Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
0
votes
1answer
34 views
How secure is it to store information in Google products
I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
-1
votes
1answer
42 views
Android Device Manager lockout [on hold]
I have been HACKED!!! Someone logged into my Android Device Manager and locked me out of my own phone. Not only did they lock me out, they also wiped my phone and changed my Google, Dropbox, Lookout, ...
0
votes
1answer
38 views
Does Google hand over captcha IPs to webmasters?
Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
-1
votes
0answers
8 views
Ensuring data security using datastore [closed]
What are some ways to ensure the security of data which is submitted from forms on my site to a Servlet, and then stored in Google's Datastore?
1
vote
1answer
33 views
Does use of OpenID Connect for login imply Google can impersonate my users?
I am looking at integrating Google OpenID Connect (OAuth 2.0 for Login) as a login option for a web application.
https://developers.google.com/accounts/docs/OpenIDConnect
My question: Does use of ...
0
votes
2answers
77 views
Google DNS in Firewall logs
I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it most likely belong to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From ...
0
votes
1answer
88 views
Can Google's administrators be trusted with Google Authenticator? [duplicate]
Suppose there is an evil Google administrator who has full access to every server or network at Google. Will such a person be able to abuse the Google Authenticator technology to gain access to ...
2
votes
2answers
113 views
Stealing document.cookie from Google domain, is this a privacy breach?
When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...
0
votes
2answers
116 views
Google Analytics: Hacked or Ghost Referers?
I posted this question (Hacked or Ghost Referers) on Google groups earlier today, but I also wanted to see if the security experts here have any insight into this behavior.
I've got a web application ...
3
votes
0answers
74 views
REST API stateless authentication using social login
I am implementing a REST API for our mobile applications in which user will login using the SDKs of various social media. Currently, the login strategy is as follows:
The token(s) (access_token in ...
0
votes
2answers
69 views
Type of SSL connection used when visiting google services
I have 2 computers running chrome:
a) Win 8 , latest chrome
b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop
Both display the Certificate Authority as: Google Internet Authority G2
computer ...
6
votes
0answers
414 views
Attackers of Google DNS hijacking
As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert
Now, In a course assignment, we are asked to ...
0
votes
1answer
72 views
Why isn't Google oauth2 giving a refresh token for Client-side applications?
I've been reading Google's oauth2 documentation for Client-side applications. I was surprised that nowhere does it mention refresh tokens. Also, their examples hint that the access_token has a default ...
-1
votes
2answers
173 views
Google is going to mark all HTTP traffics as insecure in 2015? [closed]
Firstly I would like to mention that I got this news from a blog I have read in last few days. This is only, perhaps, a rumor. If this is true, does this mean that anyone using Google Chrome or apps ...
0
votes
0answers
52 views
Request for Google Password for Calendar Updates
A website that I trust (Delta Airlines) offers a link to add flight information to Google Calendar; that link opens a window asking for my Google login and password. Based on the advice in a similar ...
-3
votes
2answers
127 views
Do website owners know what keywords a visitor typed in google search to get to their site? [closed]
Does google give the info to website owners / administrators... is I guess how it would work?
4
votes
3answers
1k views
Protected excel sheet is unprotected without permission in google spreadsheet [closed]
I created an Excel spreadsheet using Microsoft Excel 2013 with password protected cells (only particular cells. Other cells can be edited).
When I open this spreadsheet in Google spreadsheet, I am ...
2
votes
2answers
109 views
Does using the Google Maps client-side Javascript API leak data?
I am currently working on a project where we are using Google Maps to display some data by using the client-side JS API to manually add the points on to the map once the user has clicked on a button.
...
0
votes
1answer
100 views
should I not accept cookies for the sake of anonymity?
Let's say I had a Gmail account. Should I just not have a Gmail account, or should I not use their cookies? How bad are the cookies, in of themselves? I obviously wouldn't log into it, with my VPN or ...
2
votes
1answer
296 views
Is Google's password recovery by entering an old password a bad practice?
When you try and recover your password on Google, you will eventually stumble across this screen, and it made me wonder:
Isn't this type of password recovery from Google essentially the same as ...
2
votes
1answer
102 views
While logged in to Google etc., can a malicious site discover my ID?
If I visited a malicious site while being logged in to Google, Hotmail, Facebook, or Twitter in the same browser window, how hard is it for the site to discover my account IDs without my explicit ...
1
vote
1answer
81 views
encryption of Google's android apps
Does Google use encryption on it's Android apps like Gmail, drive, Google Play, docs, others in authentication and transit?
What the type of encryption is it? Is it secure? I have tried searching ...
1
vote
2answers
274 views
bit.ly is not safe and an attack page? [duplicate]
I click on a bit.ly link on a Youtube video and I was fronted with this.
I have used bit.ly before and I entered the url manually, but Firefox came up with this.
Any ideas?
0
votes
2answers
118 views
Does Google catches and keeps users typing patterns [closed]
Does Google catches and keeps users typing patterns for identifying purposes?
for example when I'm logged in my Google account and Searching for things Google records my "Typing Pattern" like typing ...
-4
votes
3answers
191 views
Why doesn't Google Safe Browsing block the IP addresses of malicious websites?
If you visit a blocked domain name like www.thelotbet.cn from Google Chrome, Opera or Firefox, you will get a warning from Google Safe Browsing that this is a malicious website. But if you visit the ...
0
votes
0answers
23 views
return list of sites with similar unique IDs (e.g. Adwords)
I have been using http://sameid.net/ to discover sites which have the same unique ID as a page in question for a number of affiliate and advertising networks. However, I am wondering if there is a ...
