Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

7
votes
1answer
94 views

Why does Google consider Thunderbird not secure enough?

There is a special setting in Google accounts to allow "less secure applications" access to your account. If you turn this off, Mozilla Thunderbird won't work to check your e-mail. This is confirmed ...
0
votes
1answer
39 views

How To Stop A Mobile Verification Attack

I am thinking of using mobile phone number verification for the sign up step in my web application but how do I prevent a hacker or a malicious user from sending mobile verification requests to an ...
1
vote
3answers
90 views

What is more secure practice? Hosting from CDN or Main website

There has been a long Debate on CSP modelling, I have a Web application and I use JQuery in it, For that i use JQuery main site http://code.jquery.com/jquery-x.yy.z.min.js to Host it on my Site to ...
2
votes
1answer
45 views

What are the disadvantages of Google Safe Browsing?

I'm currently undertaking my thesis regarding phishing detection. I understand that Google Safe Browsing relies on a constantly updated blacklist in order to classify webpages. Their blacklist does ...
0
votes
1answer
46 views

Is it a good idea to preventive use a robots.txt that disallows all search engines to index query strings in order to slow down reconnaissance?

I know that robots.txt is not a security feature. But, indexed and cached information by search engines might be incredibly helpful in the reconnaissance phase of a penetration test and potentially ...
0
votes
1answer
76 views

Random persistent Gmail password requests from Google

I am trying to figure out something for my father in law. This persistent popup keeps interrupting anything anyone is doing on his desktop by requesting he put in his password. I told him not to. It ...
1
vote
1answer
97 views

Website fell under the Google filters for inbound links

We received a strange message on our support email. Message:Website http://fermersovet.ru/ fell under the Google filters for inbound links. Google Webmaster shows that your site www.mydomain....
3
votes
3answers
103 views

What security does the new option for two factor authentication that Google offers enforce?

Google has announced a new option for two factor authentication - a popup message. How does this improve security?
106
votes
5answers
14k views

What should I do about Gmail ad asking me for password?

I just got a pop-up after having logged on to Gmail. It said it was from https://googleads.g.doubleclick.net and asked for username and password. What should I do about this? Has anyone else seen ...
2
votes
0answers
77 views

How to reduce Adwords click fraud (botnet clicking ads)? [closed]

I hope this is the right place to ask (here is a similar question but the answers aren't specific for AdWords). My Google AdWords campaign has been under attack for the past 3 days. Bots from ...
4
votes
1answer
68 views

How can I be sure if a webview in a desktop app shows the real web page?

When installing Postman (on Mac), you can log on using your Google account. For this, the logon view from Google is shown in a window (A kind of Webview I assume). How can I be sure this is the real ...
4
votes
1answer
59 views

How can Google search change the location in a URL tooltip?

When hovering over a website link in Google search the tooltip says the link of the website (stackoverflow.com). But when I click it it goes to some Google page and then StackOverflow. But now if I go ...
29
votes
2answers
4k views

What triggers Google's reCAPTCHA

I noticed that Google's "I am not a robot" reCAPTCHA forces me to check correct images on my computer. I installed a virtual machine and tried there. Same thing. Used proxy. Same thing too. Then I ...
3
votes
1answer
125 views

Is Google using canvas fingerprinting for their ads?

Given the fact that canvas fingerprinting is a hype, I raise my eyebrows whenever I see fillText or strokeText in JavaScript code executing on websites. I noticed that Google uses some of these eye ...
-2
votes
1answer
101 views

Should I be concerned that Arabic shows up when I do a google search for maps?

I live in the united states and do not speak arabic at all. Should I be concerned that Arabic script is showing up in one of my searches? Is it possible that a malicious actor who speaks Arabic is ...
61
votes
3answers
4k views

Are staggered roll outs of security patches bad?

Many Android devices, including the Google Nexus line, are now receiving monthly security patches via OTA updates, accompanied by the Android Security Bulletins. However, these updates are often ...
4
votes
2answers
112 views

Google OAuth 2.0 and Java. Is it safe to locally store access tokens?

I Installed this Java app: https://github.com/andresoviedo/google-drive-ftp-adapter The program asks permission to see my Google-Drive files and then stores an access-token on my local harddisk. ...
2
votes
2answers
151 views

Google thinks I am a robot when using proxy, but only in Safari

Google greeted me with this message while being behind a private proxy: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending ...
3
votes
0answers
71 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
3
votes
1answer
124 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
2
votes
1answer
200 views

Google Drive photo security and publicly visible lh*.googleusercontent.com

I thought Google Drive was more secure than this. If I upload a photo to Google Drive, I don't care that it's entrusted to them and I also assume someone working there can look at it. No big deal. ...
1
vote
0answers
85 views

Website Link Changed to Spam in Google Search Results [closed]

My website is the first result for the search term "word search solver" in Google. Recently, I noticed a huge drop in traffic (almost all my traffic comes from Google), so I did a quick search. What I ...
0
votes
0answers
49 views

Stagefright 2.0 - CVE-2015-3876 fix

Im currently studying Stagefright2.0 bugs. I'm wondering how the CVE-2015-3876 was fixed. I know it was caused by an integer overflow and the fix can be found here: https://android.googlesource.com/...
6
votes
1answer
63 views

Can play store applications be tampered with by Google?

