Questions tagged [google]

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Spurious sitempas are added to google search console without authentication [closed]

I have a wordpress website and it is connected to google search console. Very often atleast once a month i experience this issue. Anonymous sitemaps containing fake links (just to drive traffic to ...
user avatar
-1 votes
0 answers
13 views

Limiting Mobile Fingerprints For Google?

I run a small agency managing numerous Google accounts and am trying to determine the best route for managing/hiding fingerprints on mobile from Google, outside of good dedicated proxies (which I ...
user avatar
0 votes
0 answers
32 views

Googleupdate.exe runs ping encoded - Is this expected?

I was looking at our M365 Defender and was doing some looking around. I noticed the process GoogleUpdate.exe run an encoded ping. The command was "GoogleUpdate.exe" /ping <encoded stuff&...
user avatar
  • 133
2 votes
1 answer
195 views

Can my ISP know that I have more than one Google Drive account?

So, I have 2 Google Drive accounts. Let's say Drive A and Drive B. If one day I login/upload to Drive A then log out, then login/upload to Drive B, can they notice that I have 2 different accounts? Or ...
user avatar
0 votes
1 answer
47 views

Why is Google advising to not use the super admin account in Google Workspaces for daily activities

Google is advising here to not use a super admin account for daily activities in Google Workspaces: https://support.google.com/a/answer/9011373?hl=en&fl=1 Unfortunately Google does not give any ...
user avatar
  • 1
0 votes
1 answer
87 views

Can Google see the screen when using Chrome Remote Desktop?

I was wondering if Google can see my computer screen while I'm using Chrome Remote Desktop. Let's assume there's my main PC named A and my other PC named B. PC B will have the Chrome extension ...
user avatar
  • 1
0 votes
2 answers
53 views

Using Google Domains' Email Forwarding Service for throwaway accounts and other things

I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
user avatar
0 votes
1 answer
141 views

Does Google Meet leak my IP?

My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible. But when I read about webRTC and STUN servers, I ...
user avatar
  • 1
0 votes
0 answers
99 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
user avatar
  • 101
1 vote
0 answers
48 views

Does Google Update perform cryptographic checks against releases?

My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities. On the pro side, ...
user avatar
  • 169
0 votes
0 answers
45 views

Google Password I didn't create

I opened Google, and a popup occurred briefly before I reflexively closed it. I then realized it had said something about a new password saved to the Google Password Manager, I think - which is weird,...
user avatar
  • 111
1 vote
3 answers
373 views

Mistyped "google" and came to a suspicious page with a browser hijacker

I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com After going to ...
user avatar
  • 111
0 votes
1 answer
95 views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
user avatar
4 votes
0 answers
177 views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
user avatar
  • 141
27 votes
2 answers
9k views

How is Google abused for DDoS attacks?

While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent. I'm ...
user avatar
  • 383
0 votes
0 answers
79 views

Is it possible for someone to get my personal information if I log in with their google mail id in my device for some work related thing?

I was working on an app for a client which had a premium subscription with play store with their mail id, so I had to log in with their email on my device to test the application. But right after I ...
user avatar
0 votes
1 answer
154 views

How google is protecting the MITM attack

If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
user avatar
2 votes
1 answer
111 views

Backup Google Authenticator transferring QR code

I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
user avatar
0 votes
1 answer
76 views

Is this insecure to show in cookie Google Tag?

While researching one site, I found that if you enter document.cookie (Firefox) I can see this filed in cookie _gat_gtag_UA_XXXXXXXXX_1=1. There were plain text. As I know gtag is for Google Tag ...
user avatar
  • 137
0 votes
1 answer
307 views

Is it possible for malware to infect google drive?

If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
user avatar
3 votes
1 answer
522 views

What is Google's "match the number" verification trying to achieve?

When I log into my Google account from my laptop with 2FA enabled, I usually get a prompt on my smartphone in order to confirm the log in. I tap OK and then I am logged in. However sometimes I am not ...
user avatar
  • 133
0 votes
0 answers
86 views

Requiring Google Mobile Service token

I'm pentesting an android application written in Cordova and while inspecting the network traffic I found some interesting endpoint that I would like to test. However, this endpoint need a tokenID (ex....
user avatar
  • 101
-1 votes
2 answers
224 views

Are the private URLs from Google Photos actually unguessable?

Maybe my math is wrong, but here it goes. If I generate a private url to share an album in Google Photos, I get something like this https://photos.app.goo.gl/***************** where the asterisks are ...
user avatar
  • 93
16 votes
2 answers
6k views

Is cloudflare injecting tracking code for PDF requests in browsers via the browser PDF plugin?

Opening a PDF link in the browser (e.g. google chrome with the ootb PDF viewer plugin) apparently indicates that when the PDF is hosted on a cloudflare-facing domain there is additional data present ...
user avatar
  • 291
2 votes
0 answers
154 views

Is it a good practice to store both the Google Oauth2 access token and the refresh token in the database un hashed?

I recently came across a source code where they save a user's refresh token and the access token upon sign in through Google into the database. This is done to access the Google APIs later on through ...
user avatar
  • 121
0 votes
1 answer
176 views

Diagnose Google security warning?

I have received the following from Google: Critical security alert Suspicious attempt to sign in with your password Google prevented someone who knows your password from signing in to your account. ...
user avatar
  • 115
2 votes
1 answer
165 views

How to prevent small mistakes that have massive impact?

I frequently have very personal files temporarily on my virtual desktop. I sometimes download a new program, which is going into a VM. Before sending it in there, I tend to VirusTotal scan it. I load ...
user avatar
0 votes
0 answers
75 views

Is it insecure to show the g-captcha response in the query string of a GET request?

