Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
576
questions
0
votes
0
answers
27
views
Is it possible to determine which Google account triggered Google Find My Device? [closed]
I received an alert that my phone was located by Google Find My Device. I did not do it.
No one has accessed my account and I have 2fa enabled
1
vote
0
answers
72
views
Hundreds of bots creating accounts using sign-in with Google
We are getting hundreds of bots creating accounts using sign-in with google, like this in this format:
Colin Bush: [email protected]
Tambra Lockett: [email protected]
Marjorie ...
- 111
0
votes
0
answers
28
views
Is using the user's default PDF viewer better than using the internal Google PDF viewer
I'm figuring out some Google Policy Settings, which should be deployed via GPO and I was wondering if AlwaysOpenPdfExternally, which disables the Google PDF viewer and opens the device's default PDF ...
- 1
1
vote
0
answers
73
views
In Google account, a suspicious Android Galaxy Tab device is persistent to revoking
I have a Galaxy Tab device, but have already signed out from it and reset the tab to factory.
However, in my Google account, there is still a device of "Galaxy Tab", added 200+ days ago, in ...
Michael
0
votes
0
answers
108
views
Does Google use an IP address to identify a user? [duplicate]
I used Google Search in Chrome incognito mode without logging in to my account, so no cookies were stored. However, somehow I instantly got a bunch of ads relevant to my search on Instagram. There ...
3
votes
0
answers
186
views
Can a bad guy ever get access to my gmail account using ONLY the 2fa app or ONLY the recovery phone (plus username)?
Let's say X is a malicious person.
Let's say I have a gmail account with a recovery phone and with 2fa
enabled. Let's say X knows the username but not the password. X doesn't have any other ...
- 131
0
votes
1
answer
860
views
Is this google security alert legit?
I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
0
votes
0
answers
44
views
Does Google Colaboratory save code on local computer when using local runtime?
When running Python code from Google Colab on local computer (local runtime), is it saved on the local computer or not?
- 1
1
vote
0
answers
61
views
What are the ranges of values for DH parameter a and DH parameter b [closed]
I have discovered that Diffie Hellman(DH)shared key is unequal in Apple Numbers, Google Sheets, and Mac Excel (2008).
In Section 1.0, the first try at a solution uses a small Prime to produce certain ...
- 11
2
votes
0
answers
440
views
Automated bot/spammer bypassing google recaptcha v2
I have a Laravel registration form with the invisible google recaptcha v2 installed with the security set to highest level within the recaptcha admin console - code as follows:
<div>
<div ...
- 121
0
votes
1
answer
2k
views
How does Google's "on-device encryption" work?
I use Google to store some of my passwords and I noticed a "On-Device encryption" option in Google Chrome settings, that I had disabled. From what I understood, by allowing this, the ...
- 105
0
votes
2
answers
158
views
Digital legacy: safe to save password manager login info in Gmail draft?
Google accounts have a "Digital Legacy" feature, where accounts that go inactive for a long period (3 months, 6 months, etc.) and do not respond to alerts will eventually trigger Inactive ...
- 373
1
vote
0
answers
61
views
RESTful API with Google API and OAuth2
As the title says, I want to create a RESTful API (stateless) that will access Google API endpoints. First I want to authenticate the user and then use that token provided by Google to access Google ...
- 11
1
vote
0
answers
87
views
Resetting a well-protected Google account password
Situation: a new client came to me because of a torrent of identity theft issues. One of the issues: several of their Google accounts were having their passwords changed every few days. Each time, ...
2
votes
1
answer
1k
views
How to interpret a Google "Someone is trying to sign in to your account from another device" message?
I received this message on my Pixel 4a phone yesterday evening:
I pressed "No, it's not me" and then saw this message:
I was at home with a cat and five-year-old son. I was cooking and my ...
- 1,629
1
vote
2
answers
1k
views
Security Implications from Base64 Image
I copy / pasted a data:image/png;Base64 image from a Google search into a Google Slide, before realizing it was a BASE64 image. Is there any possibility that this contains malicious code, or any way ...
1
vote
0
answers
98
views
Creating session based on Google sign in
Does it make sense to implement your own session management on top of the Google sign in?
Scenario:
I have a web app where I allow users to sign in with Google. I just need this sign in to verify the ...
- 283
1
vote
1
answer
43
views
University Email (Outlook) Changed and Auto-Updated in Browser and Google Account
I recently noticed my email address for the University I work for was changed - from "[email protected]" to "[email protected]". I also noticed that the version of the ...
- 11
1
vote
1
answer
128
views
Google Auth - should you send the ID token to the FE, or create a new JWT?
I'm trying to understand what the best practice is here.
When a user signs in with Google, they then send you an 'id_token' which contains a bunch of information about the user, and the token ...
- 111
0
votes
1
answer
245
views
Is Google mining the content of emails I send to people who use gmail? Could they?
If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
- 9
1
vote
1
answer
108
views
Does Google share it's international database of search queries with LEA agencies for purposes of breaking encryption?
So, suppose a person accidentally typed their complex encryption password into Google search. They weren't logged in to any Google services so the search was anonymous, and they continued to use this ...
- 11
1
vote
0
answers
899
views
Can websites see the Google account I'm logged into?
If I go on a website, can the owner see what Google and Youtube account I use (on the same browser or not) even if I don't give that information away?
