Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
1
vote
2answers
67 views
When pasting sensitive links or text on Google Chrome bar - does Google store it?
When I paste some links or sensitive information by mistake on the Google Chrome URL Bar, that might trigger a search on Google.
Does Google store all of them, including that sensitive information?
0
votes
1answer
57 views
How does Google Authenticator interact with apps on an iPhone?
I am clear on how Google Authenticator works when logging on to a website and I am clear on that.
However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
0
votes
0answers
36 views
Does Google store the number you used to create the account? [on hold]
Let's say someone used a phone number to create a Google account (verifying your
Google account). Can law enforcement officers or attackers extract the number?
The motivation of my question comes ...
0
votes
2answers
125 views
How does Google crawl pages which require login?
I queries a phrase on Google, and when I clicked on the first result, it asked me to login, and wasn't allowing me to proceed without login.
If it matters, the query that I searched was "how to exit ...
1
vote
0answers
37 views
Does Google Analytics maintain a database of IP addresses that visited a webpage? [closed]
I am attempting to balance my need for analytics with privacy concerns. I know that Google Analytics offers an IP anonymization feature to remove the last octet of visitors' IP addresses, should a ...
0
votes
0answers
16 views
Can a limited permission Chrome extension access multidomain cookies?
Can a Chrome extension that's only allowed to "read and modify all data on youtube.com" access or modify data related to my Google account?
(Background: The sign in window is hosted at a different ...
0
votes
1answer
65 views
Got “Security alert” e-mail from Google about a sign-in from an unknown device I'd like to track down [closed]
I just got a horrifying e-mail from Google that led to a webpage stating that there was a "New sign-in on LG Nexus 5". I immediately scrambled to change all my passwords to protect myself because I ...
2
votes
1answer
102 views
Websites that can connect with Gmail
I'm currently job searching, and came across a site that knows when I'm signed into G-mail. A quick look at the login page shows that I can use my Gmail account to login.
Looking at the Google API, ...
1
vote
2answers
184 views
How secure is the fingerprint sensor in the Pixel 3?
As far as I understand different fingerprint scanners have different security levels. Old fingerprint print scanners could be fooled quite easily as the CCC (Chaos Computer Club) demonstrated.
How ...
3
votes
2answers
90 views
Android Security - Giving Google Your Phone Number
While setting up my Android account on my phone, I am asked
If you like, you can add this phone's number to your account ....
..for example you number will be used to:
Reset your password ...
0
votes
1answer
92 views
Why does Google say my password is weak when I only added a division sign after a bunch of random stuff?
I noticed something very interesting after trying to charge my password for a Google account of mines, it seems strange.
I went to the Google security control panel and selected to change my password ...
-1
votes
1answer
65 views
Does Google Chrome collect data unrelated to browsing activity?
I'm exclusively running Firefox, but I'd like to install the leading browser Chrome for troubleshooting purposes. Browsing-related data collection isn't a concern in this case, but I'm worried if the ...
1
vote
0answers
41 views
Working with Security Metadata in APK file
According to this Blog post, Google has added a Security Metadata on top of an APK to verify that it was originally distributed by Google Play. More specifically it adds APK Signing Block to the APK ...
2
votes
0answers
80 views
Disable Google API key without access to google account
I was trying the new google api - I created anonymous account - added there my debit card, set up the API key for google maps. Tried API and pushed my API key to shared repository (yes I know - my ...
7
votes
2answers
158 views
Are FIDO U2F keys (like dual Yubikeys or dual Google Titan keys) undermined by the Google account recovery process?
According to the Google information page here: https://support.google.com/accounts/answer/6103523
If you don’t have another second step or forgot your password
Note:
2-Step Verification ...
1
vote
0answers
18 views
Google search results hijacked locally / displaying moot in all browsers [duplicate]
So, since yesterday I have quite obviously caught something that Windows Defender doesn't recognize.
Symptoms:
All Google services suffer from Ad injection (non-YouTube ad overlays that cannot be ...
0
votes
1answer
283 views
Google certificate gcp.gvt2.com untrusted / expired?
My antivirus noted gcp.gvt2.com certificate is expired today, gvt2.com alegently used by google analytics.
It might to do with Google distrust of Symantec https://security.googleblog.com/2018/03/...
0
votes
1answer
68 views
Unknown URL parameters in google query
I received an email which is classified as "potentially malicious" by my email program (Thunderbird), where links are actually a google URL query with extra parameters:
For example, the displayed ...
3
votes
1answer
91 views
Google login button - what prevents an rogue app from stealing a token?
Here are steps to setup a Google login button on a web client:
https://developers.google.com/identity/sign-in/web/sign-in
When click on the Google login button this pops up:
All the interactions are ...
1
vote
1answer
209 views
Does Google flag all subdomains for malware/phishing if one is infected?
After I tried logging to my host's cpanel today, I got the safe browsing warning, about the site "redirecting users to harmful websites".
The cpanel uses an address like this:
https://subdomainXX....
0
votes
0answers
26 views
How large is AppEngine's Private Key?
AppEngine provides methods for signing binary data - e.g. via the Go language's SignBytes[1]
However, it doesn't specify any information about how large the private key is.
Is this published ...
4
votes
2answers
899 views
How does Google protect against scraping?
I'm trying to implement security against scraping on my website to prevent basic scraping techniques.
Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
2
votes
1answer
109 views
Concerted attack on linked google accounts?
Yesterday I received two (authentic) e-mails from Google saying they prevented sign-in attempts to two (very old) google accounts of mine. Google says they used the correct passwords, which turned out ...
1
vote
2answers
316 views
Does Google identify me from my 'phone?
As per my previous question I would like to escape Google as much as possible.
Since I realize that I can’t do this completely, I will do what I can, although some might find it pointless.