I am aware that the g-captcha response cannot be used twice and expires after 2 minutes, but are there any security concerns using GET instead of POST?
user avatar
0 votes
0 answers
90 views

Were Google's old link-sharing links not cryptographically random?

This year, Google is notifying users that shared links to their shared Google drive files will change: https://support.google.com/a/answer/10685032?hl=en The announcement begins: To make file sharing ...
user avatar
0 votes
0 answers
96 views

How to detect and prevent phishing attacks on Gmail via Logging and DLP?

We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
user avatar
2 votes
0 answers
246 views

What is google recommendation to fix the task hijacking issue

Applications running on android devices below 10 are vulnerable to task hijacking. Even though the issue is fixed from android 11 and above, we cannot tell our customers to upgrade the android version ...
user avatar
  • 21
1 vote
0 answers
108 views

Is it secure that anyone could claim Google My Business ownership? [closed]

Today I found that Google has a funny feature that allows everyone to claim ownership of a particular business, and if the owner does not reject it in 3 days, then the business ownership is set to the ...
user avatar
0 votes
0 answers
85 views

Can hashbang (#!) URLs be used to SEO attack a website?

Apparently Google indexes hashbang URLs: https://www.youtube.com/watch?v=kDs-MufuiAg Can an attacker link to another website with fictitious hashbang-URLs and use it to hurt that website (if the ...
user avatar
  • 1
0 votes
0 answers
46 views

WP Blog with phishing js file by a Google Search Result? [duplicate]

I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano". The first Google result seems to point to the official page: https://rafaeltheissen.com/ Here ...
user avatar
1 vote
0 answers
36 views

Do I need TFA if I have a strong password? [duplicate]

This is the inverse of this question here. Google keeps prompting me to enable Two-Factor Authentication for my Google account. I don't like the inconvenience of TFA, such as mandating that I will ...
user avatar
0 votes
0 answers
159 views

Does Google have access to the mac/cpu serial numbers and similar to that?

Recently I logged in my gmail account on chrome browser and checked the devices linked to my gmail account.surprisingly in the linked devices and in the recent logins it shown my laptop hostname. I ...
user avatar
  • 1
1 vote
0 answers
97 views

Is Google OAuth login in 3rd party applications via system browser secure?

Numerous mobile applications allow me to "Login with Google". From technical perspective, I assume this would usually follow those OAuth native app login integration guidelines: https://...
user avatar
1 vote
2 answers
1k views

Personal Google search history appeared on work computer. Does this mean work can see my private search history from my personal iPhone?

I was recently using my personal google account on my work computer and some of my previous google searches appeared from my personal phone. I used Safari on my personal iPhone and I guess google. So ...
user avatar
  • 11
0 votes
1 answer
160 views

Will a virus/malware travel between devices when logged into the same Google account

If my laptop/desktop got infected with malware or some kind of a virus, will it be safe to log in the account on my laptop to my new PC or will it spread to it because I used the same account for new ...
user avatar
  • 1
1 vote
1 answer
146 views

Can Google authenticator be used to link all my accounts together?

For example, if I add two accounts from different non-Google services, can Google (or maybe those services) because of that link them both together with my gmail account?
user avatar
  • 13
0 votes
0 answers
273 views

Critical security alert: someone knows your password [duplicate]

Mailed-by: gaia.bounces.google.com Sign.google.com Security: Standard encryption (TLC). So this is a legitimate email from Google. Will this email immediately be sent if someone (who isn’t supposed ...
user avatar
  • 1
2 votes
1 answer
265 views

Unusual Google Chrome Download Redirection

When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL: https[:]//accounts[.]...
user avatar
3 votes
1 answer
153 views

How does the Apple/Google Exposure Notification system prevent infected users from being identified?

Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
user avatar
  • 131
1 vote
1 answer
146 views

How is it possible for scammers on YouTube to use the same exact username as the author of the video? [closed]

Recently, there has been an absolute massive flood of scammers on YouTube videos related to Bitcoin. Their "trick" is to use the exact same username and profile picture as the person who ...
user avatar
13 votes
2 answers
4k views

How does Google save our passwords on their server?

My friend recently told me that: Google doesn't have our passwords saved on their database. Instead they put our password when typed on browser, through an algorithm and it'll produce a unique ...
user avatar
1 vote
0 answers
108 views

Odd storage.googleapis.com link in spam email [duplicate]

I have accidentally clicked on a link in a spam mail (sent to my gmail, wasn't sent to junk folder) and it opened the link in a new firefox tab. hxxps://hm_vqh3bo6.storage.googleapis.com/24476060.html ...
user avatar
  • 3,253
2 votes
3 answers
662 views

How to prevent Apple and Google from accessing Telegram messages

Telegram is completely blocked in my country (entire IP range and domain of telegram is blocked), and I cannot access messages by telegram app. However, notifications for newly received telegram ...
user avatar
  • 129
2 votes
0 answers
179 views

Received Google 2FA Code via SMS from two unknown phone numbers [duplicate]

I recently encountered a strange incident regarding the 2FA of my Google Account. The user Dunois has described a very similar occurrence in this post: Functional Google 2FA code (via SMS) received ...
user avatar
  • 21
2 votes
1 answer
283 views

Is using Google Forms to share “passcode protected” information safe from brute force attacks?

I have recently seen many people use Google Forms as a way of sharing “passcode protected” information. They seem to have the first section of the form with a required field asking for a short piece ...
user avatar
  • 123
0 votes
0 answers
50 views

Does Google Chrome send INCOGNITO search history data to Google? [duplicate]

Type Ctrl + Shift + N. Then type DIVIDED WE FALL and then click enter. Click a search result that takes you to YouTube. Go back to the search results. Retype "DIVIDED WE FALL by Valarie Kaur"...
user avatar
  • 339

1
2 3 4 5
12