Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

2
votes
1answer
417 views

Why is google's site identity icon a red lock?

Why does google.com have this icon (see picture) for me? What does it mean? Screenshot: Google.com. There are two lock icons. The top one is RED and the bottom one is green. Screenshot: Google.se. ...
0
votes
2answers
45 views

Google Analytics showing page views from pages I don't have on my server? [closed]

What does this mean? I don't have these pages/directories but GA is showing them as pages viewed. I tried to follow the link and I didn't make much sense out of it.
2
votes
3answers
329 views

Someone shared their google account with me, am I vulnerable?

Recently a friend gave me the credentials to his Google account (GMail and password), so I could check his email while he was on a trip (with no cell signal). He is a trusted friend and not ...
4
votes
1answer
144 views

Way to keep Google from knowing the SIM card I am using on Android

We see that the the details of the Telecom operator along with other details are available to Google for the SIM card that we are using on an Android Phone. Is there any way that can be applied or ...
36
votes
8answers
6k views

Should we store personally identifiable information on google drive?

For a number of reasons, including remote accessibility, my company would like to move all of our accounting records, account applications, and marketing materials to Google’s Apps for Work Drive. At ...
0
votes
1answer
79 views

Google Blacklist Workaround? [closed]

I have a WordPress site that google believes to contain malware and as such, they've blacklisted the IP. The malware has already been removed and I am taking steps to get google to remove the IP ...
2
votes
1answer
244 views

Why Can't Google Just Switch to Pushing Android Security Updates Directly to Users?

Okay, I'll just begin with the question and then elaborate a bit below. It is: Why has the world's dominant maker of non-Apple smartphone operating systems, Google, still not adopted a ...
1
vote
0answers
116 views

How do ad networks and analytics providers encrypt/hash their traffic?

I am trying to observe what types of information android apps are sending to ad networks that are integrated into apps. I used Fiddler to decrypt the https traffic. However, some ad networks seem to ...
1
vote
1answer
223 views

How are Google searches intercepted when they are supposed to be encrypted with https?

In various news sources I read often that Google search terms are mass intercepted and tracked. I wonder how is this even technically possible when communication between PC/phone to Google is ...
7
votes
1answer
302 views

What to do when Google disables SSLv3 and RC4?

I've read this article from Google's Online Security Blog, and it says that Google will disable support for SSLv3 and RC4. Here's the reason: SSLv3 has been obsolete for over 16 years and is so ...
20
votes
8answers
9k views

On two-step login forms, why is it the login name and not the password that's asked first?

There are several login forms (e.g. Google's) on the internet where you first enter your login name and then, once that's submitted, you get to enter your password. One of the advantages of this is, ...
-2
votes
4answers
197 views

Google News, unencrypted by default- MITM vulnerability?

http://news.google.com Of course, if you are already logged into a Google account for that browser session, it is served encrypted. So when a user visits unencrypted Google News page, and taking ...
2
votes
2answers
2k views

Why does Google Safe Browsing keep detecting malware on my website?

We provide a freemium service to upload large files and download them later on. Using ClamAV, we scan every file for viruses after it is uploaded and before it can be downloaded. The file is deleted ...
8
votes
1answer
339 views

where did they get my Gmail address?

I pointed my browser at the website of a web developer I barely know, and the page returned was his home page, with the message "Welcome myname@gmail.com!" Whoa. Where did it get my Gmail address? ...
2
votes
0answers
90 views

Does the Java version matter when compiling an Android, Amazon, or Blackberry app? (for security reasons)

I need to compile an app that will run on an Android, or Android compatible system (Android, Amazon Fire, or Blackberry). The developer documentation says that JDK 7 is needed, however there are ...
1
vote
2answers
126 views

Online Marketing company want me to share my Google Account login details?

We are a small business and use "Google Apps for Work" and my google apps account was used to set up the business's "Google My Business" and related Google+ pages We have now engaged an online ...
2
votes
2answers
142 views

Is Google 2-factor “Remember this Computer” secure against adversaries with root access?

This question concerns the type of 2-factor authentication implemented by Google Accounts. The response to this question describes securing transfer of the secret key via a secure cookie. But what ...
2
votes
1answer
216 views

Is it safe to create a user account using the id_token provided by google's sign in?

I have a chrome extension which allows users to exclusively login with google and no other provider. In my (node + couchdb) backend I need to construct a user account from the auth Response provided ...
-1
votes
1answer
58 views

google site tag resuts [closed]

If I go to http://sppp.rajasthan.gov.in/robots.txt I get: User-Agent: * Disallow: Allow: / That means that crawlers are allowed to fully access the website and index everything. If so then why ...
2
votes
0answers
103 views

Is there an iframe attack surface to webcache.googleusercontent.com?

I've noticed that one of my web-sites shows up pretty much blank when viewed from Google Cache at webcache.googleusercontent.com, because Google apparently must be inserting the following extra ...
-1
votes
2answers
134 views

Do you keep using a compromised gmail account? [closed]

if you see under account info that your gmail account had suspicious activities, do you keep using the account after you beef up the security (such as changing the password)?
0
votes
1answer
87 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
5
votes
3answers
213 views

Is my Google session safe when my computer is logged out or locked?

I've recently uploaded all the family photos to my Google Drive account. I have a strong password and 2 step verification enabled on my Google account. My home computer is (naturally) trusted and ...
8
votes
2answers
6k views

How to prove my Gmail has been hacked?