I ran one of those tests from privacy.net and it ...
user282628
0
votes
1
answer
148
views
Unauthorized access to Google account after change of password, what now?
About a month ago, a friend got a security warning about some stranger signing into his Google account, so we changed his password to a strong randomly generated password with all characters (I think ...
- 169
2
votes
2
answers
185
views
When using Google Translate's "website" functionality, do passwords entered go through Google?
I'm looking at the functionality offered by Google Translate's option to translate an entire website. It opens in a new tab with the domain https://whatever-is-the-website-domain-com.translate.goog/.
...
- 373
1
vote
0
answers
335
views
How does google recognize my device when I login and have 2FA
I have 2FA turned on for my google account. I was using incognito to log in, and google still recognized my device;
I tried using a VPN to change my IP address, but it still recognized my device. I'm ...
- 285
1
vote
0
answers
9k
views
I received an email that someone created Snapchat with my e-mail - is this a known scam?
On July 31 and a second time after around twelve o'clock at night (August 1) I received two E-mails, which asked me to confirm my E-mail to create an Snapchat account and the second one was stating ...
0
votes
1
answer
2k
views
Abnormal Receiving of Google Verification Codes
Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
- 1
1
vote
2
answers
393
views
How are advertisements through Facebook targeting me moments after searching on a different computer
When connected to my home network, I only use the Facebook app on my phone. I never log into Facebook via a browser on my laptop or other computer connected to my home network.
How is it possible that ...
- 267
0
votes
1
answer
1k
views
Does Google Authenticator share device information to website?
I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
- 1
1
vote
1
answer
597
views
Why can't I use my phone for Google's Advanced Protection?
I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key.
The advanced protection enrollment, asks me to ...
- 163
2
votes
1
answer
243
views
Can my ISP know that I have more than one Google Drive account?
So, I have 2 Google Drive accounts. Let's say Drive A and Drive B.
If one day I login/upload to Drive A then log out, then login/upload to Drive B, can they notice that I have 2 different accounts? Or ...
user276916
0
votes
1
answer
116
views
Why is Google advising to not use the super admin account in Google Workspaces for daily activities
Google is advising here to not use a super admin account for daily activities in Google Workspaces: https://support.google.com/a/answer/9011373?hl=en&fl=1
Unfortunately Google does not give any ...
- 1
0
votes
1
answer
1k
views
Can Google see the screen when using Chrome Remote Desktop?
I was wondering if Google can see my computer screen while I'm using Chrome Remote Desktop.
Let's assume there's my main PC named A and my other PC named B.
PC B will have the Chrome extension ...
- 1
1
vote
2
answers
243
views
Using Google Domains' Email Forwarding Service for throwaway accounts and other things
I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
- 11
0
votes
1
answer
1k
views
Does Google Meet leak my IP?
My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible.
But when I read about webRTC and STUN servers, I ...
- 1
0
votes
0
answers
224
views
Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?
I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
- 101
1
vote
0
answers
70
views
Does Google Update perform cryptographic checks against releases?
My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities.
On the pro side, ...
- 169
0
votes
0
answers
293
views
Google Password I didn't create
I opened Google, and a popup occurred briefly before I reflexively closed it. I then realized it had said something about a new password saved to the Google Password Manager, I think - which is weird,...
- 111
1
vote
3
answers
1k
views
Mistyped "google" and came to a suspicious page with a browser hijacker
I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com
After going to ...
- 111
0
votes
1
answer
993
views
How to view all SSL certificates for a website using Google Chrome?
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
5
votes
0
answers
1k
views
Disturbing/suspicious Google notifications about account recovery and password change
This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
- 151
27
votes
2
answers
9k
views
How is Google abused for DDoS attacks?
While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent.
I'm ...
- 383
0
votes
1
answer
228
views
How google is protecting the MITM attack
If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
- 3
2
votes
1
answer
182
views
Backup Google Authenticator transferring QR code
I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
- 23
0
votes
1
answer
115
views
Is this insecure to show in cookie Google Tag?
While researching one site, I found that if you enter document.cookie (Firefox) I can see this filed in cookie _gat_gtag_UA_XXXXXXXXX_1=1. There were plain text. As I know gtag is for Google Tag ...
- 157
0
votes
1
answer
2k
views
Is it possible for malware to infect google drive?
If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
user261600
4
votes
1
answer
4k
views
What is Google's "match the number" verification trying to achieve?
When I log into my Google account from my laptop with 2FA enabled, I usually get a prompt on my smartphone in order to confirm the log in. I tap OK and then I am logged in.
However sometimes I am not ...
- 143
0
votes
0
answers
148
views
Requiring Google Mobile Service token
I'm pentesting an android application written in Cordova and while inspecting the network traffic I found some interesting endpoint that I would like to test.
However, this endpoint need a tokenID (ex....
- 101
-1
votes
2
answers
427
views
Are the private URLs from Google Photos actually unguessable?
Maybe my math is wrong, but here it goes.
If I generate a private url to share an album in Google Photos, I get something like this
https://photos.app.goo.gl/*****************
where the asterisks are ...
- 103
16
votes
2
answers
6k
views
Is cloudflare injecting tracking code for PDF requests in browsers via the browser PDF plugin?
Opening a PDF link in the browser (e.g. google chrome with the ootb PDF viewer plugin) apparently indicates that when the PDF is hosted on a cloudflare-facing domain there is additional data present ...
- 291