0
votes
1answer
75 views
How do you log into Amazon Web Services if you lose your phone which has Google 2-factor authentication set up?
And if it is possible, how do you prevent other people from claiming they are you and lost their phone?
Amazon only directs you to a page which does not exist.
http://aws.amazon.com/iam/faqs/
If ...
1
vote
1answer
123 views
Mentioned On A Blog By A “Hacker” - Should I Care?
Some (insert noun here) who seems to be a black hat hacker thinks that I am his #1 enemy and has posted some of my information on his blog. He is mad because I am advertising for others. The ...
1
vote
1answer
106 views
Securing an OAuth / OpenID Connect identity in a cookie for easy login
I have a website that uses Azure Active Directory or Google+ for logging in. I go through an OAuth2 login flow, and the users email along with their tokens are returned to me by their identity ...
1
vote
2answers
116 views
Unexpected emails have been sent - do I need to wipe my Android?
A few days ago I received a Notification from my Android saying that it could not send mail because an attachment was too large.
I opened my Gmail App and found 5 messages in the Sent Mail folder ...
1
vote
0answers
43 views
Google Eclipse plugin manual telling to skip security warning. What are the risks?
I'm trying to install GWT plugin for Eclipse. The Google manual
says among other things
Eclipse indeed shows that message during installation. The questions are:
What exactly does that message ...
4
votes
2answers
279 views
Google+ Sign In - One Time Code Flow vs Pure Server Side flow
I'm reading the documentation about Google+ Sign In, more specifically, its server side flow. It says (https://developers.google.com/+/web/signin/redirect-uri-flow) that one-time code flow has ...
3
votes
1answer
2k views
How secure are Google (Drive) Web Forms?
My child's school is using a Google Web Form to collect student and parent information, including occupations, addresses, maiden name, birthdays, contact information, and who the child resides with.
...
1
vote
1answer
566 views
How does wifi-based geolocation work? [closed]
Looking at the Google geolocation API it claims:
Geolocation API returns a location and accuracy radius based on
information about cell towers and WiFi nodes that the mobile client
can detect.
...
19
votes
3answers
6k views
What are the dangers of allowing “less secure apps” to access my Google account?
According to https://support.google.com/accounts/answer/6010255:
Google may block sign in attempts from some apps or devices that do not use modern security standards. Since these apps and devices ...
12
votes
4answers
1k views
Downsides to using HTTPS [duplicate]
Recently Google has indicated that a HTTPS certificate will be used as a positive signal in it's search rankings.
This has caused some discussion within our company as to if we should apply a HTTPS ...
51
votes
6answers
22k views
Can my IT department read my Google Hangouts chats while at work?
Is Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but ...
0
votes
2answers
277 views
What tools does the Google safe browsing service rely on?
What are the tools Google uses to blacklist a website as being malicious (hosting a web malware)?
I know it is partly fed by users themselves who can enter unsafe URLs into Google's database.
But ...
2
votes
0answers
376 views
Why does Google allow non-HTTPS searches? [closed]
I found today that Google allows you to reach its search engine and submit searches over non-https connection.
Visiting http://google.com, results in a redirect to the URL ...
1
vote
1answer
192 views
Is there any need to penetration test a GoogleAppEngine solution?
Is there any need to penetration test a GoogleAppEngine solution? Or will it be protected by googles existing infrastructure?
1
vote
1answer
351 views
How long does it take for Google to detect click fraud and suspend an AdSense account? [closed]
Click farms can be hired to boost ad revenue. http://www.security-faqs.com/what-is-a-click-farm.html
The click farm is made up of armies of low paid workers who’s job is to click on links, surf ...
41
votes
8answers
6k views
What are some considerations before moving personal data to Google Drive?
I am considering uploading some (all) of my digital personal data to Google Drive. I guess this would instantly grant access for NSA to my data. (Is that right?)
Who would have access to my data on ...
0
votes
1answer
353 views
My cookies have been stolen. What to do?
About a month and a half ago I got infected by a virus called MSIL.Bladabindi. I noticed the virus quite soon because google notified me that someone from Turkey tried to access my account (I'm in ...
2
votes
4answers
125 views
Can webpages using the Google plus button get my name?
When I'm logged into my Google account, and I visit a web page that contains the Google Plus "+1" button, does a script have access to my name, even if I don't interact with the Google Plus widget?
8
votes
5answers
2k views
Is it ethical to use ReCAPTCHA to decode house addresses? [closed]
I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode.
How ethical is it for Google to do this to this? Does it hamper privacy of an ...
0
votes
0answers
183 views
Starting database security for web app that logs in with Facebook/Google JS SDKs
I have been making a web app that uses Facebook and Google JavaScript APIs to login (no email login) on the client side and currently it accesses a localhost MySQL database directly using PHP and ...
6
votes
1answer
151 views
Google Authenticator Error on Reboot
I have set up an SSH server to accept only login using codes generated by Google Authenticator (I have disabled all other forms of authentication on that port). After having rebooted my remote ...
2
votes
1answer
390 views
How can the Google web crawler bypass portals?
This is a situation that I have encountered on a number of occasions. I will conduct a web search in Google, a link to a file (.pdf for example) will take you to that file on the server. It opens up ...
1
vote
2answers
539 views
Does gmail's TOS allow Google to steal your emailed ideas?
Is it unwise to use gmail to discuss business ideas that Google could snoop on and use to their business advantage? I know that email is not secure and anyone could read it along its path of ...
4
votes
0answers
685 views
A Google owned IP address accessed my outlook account [closed]
Today I got a warning from Microsoft saying that there was unusual activity on my account. Diving deeper I saw that there was a successful sign in from a Google owned IP address (according to ARIN). ...
