Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

8
votes
2answers
2k views

How to fix a repeatedly hacked gmail account (where 2FA is enabled and passwords are changed)?

A friend of mine came to me for help with this issues. Her Gmail account has been hacked and keeps sending out spam emails to her contacts. This is happening to her on a monthly basis. Each time it ...
75
votes
2answers
12k views

How did someone log-in to my Gmail account from Kenya?

While on holiday in France in May I received an email from Google "New sign-in". Your Google Account was just used to sign in: Nairobi, Kenya. Tuesday, 26 May 2015 22:10 (East Africa Time). ...
0
votes
0answers
14 views

Google Account SMS recovery [closed]

Is it a bad idea to have a recovery phone for your Google Account? If someone gets physical access to my phone, or are able to read my messages in another way, they can easily request a password ...
3
votes
1answer
103 views

Is Google using canvas fingerprinting for their ads?

Given the fact that canvas fingerprinting is a hype, I raise my eyebrows whenever I see fillText or strokeText in JavaScript code executing on websites. I noticed that Google uses some of these eye ...
57
votes
3answers
4k views

Are staggered roll outs of security patches bad?

Many Android devices, including the Google Nexus line, are now receiving monthly security patches via OTA updates, accompanied by the Android Security Bulletins. However, these updates are often ...
-2
votes
1answer
81 views

Should I be concerned that Arabic shows up when I do a google search for maps?

I live in the united states and do not speak arabic at all. Should I be concerned that Arabic script is showing up in one of my searches? Is it possible that a malicious actor who speaks Arabic is ...
5
votes
3answers
212 views

How to check if your Android app was updated by MitM?

As I was browsing on my phone yesterday, a gray popup appeared on my screen just as I was swiping up, and I accidentally hit the accept button. In the fraction of a second it was on I was able to read ...
3
votes
1answer
65 views

Google OAuth 2.0 and Java. Is it safe to locally store access tokens?

I Installed this Java app: https://github.com/andresoviedo/google-drive-ftp-adapter The program asks permission to see my Google-Drive files and then stores an access-token on my local harddisk. ...
2
votes
2answers
91 views

Google thinks I am a robot when using proxy, but only in Safari

Google greeted me with this message while being behind a private proxy: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending ...
6
votes
1answer
130 views

How does Google store passwords for remote IMAP/POP services?

It is possible to add non-Google accounts to Gmail and retrieve their mail messages via POP or IMAP. As part of the setup process, one has to provide the login username and password for these ...
3
votes
5answers
185 views

Can webpages using the Google plus button get my name?

When I'm logged into my Google account, and I visit a web page that contains the Google Plus "+1" button, does a script have access to my name, even if I don't interact with the Google Plus widget?
3
votes
0answers
64 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
1
vote
0answers
44 views

Website Link Changed to Spam in Google Search Results [closed]

My website is the first result for the search term "word search solver" in Google. Recently, I noticed a huge drop in traffic (almost all my traffic comes from Google), so I did a quick search. What I ...
3
votes
1answer
109 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
2
votes
1answer
89 views

Google Drive photo security and publicly visible lh*.googleusercontent.com

I thought Google Drive was more secure than this. If I upload a photo to Google Drive, I don't care that it's entrusted to them and I also assume someone working there can look at it. No big deal. ...
0
votes
0answers
32 views

Stagefright 2.0 - CVE-2015-3876 fix

Im currently studying Stagefright2.0 bugs. I'm wondering how the CVE-2015-3876 was fixed. I know it was caused by an integer overflow and the fix can be found here: ...
2
votes
5answers
3k views

If a hacker were to compromise a GMail database

Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database? I assume nothing, and in order for ...
8
votes
1answer
87 views

Is Google identity sign in product HIPAA compliant?

I want to use this product to save me a month of coding. Looking for a product that Password expiration forgot password system lock after x times of wrong password Valid passwords rules (min 8 ...
6
votes
1answer
56 views

Can play store applications be tampered with by Google?

Can play store applications be tampered with by Google? I understand that other apps are "unsigned" so you need to have applications from unknown sources turned on. However, Google Apps are "signed" ...
7
votes
1answer
440 views

Why does Firefox claim that my connection to Google is insecure?

I keep receiving this message whenever I open any site from Google: My Firefox is up-to-date, and so my Windows 8.1. Since I don't know much about HSTS, I don't know what's going on, and obviously, ...
6
votes
3answers
142 views

Android full disk encryption

I am using Android 4.4.4. There is an option called phone storage encryption. From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: ...
7
votes
1answer
288 views

Including a OAuth client_secret file in a Java application

A client_secret.json file is used in the OAuth 2.0 authorization flow for the Google Drive API (example). If I include client_secret.json in my Java application, access the JAR contents is extremely ...
68
votes
12answers
23k views

Is Google overreaching by forcing me to use TLS?

