Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

learn more… | top users | synonyms

1
vote
1answer
75 views

Website fell under the Google filters for inbound links

We received a strange message on our support email. Message:Website http://fermersovet.ru/ fell under the Google filters for inbound links. Google Webmaster shows that your site www.mydomain....
-3
votes
1answer
56 views

Google xss games level 6, source code not showing up [closed]

I'm trying to understand how are Google's XSS games implemented (url: https://xss-game.appspot.com/level6, you have to have the cookies of the previous levels to access it). On level 6, when i look at ...
3
votes
3answers
90 views

What security does the new option for two factor authentication that Google offers enforce?

Google has announced a new option for two factor authentication - a popup message. How does this improve security?
106
votes
5answers
14k views

What should I do about Gmail ad asking me for password?

I just got a pop-up after having logged on to Gmail. It said it was from https://googleads.g.doubleclick.net and asked for username and password. What should I do about this? Has anyone else seen ...
2
votes
0answers
50 views

How to reduce Adwords click fraud (botnet clicking ads)? [closed]

I hope this is the right place to ask (here is a similar question but the answers aren't specific for AdWords). My Google AdWords campaign has been under attack for the past 3 days. Bots from ...
4
votes
1answer
65 views

How can I be sure if a webview in a desktop app shows the real web page?

When installing Postman (on Mac), you can log on using your Google account. For this, the logon view from Google is shown in a window (A kind of Webview I assume). How can I be sure this is the real ...
4
votes
1answer
56 views

How can Google search change the location in a URL tooltip?

When hovering over a website link in Google search the tooltip says the link of the website (stackoverflow.com). But when I click it it goes to some Google page and then StackOverflow. But now if I go ...
29
votes
2answers
4k views

What triggers Google's reCAPTCHA

I noticed that Google's "I am not a robot" reCAPTCHA forces me to check correct images on my computer. I installed a virtual machine and tried there. Same thing. Used proxy. Same thing too. Then I ...
3
votes
1answer
115 views

Is Google using canvas fingerprinting for their ads?

Given the fact that canvas fingerprinting is a hype, I raise my eyebrows whenever I see fillText or strokeText in JavaScript code executing on websites. I noticed that Google uses some of these eye ...
-2
votes
1answer
90 views

Should I be concerned that Arabic shows up when I do a google search for maps?

I live in the united states and do not speak arabic at all. Should I be concerned that Arabic script is showing up in one of my searches? Is it possible that a malicious actor who speaks Arabic is ...
60
votes
3answers
4k views

Are staggered roll outs of security patches bad?

Many Android devices, including the Google Nexus line, are now receiving monthly security patches via OTA updates, accompanied by the Android Security Bulletins. However, these updates are often ...
4
votes
2answers
97 views

Google OAuth 2.0 and Java. Is it safe to locally store access tokens?

I Installed this Java app: https://github.com/andresoviedo/google-drive-ftp-adapter The program asks permission to see my Google-Drive files and then stores an access-token on my local harddisk. ...
2
votes
2answers
118 views

Google thinks I am a robot when using proxy, but only in Safari

Google greeted me with this message while being behind a private proxy: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending ...
3
votes
0answers
69 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
3
votes
1answer
117 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
2
votes
1answer
124 views

Google Drive photo security and publicly visible lh*.googleusercontent.com

I thought Google Drive was more secure than this. If I upload a photo to Google Drive, I don't care that it's entrusted to them and I also assume someone working there can look at it. No big deal. ...
1
vote
0answers
60 views

Website Link Changed to Spam in Google Search Results [closed]

My website is the first result for the search term "word search solver" in Google. Recently, I noticed a huge drop in traffic (almost all my traffic comes from Google), so I did a quick search. What I ...
0
votes
0answers
42 views

Stagefright 2.0 - CVE-2015-3876 fix

Im currently studying Stagefright2.0 bugs. I'm wondering how the CVE-2015-3876 was fixed. I know it was caused by an integer overflow and the fix can be found here: https://android.googlesource.com/...
6
votes
1answer
61 views

Can play store applications be tampered with by Google?

Can play store applications be tampered with by Google? I understand that other apps are "unsigned" so you need to have applications from unknown sources turned on. However, Google Apps are "signed" ...
7
votes
1answer
865 views

Why does Firefox claim that my connection to Google is insecure?

I keep receiving this message whenever I open any site from Google: My Firefox is up-to-date, and so my Windows 8.1. Since I don't know much about HSTS, I don't know what's going on, and obviously, ...
6
votes
3answers
178 views

Android full disk encryption

I am using Android 4.4.4. There is an option called phone storage encryption. From what I have read the crypto is secure. However, I read this article which said Google is able to reset passwords: ...
0
votes
1answer
53 views

Malicious tracking script being served from google server to circumvent block lists

I've found some bad JS that tries to open pop-unders and even deliver a likely malicious SWF file for a flash exploit. Thing is, its stored on a google server in a directory it really shouldnt be. ...
9
votes
2answers
285 views

Why does Google prefer ECDHE-RSA-AES128-GCM-SHA256?

