Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

0
votes
1answer
99 views

Google Accounts login - is it good enough for financial services?

I am wondering - is using Google Accounts login (in a setup similar to this) secure enough for financial services (you can assume that if someone logs into your account, your money gets stolen)? On ...
1
vote
1answer
209 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
1
vote
1answer
477 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
2
votes
1answer
125 views

Does use of OpenID Connect for login imply Google can impersonate my users?

I am looking at integrating Google OpenID Connect (OAuth 2.0 for Login) as a login option for a web application. https://developers.google.com/accounts/docs/OpenIDConnect My question: Does use of ...
1
vote
2answers
453 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it belongs to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From here on, how ...
1
vote
1answer
251 views

Can Google's administrators be trusted with Google Authenticator? [duplicate]

Suppose there is an evil Google administrator who has full access to every server or network at Google. Will such a person be able to abuse the Google Authenticator technology to gain access to non-...
2
votes
2answers
551 views

Stealing document.cookie from Google domain, is this a privacy breach?

When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...
0
votes
2answers
377 views

Google Analytics: Hacked or Ghost Referers?

I posted this question (Hacked or Ghost Referers) on Google groups earlier today, but I also wanted to see if the security experts here have any insight into this behavior. I've got a web application ...
3
votes
1answer
493 views

REST API stateless authentication using social login

I am implementing a REST API for our mobile applications in which user will login using the SDKs of various social media. Currently, the login strategy is as follows: The token(s) (access_token in ...
0
votes
2answers
121 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
13
votes
1answer
1k views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert. Now, In a course assignment, we are asked to ...
1
vote
1answer
487 views

Why isn't Google oauth2 giving a refresh token for Client-side applications?

I've been reading Google's oauth2 documentation for Client-side applications. I was surprised that nowhere does it mention refresh tokens. Also, their examples hint that the access_token has a default ...
-1
votes
2answers
260 views

Google is going to mark all HTTP traffics as insecure in 2015? [closed]

Firstly I would like to mention that I got this news from a blog I have read in last few days. This is only, perhaps, a rumor. If this is true, does this mean that anyone using Google Chrome or apps ...
0
votes
0answers
83 views

Request for Google Password for Calendar Updates

A website that I trust (Delta Airlines) offers a link to add flight information to Google Calendar; that link opens a window asking for my Google login and password. Based on the advice in a similar ...
-3
votes
2answers
230 views

Do website owners know what keywords a visitor typed in google search to get to their site? [closed]

Does google give the info to website owners / administrators... is I guess how it would work?
4
votes
3answers
3k views

Protected excel sheet is unprotected without permission in google spreadsheet [closed]

I created an Excel spreadsheet using Microsoft Excel 2013 with password protected cells (only particular cells. Other cells can be edited). When I open this spreadsheet in Google spreadsheet, I am ...
3
votes
2answers
646 views

Does using the Google Maps client-side Javascript API leak data?

I am currently working on a project where we are using Google Maps to display some data by using the client-side JS API to manually add the points on to the map once the user has clicked on a button. ...
0
votes
1answer
523 views

should I not accept cookies for the sake of anonymity?

Let's say I had a Gmail account. Should I just not have a Gmail account, or should I not use their cookies? How bad are the cookies, in of themselves? I obviously wouldn't log into it, with my VPN or ...
2
votes
1answer
596 views

Is Google's password recovery by entering an old password a bad practice?

When you try and recover your password on Google, you will eventually stumble across this screen, and it made me wonder: Isn't this type of password recovery from Google essentially the same as ...
2
votes
1answer
132 views

While logged in to Google etc., can a malicious site discover my ID?

If I visited a malicious site while being logged in to Google, Hotmail, Facebook, or Twitter in the same browser window, how hard is it for the site to discover my account IDs without my explicit ...
2
votes
2answers
146 views

Encryption of Google's Android apps

Does Google use network encryption on it's Android apps like Gmail, Drive, Google Play, Docs, and others when doing authentication/data transfer? What type of encryption is it? Is it secure? I have ...
1
vote
2answers
458 views

bit.ly is not safe and an attack page? [duplicate]

I click on a bit.ly link on a Youtube video and I was fronted with this. I have used bit.ly before and I entered the url manually, but Firefox came up with this. Any ideas?
0
votes
2answers
169 views

Does Google catches and keeps users typing patterns [closed]

Does Google catches and keeps users typing patterns for identifying purposes? for example when I'm logged in my Google account and Searching for things Google records my "Typing Pattern" like typing ...
-5
votes
3answers
674 views

Why doesn't Google Safe Browsing block the IP addresses of malicious websites?

If you visit a blocked domain name like www.thelotbet.cn from Google Chrome, Opera or Firefox, you will get a warning from Google Safe Browsing that this is a malicious website. But if you visit the ...
0
votes
1answer
594 views

How do you log into Amazon Web Services if you lose your phone which has Google 2-factor authentication set up?

And if it is possible, how do you prevent other people from claiming they are you and lost their phone? Amazon only directs you to a page which does not exist. http://aws.amazon.com/iam/faqs/ If ...
2
votes
1answer
151 views

Mentioned On A Blog By A “Hacker” - Should I Care?

Some (insert noun here) who seems to be a black hat hacker thinks that I am his #1 enemy and has posted some of my information on his blog. He is mad because I am advertising for others. The ...
1
vote
1answer
345 views

Securing an OAuth / OpenID Connect identity in a cookie for easy login

I have a website that uses Azure Active Directory or Google+ for logging in. I go through an OAuth2 login flow, and the users email along with their tokens are returned to me by their identity service....
1
vote
2answers
200 views

Unexpected emails have been sent - do I need to wipe my Android?