I have ...
4
votes
2answers
846 views
By using reCAPTCHA which information is Google collecting?
Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
0
votes
1answer
46 views
Does facebook/google app id need to keep secret if possible?
For example, suppose I have an app which includes a link to use the facebook feed dialog, eg:
https://www.facebook.com/dialog/feed?app_id=xxxxx&link=
Which means the Facebook id is revealed to ...
0
votes
0answers
35 views
How to safely store OAuth2 credentials in a Desktop application
I've been searching for a good answer to this problem for a while now, and have seen questions that could be duplicates, but none of them seem to have good/definitive answers that work for my case.
I ...
2
votes
0answers
37 views
Minimum set of ACS features to secure remote PCIe devices
According to a Google blog post, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service features (ACS, ...
0
votes
0answers
123 views
In google OAuth callback, is providing redirect_uri by client a security risk?
for example, at callback url of google oauth,to convert 'code' to access_token, I need:
Client side href:
https://accounts.google.com/o/oauth2/auth?scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%...
0
votes
2answers
152 views
How does google know if I am logging in from a new machine(using web browser)? [duplicate]
Every time i sign into my google account on a web browser on a new machine, it warns me of suspicious activity. How does google know its a new machine? I am trying to implement a similar thing for my ...
3
votes
1answer
142 views
Does Google check for Unicode characters to determine spam now in Gmail?
I was reading some tweets from @pwnallthethings regarding the John Podesta spear phishing emails.
What the email looked like:
The Change Password button link, notice the domain com-...
1
vote
1answer
241 views
Outsmart Google Drive censorship with 7zip encryption
I use sometimes Google Drive for sharing large files. Google Drive is fast and user friendly.
I don't wish that Google sees the content of my files and try to encrypt the filename and content. My ...
3
votes
1answer
350 views
Android Messages Web and Privacy
Recently Google rolled out the feature to send SMS/Chat messages over Web via their Android Messages app.
The approach seems similar to the WhatsApp Web Client. What I didn't find however are ...
1
vote
0answers
43 views
Security concerns in cookie exporting between browsers
I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
1
vote
2answers
572 views
Is there a way to fool google with wrong location information [closed]
Google maps tracks our mobile location accurately using multiple ways: gps, cellular network, nearby wifi networks etc. It knows the hotels, banks and other places I have been to. Recently, when I ...
1
vote
0answers
125 views
Google Accounts: Reverse lookup of recovery-email
Is there a way to check all the emails that has my email as "Recovery Email"?
0
votes
0answers
180 views
Why does Google's “identify a thing” captcha include a long waiting time between showing images?
One of Google's "Recaptcha" challenges asks users to identify a "thing" (typically a car or something similar) in a set of different small photos on a 3x3 grid:
After clicking one of the "things", ...
0
votes
0answers
34 views
After downloading my private key/public key pair from a Google API service account, where is my public key?
I'm sure there's an obvious answer - I have been searching. I created a Google service account and generated a key. The tutorials say that this creates a public/private key pair. The created file is ....
14
votes
2answers
903 views
How can I escape Google?
I am unsure how to formulate this question, so please feel free to edit it.
I considered asking on https://android.stackexchange.com/ but feel that this is more security related and more likely to ...
0
votes
1answer
167 views
What is the risk of sharing the client_secret.json in a public repo?
I have a python script which writes data into a public google sheets file and for using the google sheets API I need to have a user authorize my script. I want to share the script with others and thus ...
0
votes
0answers
1k views
How to handle a Google security warning to a non Google email address?
I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account.
All the links in the emails point ...
0
votes
1answer
83 views
Best practice to share google drive API credentials for being used by a script?
In a nutshell: Shall I share oauth2-credentials in our source code with the scope of full write-access to a google drive from a dedicated single-purpose google-account?
so, I've written a python ...
1
vote
1answer
128 views
I provided lots of un-encrypted personal data to Google Drive over the years. How can I best retake control over my data?
I am an average user of the internet, with my very legal, normal and humble private life. Over the years I have uploaded all kinds of personal data to Google Drive, and I'm regretting this decision, ...
0
votes
1answer
3k views
Can my employer see my Google Search Data on my personal IOS device when I’m at home but accidentally logged into company Google Account?
I was browsing the web at home using Safari on my IOS device (mainly Google search). I happened to scroll to the very bottom of the screen and realized Google was logged into my Google account for ...
2
votes
1answer
321 views
How to route internet traffic through google
I'm in a situation which my network provider blocks all my internet access except for google and its branches (drive , gmail ,etc...).
I'm looking for a way to route my traffic through google (with a ...
1
vote
1answer
147 views
Haunted Google Account?
Not to be dramatic but at my level of inexperience, the title is what I'm left with. Hoping smarter people can point me in the right direction, so here goes...
A google account used in a school ...
7
votes
3answers
1k views
How does entering “a” phone number help Google “verify it's me?”
Today I tried to sign into my Google account while at university. Google blocked the attempt, and asked for a phone number. Below is a screenshot of the form Google showed me.
It says:
Verify it's ...
6
votes
0answers
809 views
How was Google recaptcha v2 bypassed several times?
There are multiple reports of a reᴄᴀᴘᴛᴄʜᴀ v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ.
But there is something I am failing to understand: for ...
5
votes
1answer
174 views
How Google Detects State Sponsored Attacks
A user on Twitter posted a screenshot in which Google warns him as he may be targeted by state sponsored attackers. What kind of attacks can be detected by Google and how?
0
votes
0answers
104 views
What are the risks with logging in with Google or FB auth to third party sites? [duplicate]
You can now log in via FB or Google to sites like this one. That's because, presumably, once you've been authenticated from either, you can be trusted to manage information of a less-confidential ...