I want to configure my new mail server secure as possible and wondering about the used cipher while connecting to Googles SMTP server. I'm curious why they prefer the cipher ECDHE-RSA-AES128-GCM-...
3
votes
1answer
129 views

Google Hangout Dialler exposes user ID

Recently, I got in touch with an online supplier of commodity service. Since they are located in location out of country of my residence I used GoogleTalk's IP phone service ‘Hangout Dialler’ as it’s ...
6
votes
2answers
169 views

How does Google store passwords for remote IMAP/POP services?

It is possible to add non-Google accounts to Gmail and retrieve their mail messages via POP or IMAP. As part of the setup process, one has to provide the login username and password for these accounts....
4
votes
1answer
161 views

Someone called my cell phone offering services about something I have been looking for in the web

I recently started gathering information about poker and poker online. I had no idea about it and I have spent about a week surfing the web (mainly using Google) and consulting different web pages ...
1
vote
1answer
149 views

Is Trillian application unsafe? (Got “Someone has your password” message from Google)

Trying to connect to GoogleTalk from the Trillian app for Android (a universal instant messenger app), I got denied even with the correct password. Then Google e-mailed me saying that my password is ...
1
vote
1answer
88 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
1
vote
0answers
57 views

What are the security risks of using add-ons in Google Docs / Spreadsheets?

I am looking into using some add-on that automated a mail merge from Google Spreadsheet data, via Google Doc templates, to PDFs that get emailed out. Several add-ons that I looked into (such as ...
1
vote
3answers
83 views

How can the ISP block Sarawak Report even if I am entering Sarawak Report from google search?

Sarawak report is blocked in Malaysia. I think that by doing a Google search on relevant keywords, and then click on the relevant link, I can access the website, because from what I know, the ...
1
vote
0answers
24 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
0
votes
1answer
48 views

Could Google read Map Api InfoWindow html content?

I used google map api. I read some high protected data on the my HTML page. And write them into InfoWindow on google maps using javascript. Could google read infowindow html content? There are no ...
4
votes
1answer
78 views

Wordpress.org pages refresh when logging out of Gmail

I've noticed that when I change my Gmail account by logging out of one account and then logging into another, all open Wordpress.org pages refresh. Additionally, when I recently changed a password on ...
0
votes
2answers
112 views

All subdomains blocked by Google SafeBrowsing

GoogleSafebrowsing seems to have blacklisted one of my domain names, along with all its subdomains. It is visible on this google search page. I'm a seasoned linux system administrator, I've checked ...
8
votes
1answer
91 views

Is Google identity sign in product HIPAA compliant?

I want to use this product to save me a month of coding. Looking for a product that Password expiration forgot password system lock after x times of wrong password Valid passwords rules (min 8 ...
2
votes
0answers
28 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
4
votes
2answers
178 views

Are malicious drive-by-downloads detectable based on file type/mime type?

Drive-by-downloads are automatic downloads without user interaction. We provide a free service for uploading large files and notifying users by email (this one, something like ge.tt or WeTransfer). ...
2
votes
0answers
128 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system (...
1
vote
0answers
173 views

Google images redirects to some page with random images [closed]

My customer have some photos on images.google.com that when clicked redirects to some pages and then stops on http://imageol.com/"something" with one random image. First I thought that it was a virus,...
1
vote
1answer
47 views

Can a domain administrator read my search queries? [closed]

Google's privacy policy states that they log your search queries. They also state that domain administrators have access to your Google Account information (e-mail and "other data") as well as ...
7
votes
1answer
139 views

How does Google Analytics prevent fake data attacks against an entity's traffic?

In order to register a "hit" on Google Analytics, the list of things required are: Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
2
votes
2answers
851 views

Connection to Google websites is not secure

When I open Gmail or Google search and leave it opened for a while, I notice this yellow warning triangle, as in these photos: However, when I refresh the page it returns to the usual green lock ...
1
vote
1answer
72 views

Is it secure to make a publicly available Web App that has URL's generated from a hash?

If you know of a better title, please feel free to edit the title. I'm making a simple google Web App so colleagues at my workplace can view details about a QA that they received. The issue is only ...
0
votes
1answer
56 views

Why only Google warn us about attackers?

There are so many search engines like ask.com, yahoo.com and many more, but only Google warn us about attackers. Why so?
0
votes
0answers
57 views

Is it dangerous to use Google Apps from critical systems or networks?

I'm evaluating the access to Google Apps from a critical server. This is a conceptual nightmare but I should be scientific and explain and justify the real threats to the server if it access just ...
2
votes
1answer
752 views

HTML iframe security exploit

Can somebody explain if there's something malicious in this HTML, The width and height of the iframe ares set to 1 and it's out of the view with top: -100px; statement. I believe it takes some some ...
3
votes
1answer
357 views

Google crawling and SQL injection

recently my logs shows attack signatures from /news/html/?0'union//select//1//from//(select//count(*),concat(floor(rand(0)*2),0x3a,(select//concat(user,0x3a,password)//from//pwn_base_admin//limit/...
2
votes
0answers
84 views

Google.com serving *.portal.azure.com SSL certificate?

Just ran across this in my own browser (Chrome, Mac OS) where going to google.com would serve a *.portal.azure.com certificate. It seemed to be signed all the way to the root too. This disappeared ...