Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
1
vote
1answer
37 views
Is it safe to sign in to Google with password from desktop app like BlueStacks? [closed]
BlueStacks is an android simulator for desktop. After installation it will ask you to login with your Google account to download and install android app from play-store.
My question is "Is it safe to ...
0
votes
2answers
157 views
Is Google Drive security compromised?
Today when I visited drive.google.com, I was auto-directed to http://drive.googe.com/router.php
After clicking on "Exit Now" on that page I was redirected to ...
3
votes
0answers
83 views
Google ads and/or DoubleClick wants to access the keyboard API in Firefox? [closed]
I have started Firefox in an Ubuntu terminal, and now I see these messages during browsing:
"No permission to use the keyboard API for http://googleads.g.doubleclick.net"
I mean... WTF? Why does ...
0
votes
2answers
40 views
Does Google Global Cache let the ISP intercept encrypted requests to Google?
I've recently noticed that most of my activity with Google and its services goes through a local Google Global Cache server set up by our ISP. Since I don't fully trust the ISP, this has become a big ...
-1
votes
0answers
14 views
Separate Work and Personal Profiles on Chrome [migrated]
I have been using multiple profiles on Chrome for both Work and Personal. In preparing to exit Work, I noticed that the majority of my personal Saved Passwords are available in my Work profile (and ...
-1
votes
0answers
12 views
Remove specific header information sent from Thunderbird to Google servers [migrated]
If I'm using the web interface of Gmail, it doesn't add my ip address to the email headers (only adds the Google ip addresses) but if I use Thunderbird, it add my ip address to it and Google mail ...
62
votes
12answers
20k views
Is Google overreaching by forcing me to use TLS?
Gmail was recently changed to require HTTPS for everyone, whether they want to use it or not. While I realize that HTTPS is more secure, what if one doesn't care about security for certain accounts?
...
4
votes
1answer
255 views
google certificates correct CA [closed]
I view certificates of https://www.google.com.ua/
So I thought, when requesting via cURL, if I point by CURLOPT_CAINFO to those certificates (GeoTrust Global CA and Google Internet Authority G2 in ...
12
votes
7answers
3k views
Encrypting files on Google Drive
It's my understanding files kept on Google Drive are not protected. I would like to have them encrypted so that to be able to view or modify them one must enter a password. I foresee a potential ...
10
votes
1answer
78 views
Why does Android mix phone state with phone identity?
The "Phone State" permission on Android is widely requested by many apps. The explanation often given by the developer is that the app needs it in order to determine when you're on the phone, to stop ...
0
votes
1answer
41 views
Security design behind google's application specific password [duplicate]
When using Google's two-step verification with services that can't use it, such as mail clients on smartphones and desktops, the solution is to create application-specific passwords for those ...
-1
votes
1answer
41 views
Is it applicable to use Google Authenticator against TEMPEST?
I would like to know about Multi-Factor Authentication is applicable for TEMPEST or not.
Why I'm asking is I have suspicious matter every day also captured as log.
My concern:
It's possible to ...
0
votes
3answers
118 views
Gmail, Google, and privacy
I am not sure whether this is the best place to get my concerns addressed, but I hope it is. I went through some earlier questions posted on this site about Gmail and privacy but they don't seem to ...
1
vote
2answers
146 views
Username and password stored under form data in Chrome Dev Tools
When I record the network tab in Chrome Developer Tools when logging in to my site I find that the username and password are stored in plaintext under form data.
You can also find it in Safari, ...
0
votes
1answer
133 views
How CDN operator will decide content fo me if i am using google public DNS [closed]
As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
0
votes
1answer
93 views
Using Gmail in China triggered lots of Two Factor SMS
A friend of mine lives in Hong Kong and she travelled to China over the weekend. Whilst there, she was able to use Gmail on her Android phone without logging in again, but she had to re-login on her ...
14
votes
4answers
386 views
Does two-factor authentication reduce the need for a long password?
I've recently enabled 2-factor auth on a number of web apps, mostly using Google Authenticator. Does this mean that the importance of a strong password on each site is reduced? I would prefer to use ...
2
votes
1answer
514 views
Where to keep key file used as composite key for Keepass 2
I used to use a master password and "Windows User Account" to get into my password datasbase with Keepass 2. Then I realized the "Windows User Account" option is garbage because if you ever want to ...
0
votes
1answer
37 views
Photo Attachment's Feature For Some Mail Servers [duplicate]
You already know google started new service which is related to gmail.
http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html
When we send new mail to friends.If it ...
5
votes
3answers
371 views
Why is Google trying to communicate with svchost.exe
First off - I usually target my questions to StackOverflow since they're programming related, and I usually login with my work account - so this will be my first post from this account, as well as my ...
3
votes
1answer
231 views
3000 new contacts being added to gmail after receiving an email
Recently I realized that there are three thousand contacts with same name and email address in my Google contacts. The name belongs to an email that I have recently received and responded to, nothing ...
32
votes
2answers
1k views
Why does Google cripple the 2FA Google Authenticator PAM module?
If you enable 2FA for Google Apps the shared secret is 160 bits. The google_authenticator PAM module on the other hand seems to use 80 bits for the shared secret.
According to RFC 4226:
R6 - The ...
2
votes
1answer
458 views
Android access tokens and access to all google services
My questions is based on the asnwer on that question:
Can the Gmail password be recovered from the Android Gmail app?
So, as I understand when we setup google account on Android devices, it stores ...
9
votes
7answers
8k views
Using google dorks for a specific site?
I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this.
Traditionally, one uses a 'dork' by searching "Index ...
2
votes
2answers
207 views
how is Google Ads managing to track me? (even if I don't keep cookies!??) [duplicate]
NOTE: in this question I am interested in discovering the actual method used by Google to track me -in my particular case- and in exploring eventual ways to circumvent it. This is completely different ...
