Skip to main content

Questions tagged [google]

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

Filter by
Sorted by
Tagged with
0 votes
3 answers
179 views

How dangerous is it to Google my password? [duplicate]

I have heard numerous, numerous times that Googling your password to anything (like is Pass124 a good password), is a very bad idea- and surprisingly there is no question (that I could find) on this ...
security_paranoid's user avatar
1 vote
0 answers
41 views

Google SAML auth not working through APP tile but works with direct link

We've recently migrated from Okta to Google for work for AWS authentication. Our amazon org authentication is setup through IAM Identity center. It was working flawlessly using Okta but since we ...
JeanneD4RK's user avatar
0 votes
1 answer
106 views

How does Google Maps guess my location without browser permissions or Google account permissions? [duplicate]

I haven't granted location privileges to the Google Maps website. If I choose a destination for a route, and then click the suggestion Your location for an origin, the browser prompts to grant the ...
Luke Sawczak's user avatar
1 vote
0 answers
123 views

Google Login with idToken and JWT (Java)

We are integrating Google login in our app and we intend to use the idToken for authentication. We are already sending the idToken from the app to the back-end server, and intend to verify the token ...
Lucas Basquerotto's user avatar
0 votes
0 answers
107 views

Does the New Google Session Hijacking Technique Require Access to my Computer

There is a new article explaining the details of the new Google OAuth2 exploit where a Google session can be restored using a Chrome token. But what I can't seem to find on Google or in the article ...
Dave's user avatar
  • 101
0 votes
0 answers
147 views

Mtls in Google Cloud pub/sub oauth 2.0

I am trying to ascertain if Google Cloud Pub/Sub supports OAuth 2.0 with Mutual TLS (mTLS). Despite conducting an internet search, I couldn't find any pertinent information regarding mTLS support (it ...
SempriGno's user avatar
1 vote
0 answers
218 views

Hundreds of bots creating accounts using sign-in with Google

We are getting hundreds of bots creating accounts using sign-in with google, like this in this format: Colin Bush: [email protected] Tambra Lockett: [email protected] Marjorie ...
Zeone line's user avatar
0 votes
0 answers
75 views

Is using the user's default PDF viewer better than using the internal Google PDF viewer

I'm figuring out some Google Policy Settings, which should be deployed via GPO and I was wondering if AlwaysOpenPdfExternally, which disables the Google PDF viewer and opens the device's default PDF ...
Cradles's user avatar
1 vote
0 answers
132 views

In Google account, a suspicious Android Galaxy Tab device is persistent to revoking

I have a Galaxy Tab device, but have already signed out from it and reset the tab to factory. However, in my Google account, there is still a device of "Galaxy Tab", added 200+ days ago, in ...
user avatar
0 votes
0 answers
227 views

Does Google use an IP address to identify a user? [duplicate]

I used Google Search in Chrome incognito mode without logging in to my account, so no cookies were stored. However, somehow I instantly got a bunch of ads relevant to my search on Instagram. There ...
Sogawa-sps's user avatar
3 votes
0 answers
265 views

Can a bad guy ever get access to my gmail account using ONLY the 2fa app or ONLY the recovery phone (plus username)?

Let's say X is a malicious person. Let's say I have a gmail account with a recovery phone and with 2fa enabled. Let's say X knows the username but not the password. X doesn't have any other ...
capet's user avatar
  • 130
0 votes
1 answer
3k views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
Alpha-Craft's user avatar
1 vote
0 answers
127 views

What are the ranges of values for DH parameter a and DH parameter b [closed]

I have discovered that Diffie Hellman(DH)shared key is unequal in Apple Numbers, Google Sheets, and Mac Excel (2008). In Section 1.0, the first try at a solution uses a small Prime to produce certain ...
Simple.Simon's user avatar
2 votes
0 answers
672 views

Automated bot/spammer bypassing google recaptcha v2

I have a Laravel registration form with the invisible google recaptcha v2 installed with the security set to highest level within the recaptcha admin console - code as follows: <div> <div ...
adam78's user avatar
  • 121
5 votes
2 answers
8k views

How does Google's "on-device encryption" work?

I use Google to store some of my passwords and I noticed a "On-Device encryption" option in Google Chrome settings, that I had disabled. From what I understood, by allowing this, the ...
user10099's user avatar
  • 155
0 votes
2 answers
280 views

Digital legacy: safe to save password manager login info in Gmail draft?

Google accounts have a "Digital Legacy" feature, where accounts that go inactive for a long period (3 months, 6 months, etc.) and do not respond to alerts will eventually trigger Inactive ...
cr0's user avatar
  • 373
1 vote
0 answers
108 views

RESTful API with Google API and OAuth2

As the title says, I want to create a RESTful API (stateless) that will access Google API endpoints. First I want to authenticate the user and then use that token provided by Google to access Google ...
ktop's user avatar
  • 11
1 vote
0 answers
130 views

Resetting a well-protected Google account password

Situation: a new client came to me because of a torrent of identity theft issues. One of the issues: several of their Google accounts were having their passwords changed every few days. Each time, ...
Stanley Krute's user avatar
3 votes
1 answer
2k views

How to interpret a Google "Someone is trying to sign in to your account from another device" message?