A few days ago I received a Notification from my Android saying that it could not send mail because an attachment was too large. I opened my Gmail App and found 5 messages in the Sent Mail folder ...
1
vote
0answers
72 views

Google Eclipse plugin manual telling to skip security warning. What are the risks?

I'm trying to install GWT plugin for Eclipse. The Google manual says among other things Eclipse indeed shows that message during installation. The questions are: What exactly does that message ...
4
votes
2answers
568 views

Google+ Sign In - One Time Code Flow vs Pure Server Side flow

I'm reading the documentation about Google+ Sign In, more specifically, its server side flow. It says (https://developers.google.com/+/web/signin/redirect-uri-flow) that one-time code flow has ...
3
votes
1answer
5k views

How secure are Google (Drive) Web Forms?

My child's school is using a Google Web Form to collect student and parent information, including occupations, addresses, maiden name, birthdays, contact information, and who the child resides with. ...
1
vote
1answer
3k views

How does wifi-based geolocation work? [closed]

Looking at the Google geolocation API it claims: Geolocation API returns a location and accuracy radius based on information about cell towers and WiFi nodes that the mobile client can detect. ...
37
votes
3answers
34k views

What are the dangers of allowing “less secure apps” to access my Google account?

According to https://support.google.com/accounts/answer/6010255: Google may block sign in attempts from some apps or devices that do not use modern security standards. Since these apps and devices ...
12
votes
4answers
2k views

Downsides to using HTTPS [duplicate]

Recently Google has indicated that a HTTPS certificate will be used as a positive signal in it's search rankings. This has caused some discussion within our company as to if we should apply a HTTPS ...
55
votes
6answers
52k views

Can my IT department read my Google Hangouts chats while at work?

Is Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but ...
0
votes
2answers
835 views

What tools does the Google safe browsing service rely on?

What are the tools Google uses to blacklist a website as being malicious (hosting a web malware)? I know it is partly fed by users themselves who can enter unsafe URLs into Google's database. But ...
1
vote
0answers
492 views

Why does Google allow non-HTTPS searches? [closed]

I found today that Google allows you to reach its search engine and submit searches over non-https connection. Visiting http://google.com, results in a redirect to the URL https://www.google.com/?...
1
vote
1answer
449 views

Is there any need to penetration test a GoogleAppEngine solution?

Is there any need to penetration test a GoogleAppEngine solution? Or will it be protected by googles existing infrastructure?
1
vote
1answer
847 views

How long does it take for Google to detect click fraud and suspend an AdSense account? [closed]

Click farms can be hired to boost ad revenue. http://www.security-faqs.com/what-is-a-click-farm.html The click farm is made up of armies of low paid workers who’s job is to click on links, surf ...
43
votes
8answers
8k views

What are some considerations before moving personal data to Google Drive?

I am considering uploading some (all) of my digital personal data to Google Drive. I guess this would instantly grant access for NSA to my data. (Is that right?) Who would have access to my data on ...
-1
votes
1answer
686 views

My cookies have been stolen. What to do?

About a month and a half ago I got infected by a virus called MSIL.Bladabindi. I noticed the virus quite soon because google notified me that someone from Turkey tried to access my account (I'm in ...
3
votes
5answers
186 views

Can webpages using the Google plus button get my name?

When I'm logged into my Google account, and I visit a web page that contains the Google Plus "+1" button, does a script have access to my name, even if I don't interact with the Google Plus widget?
9
votes
5answers
3k views

Is it ethical to use ReCAPTCHA to decode house addresses? [closed]

I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode. How ethical is it for Google to do this to this? Does it hamper privacy of an ...
4
votes
1answer
236 views

Google Authenticator Error on Reboot

I have set up an SSH server to accept only login using codes generated by Google Authenticator (I have disabled all other forms of authentication on that port). After having rebooted my remote machine,...
3
votes
1answer
812 views

How can the Google web crawler bypass portals?

This is a situation that I have encountered on a number of occasions. I will conduct a web search in Google, a link to a file (.pdf for example) will take you to that file on the server. It opens up ...
1
vote
2answers
1k views

Does gmail's TOS allow Google to steal your emailed ideas?

Is it unwise to use gmail to discuss business ideas that Google could snoop on and use to their business advantage? I know that email is not secure and anyone could read it along its path of delivery,...
4
votes
0answers
1k views

A Google owned IP address accessed my outlook account [closed]

Today I got a warning from Microsoft saying that there was unusual activity on my account. Diving deeper I saw that there was a successful sign in from a Google owned IP address (according to ARIN). ...
1
vote
1answer
164 views

What's the security impact of tampering with Google OAuth continue parameter?

What's the security issue of this scenario related to tampering with the continue parameter: Go to: https://accounts.google.com/ServiceLogin?service=[service name]&passive=true&continue=...
3
votes
1answer
385 views

How does “Google password monitoring” work?

Google Apps has a feature to monitor users' password strength and notify administrator about it. Google help says: View the length of each user's password along with a graph showing its relative ...
2
votes
1answer
858 views

How do application specific passwords work in Google accounts? [duplicate]

I turned on 2-step verification and had to setup an application specific password for Outlook. I noticed the password generated is actually weaker than the one I had before turning on 2-step ...