Can play store applications be tampered with by Google? I understand that other apps are "unsigned" so you need to have applications from unknown sources turned on. However, Google Apps are "signed" ...
7
votes
1answer
1k views

Why does Firefox claim that my connection to Google is insecure?

I keep receiving this message whenever I open any site from Google: My Firefox is up-to-date, and so my Windows 8.1. Since I don't know much about HSTS, I don't know what's going on, and obviously, ...
6
votes
3answers
213 views

Android full disk encryption

I am using Android 4.4.4. There is an option called phone storage encryption. From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: ...
0
votes
1answer
54 views

Malicious tracking script being served from google server to circumvent block lists

I've found some bad JS that tries to open pop-unders and even deliver a likely malicious SWF file for a flash exploit. Thing is, its stored on a google server in a directory it really shouldnt be. ...
9
votes
2answers
329 views

Why does Google prefer ECDHE-RSA-AES128-GCM-SHA256?

I want to configure my new mail server secure as possible and wondering about the used cipher while connecting to Googles SMTP server. I'm curious why they prefer the cipher ECDHE-RSA-AES128-GCM-...
3
votes
1answer
174 views

Google Hangout Dialler exposes user ID

Recently, I got in touch with an online supplier of commodity service. Since they are located in location out of country of my residence I used GoogleTalk's IP phone service ‘Hangout Dialler’ as it’s ...
6
votes
2answers
172 views

How does Google store passwords for remote IMAP/POP services?

It is possible to add non-Google accounts to Gmail and retrieve their mail messages via POP or IMAP. As part of the setup process, one has to provide the login username and password for these accounts....
4
votes
1answer
163 views

Someone called my cell phone offering services about something I have been looking for in the web

I recently started gathering information about poker and poker online. I had no idea about it and I have spent about a week surfing the web (mainly using Google) and consulting different web pages ...
1
vote
1answer
173 views

Is Trillian application unsafe? (Got “Someone has your password” message from Google)

Trying to connect to GoogleTalk from the Trillian app for Android (a universal instant messenger app), I got denied even with the correct password. Then Google e-mailed me saying that my password is ...
1
vote
1answer
88 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
1
vote
0answers
69 views

What are the security risks of using add-ons in Google Docs / Spreadsheets?

I am looking into using some add-on that automated a mail merge from Google Spreadsheet data, via Google Doc templates, to PDFs that get emailed out. Several add-ons that I looked into (such as ...
1
vote
3answers
90 views

How can the ISP block Sarawak Report even if I am entering Sarawak Report from google search?

Sarawak report is blocked in Malaysia. I think that by doing a Google search on relevant keywords, and then click on the relevant link, I can access the website, because from what I know, the ...
1
vote
0answers
24 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
0
votes
1answer
50 views

Could Google read Map Api InfoWindow html content?

I used google map api. I read some high protected data on the my HTML page. And write them into InfoWindow on google maps using javascript. Could google read infowindow html content? There are no ...
4
votes
1answer
80 views

Wordpress.org pages refresh when logging out of Gmail

I've noticed that when I change my Gmail account by logging out of one account and then logging into another, all open Wordpress.org pages refresh. Additionally, when I recently changed a password on ...
0
votes
2answers
121 views

All subdomains blocked by Google SafeBrowsing

GoogleSafebrowsing seems to have blacklisted one of my domain names, along with all its subdomains. It is visible on this google search page. I'm a seasoned linux system administrator, I've checked ...
8
votes
1answer
92 views

Is Google identity sign in product HIPAA compliant?

I want to use this product to save me a month of coding. Looking for a product that Password expiration forgot password system lock after x times of wrong password Valid passwords rules (min 8 ...
2
votes
0answers
33 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
4
votes
2answers
212 views

Are malicious drive-by-downloads detectable based on file type/mime type?

Drive-by-downloads are automatic downloads without user interaction. We provide a free service for uploading large files and notifying users by email (this one, something like ge.tt or WeTransfer). ...
2
votes
0answers
137 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system (...
1
vote
0answers
190 views

Google images redirects to some page with random images [closed]

My customer have some photos on images.google.com that when clicked redirects to some pages and then stops on http://imageol.com/"something" with one random image. First I thought that it was a virus,...
1
vote
1answer
48 views

Can a domain administrator read my search queries? [closed]

Google's privacy policy states that they log your search queries. They also state that domain administrators have access to your Google Account information (e-mail and "other data") as well as ...
7
votes
1answer
173 views

How does Google Analytics prevent fake data attacks against an entity's traffic?

In order to register a "hit" on Google Analytics, the list of things required are: Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
2
votes
2answers
869 views

Connection to Google websites is not secure

When I open Gmail or Google search and leave it opened for a while, I notice this yellow warning triangle, as in these photos: However, when I refresh the page it returns to the usual green lock ...
1
vote
1answer
73 views

Is it secure to make a publicly available Web App that has URL's generated from a hash?

If you know of a better title, please feel free to edit the title. I'm making a simple google Web App so colleagues at my workplace can view details about a QA that they received. The issue is only ...
0
votes
1answer
58 views

Why only Google warn us about attackers?

There are so many search engines like ask.com, yahoo.com and many more, but only Google warn us about attackers. Why so?
0
votes
0answers
57 views

Is it dangerous to use Google Apps from critical systems or networks?

I'm evaluating the access to Google Apps from a critical server. This is a conceptual nightmare but I should be scientific and explain and justify the real threats to the server if it access just ...