Gmail was recently changed to require HTTPS for everyone, whether they want to use it or not. While I realize that HTTPS is more secure, what if one doesn't care about security for certain accounts? ...
124
votes
9answers
16k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
0
votes
1answer
47 views

Malicious tracking script being served from google server to circumvent block lists

I've found some bad JS that tries to open pop-unders and even deliver a likely malicious SWF file for a flash exploit. Thing is, its stored on a google server in a directory it really shouldnt be. ...
4
votes
1answer
158 views

Someone called my cell phone offering services about something I have been looking for in the web

I recently started gathering information about poker and poker online. I had no idea about it and I have spent about a week surfing the web (mainly using Google) and consulting different web pages ...
9
votes
2answers
259 views

Why does Google prefer ECDHE-RSA-AES128-GCM-SHA256?

I want to configure my new mail server secure as possible and wondering about the used cipher while connecting to Googles SMTP server. I'm curious why they prefer the cipher ...
4
votes
1answer
77 views

Wordpress.org pages refresh when logging out of Gmail

I've noticed that when I change my Gmail account by logging out of one account and then logging into another, all open Wordpress.org pages refresh. Additionally, when I recently changed a password on ...
3
votes
1answer
106 views

Google Hangout Dialler exposes user ID

Recently, I got in touch with an online supplier of commodity service. Since they are located in location out of country of my residence I used GoogleTalk's IP phone service ‘Hangout Dialler’ as it’s ...
1
vote
0answers
96 views

Is Trillian application unsafe? (Got “Someone has your password” message from Google)

Trying to connect to GoogleTalk from the Trillian app for Android (a universal instant messenger app), I got denied even with the correct password. Then Google e-mailed me saying that my password is ...
2
votes
2answers
2k views

Why does Google Safe Browsing keep detecting malware on my website?

We provide a freemium service to upload large files and download them later on. Using ClamAV, we scan every file for viruses after it is uploaded and before it can be downloaded. The file is deleted ...
1
vote
1answer
87 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
1
vote
0answers
42 views

What are the security risks of using add-ons in Google Docs / Spreadsheets?

I am looking into using some add-on that automated a mail merge from Google Spreadsheet data, via Google Doc templates, to PDFs that get emailed out. Several add-ons that I looked into (such as ...
1
vote
3answers
83 views

How can the ISP block Sarawak Report even if I am entering Sarawak Report from google search?

Sarawak report is blocked in Malaysia. I think that by doing a Google search on relevant keywords, and then click on the relevant link, I can access the website, because from what I know, the ...
1
vote
0answers
21 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
0
votes
1answer
44 views

Could Google read Map Api InfoWindow html content?

I used google map api. I read some high protected data on the my HTML page. And write them into InfoWindow on google maps using javascript. Could google read infowindow html content? There are no ...
3
votes
2answers
602 views

Does using the Google Maps client-side Javascript API leak data?

I am currently working on a project where we are using Google Maps to display some data by using the client-side JS API to manually add the points on to the map once the user has clicked on a button. ...
17
votes
10answers
6k views

Encrypting email for gmail

My friend who is an accountant was asking me what the best way to exchange documents with clients. He was trying to tell me that just sending via email was sufficient and I told him he was insane. I ...
0
votes
2answers
104 views

All subdomains blocked by Google SafeBrowsing

GoogleSafebrowsing seems to have blacklisted one of my domain names, along with all its subdomains. It is visible on this google search page. I'm a seasoned linux system administrator, I've checked ...
2
votes
0answers
28 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
4
votes
2answers
133 views

Are malicious drive-by-downloads detectable based on file type/mime type?

Drive-by-downloads are automatic downloads without user interaction. We provide a free service for uploading large files and notifying users by email (this one, something like ge.tt or WeTransfer). ...
2
votes
0answers
112 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system ...
7
votes
1answer
124 views

How does Google Analytics prevent fake data attacks against an entity's traffic?

In order to register a "hit" on Google Analytics, the list of things required are: Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
1
vote
0answers
154 views

Google images redirects to some page with random images [closed]

My customer have some photos on images.google.com that when clicked redirects to some pages and then stops on http://imageol.com/"something" with one random image. First I thought that it was a ...
1
vote
1answer
46 views

Can a domain administrator read my search queries? [closed]

Google's privacy policy states that they log your search queries. They also state that domain administrators have access to your Google Account information (e-mail and "other data") as well as ...
2
votes
2answers
821 views

Connection to Google websites is not secure

When I open Gmail or Google search and leave it opened for a while, I notice this yellow warning triangle, as in these photos: However, when I refresh the page it returns to the usual green lock ...
1
vote
1answer
71 views

Is it secure to make a publicly available Web App that has URL's generated from a hash?

If you know of a better title, please feel free to edit the title. I'm making a simple google Web App so colleagues at my workplace can view details about a QA that they received. The issue is only ...
0
votes
1answer
54 views

Why only Google warn us about attackers?

There are so many search engines like ask.com, yahoo.com and many more, but only Google warn us about attackers. Why so?
36
votes
8answers
6k views

Should we store personally identifiable information on google drive?

For a number of reasons, including remote accessibility, my company would like to move all of our accounting records, account applications, and marketing materials to Google’s Apps for Work Drive. At ...
2
votes
1answer
642 views

HTML iframe security exploit

Can somebody explain if there's something malicious in this HTML, The width and height of the iframe ares set to 1 and it's out of the view with top: -100px; statement. I believe it takes some some ...