0

I am signed into my personal Gmail account through Safari on my phone. If I simply sign into my personal Gmail account on my work computer, can they see any old searches made on my phone or personal computer from home? Or can can they only see what I’m actively searching while on my work computer?

  • This depends on the company setup. Do they own and control the work computer? – forest Apr 9 '19 at 18:26
  • They do own the work laptop. But all searches on my personal Gmail have been made on my personal phone or laptop. Never on the actual work computer. – Gordy Apr 9 '19 at 18:31
  • 3
    I think your Google account can be set to log searches, so if you enter your credentials on the work computer and they steal those credentials (e.g. with a keylogger), then they could log into your account and see any history that was saved. – forest Apr 9 '19 at 18:32
  • Is there anyway to check that ability? – Gordy Apr 9 '19 at 18:33
  • No idea. I don't use Google. It's probably under privacy settings somewhere. – forest Apr 9 '19 at 18:37
1

can they see any old searches made on my phone or personal computer from home?

Depending on the network setup, they could inspect your network traffic, get your login details and use it later. That would require you to install a CA certificate on your phone or personal computer, or to log in ignoring your browser warnings about invalid certificates. But logging private credentials can be considered a crime on some jurisdictions, so I doubt they would ever do that. But if they own the network, they can intercept your communications, steal your credentials, log back and see what you have.

But if you haven't installed any CA certificate on your phone or private computer, they cannot. That's exact the point of certificates: prevent any third party to read or change any of the requests you make.

Or can can they only see what I’m actively searching while on my work computer?

Your work computer is different, as they usually have jurisdiction over it. If they have an interception proxy (common on enterprise networks), they can see everything. It does not mean they will see, but they have the capability.

| improve this answer | |
  • Not sure if you can sniff network traffic to Google due to built-in public key pinning (at least on major browsers) – Conor Mancone Sep 6 '19 at 21:23
  • Public Key Pinning does not stop locally installed authority to override the pin. – ThoriumBR Sep 8 '19 at 1:39
  • Oh yeah, I totally knew that because otherwise owasp zap/etc wouldn't work... – Conor Mancone Sep 8 '19 at 2:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.