0
votes
1answer
375 views
Google Chrome - save usernames NOT passwords [closed]
I've scoured the settings page and googled this to no avail.
I want Chrome to stop saving my passwords BUT keep saving usernames/email.
Is that possible?
All I seem to be able to do is disable ...
4
votes
3answers
483 views
Does Google's SSL encryption for searches thwart NSA spying?
Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data:
Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
0
votes
2answers
547 views
Google Authenticator - Counter Based [duplicate]
I'm trying to understand How google authenticator - counter based work. I have tried googling around finding a demo or at least how this work. I understand its a one time password but not like TOTP. I ...
-2
votes
5answers
340 views
Google Calendar has events that I didn't create and it's not shared
This has been rewritten because at first I thought this may be an accident but now it’s clear there’s a security compromise.
In my Google Calendar I noticed an event that occurred each day from ...
1
vote
2answers
669 views
Privacy of Gmail for business?
Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent ...
6
votes
3answers
875 views
Telemedicine on Google+ Hangouts or Skype. Is it encrypted?
Would one be able to have a telemedicine conversation with a patient with google+ hangouts the way one can over a telephone? In other words does the security satisfy the HIPAA regulations that say ...
0
votes
1answer
12k views
Error150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a forgery [duplicate]
Help me guys please i'm having an problem with my google account.
I can't log in it keeps saying : Error 150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a ...
0
votes
0answers
42 views
encrypted.google.com vs https://www.google.com [duplicate]
Recently I was browsing through Tor and came across https://encrypted.google.com. On doing some research, I found that https://encrypted.google.com encrypts the users traffic.
I just want to ask that ...
9
votes
4answers
580 views
What is the use of the “secret” displayed when setting up 2 Factor Authentication?
What is the purpose of the "secret" that is displayed when you take the picture of the QR code to set up 2 Factor Authentication on a non-Google site?
Why would you need it?
If you save it, doesn't ...
-1
votes
2answers
82 views
How to log into sites that you have set up Google 2 Step Authenticator if you lose your phone?
If you use Google Authenticator to log into sites using 2 Factor Authentication, how do you log in after you lose your phone?
Can you install Google Authenticator on another device?
0
votes
2answers
295 views
Do Google 2 Factor Auth backup codes work for logging into Google or other sites?
I set up Google 2 Factor Auth to log into other sites. I see there are backup codes if you lose your device.
Are these used only to log into Google, or can they be used to log into other sites?
-2
votes
2answers
250 views
Why doesn't Google 2 Factor Auth ask for a code? [closed]
I set up Google 2 Factor auth to use 2 Factor Auth with certain sites. But reading over the help suggests that Google 2 Factor Auth is only used to log into Google services like Gmail.
But when I log ...
-2
votes
1answer
374 views
What are some good user login/authentication libraries or protocols to use with Python on Google App Engine? [closed]
I've read elsewhere (http://forums.udacity.com/questions/6028436/bcrypt-not-suitable-for-pythongae) that bcrypt is not suitable for use on Google App Engine. What are some good ways to create a user ...
5
votes
1answer
1k views
What are the privacy pros and cons of using a public DNS server vs. your own?
Whether I'm using a normal internet connection setup, or tunnelling it through an anonymizing VPN or through TOR, what information of mine is revealed to whatever DNS server that I choose (e.g. Google ...
3
votes
1answer
258 views
Authenticate users through Google using only an OAuth2 access token
I have a question about having users logon to my service using their Google Credentials. I've gone through the Using OAuth 2.0 for Login documentation provided by Google.
The documentation mentions ...
1
vote
1answer
165 views
When a browser extension or user script pulls a JS file from Google's CDN, how does this compromise the user's privacy in terms of Google's reach? [duplicate]
The context from which my question has arisen is this user script which locally removes ads from Ixquick.com, which is an anonymizing 'proxy' search engine that gives the results from Google's index ...
6
votes
1answer
23k views
Can the Gmail password be recovered from the Android Gmail app?
I have an Android device with the Gmail app installed. This app can access the mailbox so there must be some kind of authentication data stored on the device (possibly an application specific ...
7
votes
2answers
560 views
Privacy risk in using Google APIs
If I use JQuery from Google APIs: http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js
Is there a privacy risk to my site? E.g. does this link enable Google to read my pages, track my ...
1
vote
1answer
37 views
How to avoid GAE app traffic being abused?
I am going to develop a simple CMS site on top of Google App Engine using webapp2. I am wondering how avoid malicious data scrapers to deliberately get the pages in order to make the app consume ...
0
votes
1answer
167 views
How does does the “Sign out all other sessions” feature work in Gmail?
In Gmail, at the bottom of the screen if you click Details it will show you your recent account activity and there's a button to sign you out of all other sessions. How does this work? Are they ...
6
votes
3answers
387 views
Does Gmail 2-factor auth increase security on smartphones?
So I have enabled 2-factor authentication on Gmail, which means that if I log in on a new machine, it sends a token to my phone.
Now, if I access Gmail from my phone, it seems like I have only one ...
2
votes
2answers
430 views
How does Google detect new devices for two factor authentication
When you enable two step verification for google accounts, you get sent a code by SMS to enter in addition to your username and password the first time you log in with a new device.
How do they ...
1
vote
1answer
91 views
AppEngine Sandbox
Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
54
votes
3answers
11k views
How does Google Authenticator work?
Google Authenticator is an alternative to SMS for 2Step verification, installing an app on Android where the codes will be sent.
It works without any connectivity; it even works on plane mode. This ...
14
votes
2answers
767 views
Can robots.txt for your face be made effective?
As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