I believed that someone had hacked my Gmail because they were using information contained within my emails in an attempt to try to convince me that they were psychic. I told them that I didn't believe ...
6
votes
3answers
197 views

Is google saving clear text passwords? [closed]

On your GMail account you have the option to add other POP3 accounts to automatically fetch mail from them; Google Mail Fetcher. When enabled you have to specify your username and password, and the ...
12
votes
1answer
2k views

Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

I can't believe it happened to me but I entered Gmail account's user-name and password into a website as part of a phishing scam. I use Gmail's 2-step verification and have changed my password. Is ...
5
votes
0answers
144 views

Google blocks 100000..100000 [closed]

It's a simple question, if you search this string exactly 100000..100000 on Google, you get blocked. That doesn't happen with other search engines which makes me wonder if anybody knows why this ...
-3
votes
1answer
53 views

Google calendar security [closed]

What security measure has Google calendar offered us when I can view the calendar of people in my circle? Yeterday i was able to view my colleague's calendar by just entering his name from the ...
65
votes
3answers
8k views

Why is Google still using a sha1 certificate on its own site when they are phasing them out in Chrome?

Firefox dev tools shows that https://www.google.com is using a certificate signed with SHA1. Why is Google doing this when they are phasing out the certificate themselves? Shouldn't this only hurt ...
1
vote
1answer
197 views

Why does Google.com still support SSL v3?

The POODLE vulnerability was discovered by Google in October 2014, and unlike heartbleed, it had a simple solution: just disable SSL v3. Now, most of the websites have disabled SSL v3 but ironically ...
8
votes
2answers
2k views

How to fix a repeatedly hacked gmail account (where 2FA is enabled and passwords are changed)?

A friend of mine came to me for help with this issues. Her Gmail account has been hacked and keeps sending out spam emails to her contacts. This is happening to her on a monthly basis. Each time it ...
0
votes
1answer
413 views

What is safebrowsing.google.com ?Does it impact the security testing?

I recently security tested my web application using Firefox browser and while pentesting my webapplication i noticed safebrowsing.google.com,while i diged more about it ,i could able to retreive only ...
11
votes
4answers
2k views

Why will Google no longer allow me to end or begin passwords with a space? [closed]

Why won't Google allow me to use a password ending in a space anymore? Backstory: I have memorized a cipher that allows me to generate a different and very strong password across many different ...
0
votes
1answer
538 views

How to specifically whitelist JS libraries which need unsafe-eval

Is it possible to specify source list values based on the script src. The RFC mentions it, but I'm not sure about its usage. For example: Content-Security-Policy:default-src *; script-src ...
2
votes
2answers
90 views

What will happen to my Windows PC if I visit a site from a network marked as malicious by google safebrowsing [closed]

Google rated a whole network in china as malicious: http://www.google.com/safebrowsing/diagnostic?site=AS:4134 Quite a few of our customers have their websites hosted in that network (e.g. ...
0
votes
1answer
155 views

Does google store all the IPs since you opened the account?

As in title: Does google store all the IPs since you opened the account? What to do to see all logs since I created a gmail account?
3
votes
0answers
130 views

Can Google tech be trusted? [closed]

With the Snowden leaks, Google has been implicated in the activities of the NSA. There really is no way for ordinary citizens to know with certainty what the exact reality of this involvement is. In ...
1
vote
3answers
128 views

External JS Security

I'm kinda new to security development. I've work mostly with backend processing stuff. I've been assign on how to secure external javascript that we import from facebook, twitter and google. One ...
3
votes
1answer
153 views

How to implement application-specific passwords using strong hashes?

I am implementing a service where application-specific passwords seem a good choice to improve security. A question on why and when they might make sense has already been discussed here Google ...
1
vote
2answers
288 views

is it a virus I bring up google.com and it shows up as google.com.br I am in United States [closed]

https://www.google.com.br/?gfe_rd=cr&ei=QJsgVZWrNPKy8wfqroG4Dg Screen-reader users, click here to turn off Google Instant. +David Gmail Images Brasil Google.com.br offered in: português (Brasil) ...
-2
votes
1answer
180 views

What lasts 21 seconds at Google ? Pattern analysis

I'm kinda new in IT security and i'm analyzing some flows. The only informations i have are : *ip dst *timestamp *port dst *numbers of sources and flows. I noticed some suspicious flows coming from ...
1
vote
1answer
55 views

How someone would routinely email out a Google Doc [closed]

I have seen an issue where an account has been compromised and someone is routinely emailing out the contents of a google doc to another gmail account. The account password has been changed and the ...
2
votes
2answers
451 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
0
votes
1answer
96 views

Google Accounts login - is it good enough for financial services?

I am wondering - is using Google Accounts login (in a setup similar to this) secure enough for financial services (you can assume that if someone logs into your account, your money gets stolen)? On ...
1
vote
1answer
167 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
1
vote
1answer
463 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
2
votes
1answer
123 views

Does use of OpenID Connect for login imply Google can impersonate my users?

I am looking at integrating Google OpenID Connect (OAuth 2.0 for Login) as a login option for a web application. https://developers.google.com/accounts/docs/OpenIDConnect My question: Does use of ...
1
vote
2answers
424 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it belongs to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From here on, how ...
1
vote
1answer
246 views

Can Google's administrators be trusted with Google Authenticator? [duplicate]

Suppose there is an evil Google administrator who has full access to every server or network at Google. Will such a person be able to abuse the Google Authenticator technology to gain access to ...
2
votes
2answers
505 views

Stealing document.cookie from Google domain, is this a privacy breach?

When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...