order to make the app consume ...
0
votes
1answer
236 views

How does does the “Sign out all other sessions” feature work in Gmail?

In Gmail, at the bottom of the screen if you click Details it will show you your recent account activity and there's a button to sign you out of all other sessions. How does this work? Are they ...
7
votes
3answers
449 views

Does Gmail 2-factor auth increase security on smartphones?

So I have enabled 2-factor authentication on Gmail, which means that if I log in on a new machine, it sends a token to my phone. Now, if I access Gmail from my phone, it seems like I have only one ...
2
votes
2answers
602 views

How does Google detect new devices for two factor authentication

When you enable two step verification for google accounts, you get sent a code by SMS to enter in addition to your username and password the first time you log in with a new device. How do they ...
1
vote
1answer
130 views

AppEngine Sandbox

Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
61
votes
3answers
17k views

How does Google Authenticator work?

Google Authenticator is an alternative to SMS for 2Step verification, installing an app on Android where the codes will be sent. It works without any connectivity; it even works on plane mode. This ...
15
votes
2answers
909 views

Can robots.txt for your face be made effective?

As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
2
votes
3answers
4k views

How to use information from GHDB and FSDB (Google-Dorks)?

I am new to information security and analysis. Recently, I came across FSDB (Foundstone database) and GHDB (Google Hacking database) while exploring the McAfee Foundstone Sitedigger tool. What are ...
-1
votes
1answer
412 views

Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]

Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
-1
votes
2answers
355 views

Hiding emails from Google [closed]

From what I understand Google reads/scans all my emails so that they cab "provide" targeted ads and maybe for other reasons. If a have a group of people who want to hide their emails from Google, how ...
-2
votes
3answers
2k views

How does Google get information about FTP servers - and how to avoid it?

I searched the internet like this inurl:ftp -inurl:(http|https). I found many FTP hosts. I can add or remove files from some hosts. How does Google get information about FTP servers? How can one avoid ...
2
votes
1answer
684 views

Google Cloud Messaging Spoof

I have few question on security of Google Cloud Messaging Service (GCM) Is it possible to spoof messages that GCM server sends to android clients? Does server pushes data in encrypted format? Data ...
3
votes
2answers
473 views

Is Chrome giving out information about me?

I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
6
votes
2answers
2k views

Will reporting phishing emails cause problems for the victim?

On GMail, I've received a phishing email from someone I know, and the email has been sent to other people the victim knows. One of the emails is claiming to be from their GMail address, while the ...
17
votes
2answers
1k views

Which SSH security is stronger? 2 Factor or Public key

For SSH authentication, which is more secure? 2 Factor Authentication using a USB token/Google Authenticator(time based) OR Public/private key with password Or could they be both used at the same ...
1
vote
1answer
766 views

Can I used Google Authenticator with Radius and VMwareview

We're looking to add 2 factor and one of the options is google authenticator and I was wondering if we can attach that to a radius server attached to our VM infrastructure for remote access. All ...
3
votes
3answers
1k views

What should I do if I type my password in the address bar, or type password in google search?

When someone accidentally types his or her password in one of the following three locations and presses enter, what should they do? username text box address bar Google search What do you suggest, ...
4
votes
1answer
1k views

How does automated query compromise other Google users?

Sometimes when using TOR browser / tor proxy, Google refuses to process the request you issue, especially if it's in a different language (e.g. searching for Arabic word while using German proxy). ...
-1
votes
2answers
126 views

Can 2FA help handle mixed personal and business accounts after leaving a company?

I do not want a super administrator in Google Apps to log to my account after leaving company, so I enabled 2-step verification. He could login to many sites as me with just a link in "forget ...
3
votes
5answers
393 views

Should I change password after servicing a tablet?

Recently I had problems with my android tablet. I sent it for repair, and they replaced it because it was not possible to repair it. But, before sending I forgot to disable my accounts. Are people ...
111
votes
9answers
12k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
2
votes
2answers
1k views

Use HTTP POST for Google Search queries

When searching on Google from a browser, the actual search query is visible in the address bar of the browser, even when using Google's secure search (https). Is there a way to submit the search query ...
3
votes
1answer
127 views

Application communication monitoring

I am seeking a way to monitor communication between Android applications in order to detect their suspicious behaviour but I am not sure where to start the development process from. As far I have ...
2
votes
3answers
778 views

Google Mail alert message. Hacker from China

I have had a red warning box on top of the page when I access GMail. It says that there have been three attacks from China: IP Address: 117.70.121.33 Location: Xuancheng, Anhui, China and ...
3
votes
1answer
381 views

How strong are google's Application-specific passwords? [duplicate]

Possible Duplicate: Google Account: implications of using application-specific passwords In 2-step verification of google accounts, we need to use the Application-specific passwords ...
3
votes
1answer
176 views

Amavisd-New and Google safe browsing

I am studying the Google Safe Browsing. How do I know that it is possible to intercept a content of an email via amavis, I wonder if I can, for each url found, consult the Google safe browsing? Do ...
1
vote
4answers
551 views

Security implications of using a OAuth-enabled password manager

I've resisted the idea of password managers for a long time. Bringing together passwords for all your online accounts in one place that is only protected by difficult-to-remember master password ...
18
votes
4answers
6k views

Google Account: implications of using application-specific passwords

In the wake of the recent Mat Honan story I decided to try out two-factor authentication on my Google account. But in order to keep using it with Exchange, the Android OS, Google Talk and Google ...