I received this message on my Pixel 4a phone yesterday evening: I pressed "No, it's not me" and then saw this message: I was at home with a cat and five-year-old son. I was cooking and my ...
cja's user avatar
  • 1,649
1 vote
2 answers
2k views

Security Implications from Base64 Image

I copy / pasted a data:image/png;Base64 image from a Google search into a Google Slide, before realizing it was a BASE64 image. Is there any possibility that this contains malicious code, or any way ...
Questionstoask's user avatar
1 vote
0 answers
190 views

Creating session based on Google sign in

Does it make sense to implement your own session management on top of the Google sign in? Scenario: I have a web app where I allow users to sign in with Google. I just need this sign in to verify the ...
gaurav5430's user avatar
1 vote
1 answer
79 views

University Email (Outlook) Changed and Auto-Updated in Browser and Google Account

I recently noticed my email address for the University I work for was changed - from "[email protected]" to "[email protected]". I also noticed that the version of the ...
wyv no's user avatar
  • 11
1 vote
1 answer
217 views

Google Auth - should you send the ID token to the FE, or create a new JWT?

I'm trying to understand what the best practice is here. When a user signs in with Google, they then send you an 'id_token' which contains a bunch of information about the user, and the token ...
Jon Nicholson's user avatar
0 votes
1 answer
455 views

Is Google mining the content of emails I send to people who use gmail? Could they?

If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
Ben's user avatar
  • 9
1 vote
1 answer
146 views

Does Google share it's international database of search queries with LEA agencies for purposes of breaking encryption?

So, suppose a person accidentally typed their complex encryption password into Google search. They weren't logged in to any Google services so the search was anonymous, and they continued to use this ...
Valeriano's user avatar
1 vote
0 answers
2k views

Can websites see the Google account I'm logged into?

If I go on a website, can the owner see what Google and Youtube account I use (on the same browser or not) even if I don't give that information away? I ran one of those tests from privacy.net and it ...
user avatar
0 votes
1 answer
237 views

Unauthorized access to Google account after change of password, what now?

About a month ago, a friend got a security warning about some stranger signing into his Google account, so we changed his password to a strong randomly generated password with all characters (I think ...
Sebastian Norr's user avatar
2 votes
2 answers
342 views

When using Google Translate's "website" functionality, do passwords entered go through Google?

I'm looking at the functionality offered by Google Translate's option to translate an entire website. It opens in a new tab with the domain https://whatever-is-the-website-domain-com.translate.goog/. ...
Jan Żankowski's user avatar
1 vote
0 answers
634 views

How does google recognize my device when I login and have 2FA

I have 2FA turned on for my google account. I was using incognito to log in, and google still recognized my device; I tried using a VPN to change my IP address, but it still recognized my device. I'm ...
user17886134's user avatar
1 vote
2 answers
3k views

Abnormal Receiving of Google Verification Codes

Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
Kepler's user avatar
  • 11
1 vote
2 answers
778 views

How are advertisements through Facebook targeting me moments after searching on a different computer

When connected to my home network, I only use the Facebook app on my phone. I never log into Facebook via a browser on my laptop or other computer connected to my home network. How is it possible that ...
Engineer999's user avatar
0 votes
1 answer
2k views

Does Google Authenticator share device information to website?

I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
John's user avatar
  • 1
1 vote
1 answer
735 views

Why can't I use my phone for Google's Advanced Protection?

I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key. The advanced protection enrollment, asks me to ...
pkExec's user avatar
  • 163
2 votes
1 answer
285 views

Can my ISP know that I have more than one Google Drive account?

So, I have 2 Google Drive accounts. Let's say Drive A and Drive B. If one day I login/upload to Drive A then log out, then login/upload to Drive B, can they notice that I have 2 different accounts? Or ...
user avatar
0 votes
1 answer
183 views

Why is Google advising to not use the super admin account in Google Workspaces for daily activities

Google is advising here to not use a super admin account for daily activities in Google Workspaces: https://support.google.com/a/answer/9011373?hl=en&fl=1 Unfortunately Google does not give any ...
micha's user avatar
  • 1
0 votes
1 answer
2k views

Can Google see the screen when using Chrome Remote Desktop?

I was wondering if Google can see my computer screen while I'm using Chrome Remote Desktop. Let's assume there's my main PC named A and my other PC named B. PC B will have the Chrome extension ...
johnny's user avatar
  • 1
1 vote
2 answers
286 views

Using Google Domains' Email Forwarding Service for throwaway accounts and other things

I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
MasonBitByte's user avatar
0 votes
1 answer
2k views

Does Google Meet leak my IP?

My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible. But when I read about webRTC and STUN servers, I ...
Furman's user avatar
  • 1
0 votes
0 answers
306 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
dragi's user avatar
  • 101
1 vote
0 answers
100 views

Does Google Update perform cryptographic checks against releases?

My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities. On the pro side, ...
JohnyD's user avatar
  • 179
0 votes
0 answers
584 views

Google Password I didn't create

I opened Google, and a popup occurred briefly before I reflexively closed it. I then realized it had said something about a new password saved to the Google Password Manager, I think - which is weird,...
Erhannis's user avatar
  • 111
1 vote
3 answers
2k views

Mistyped "google" and came to a suspicious page with a browser hijacker

I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com After going to ...
mistes 's user avatar
  • 111
0 votes
1 answer
1k views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
The Amateur Coder's user avatar
5 votes
0 answers
1k views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
Sz.'s user avatar
  • 151
27 votes
2 answers
9k views

How is Google abused for DDoS attacks?

While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent. I'm ...
blnks's user avatar
  • 383
0 votes
1 answer
338 views

How google is protecting the MITM attack

If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
kodeFox's user avatar
2 votes
1 answer
227 views

Backup Google Authenticator transferring QR code

I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
lucasresck's user avatar
0 votes
1 answer
175 views

Is this insecure to show in cookie Google Tag?

While researching one site, I found that if you enter document.cookie (Firefox) I can see this filed in cookie _gat_gtag_UA_XXXXXXXXX_1=1. There were plain text. As I know gtag is for Google Tag ...
dokichan's user avatar
  • 157
0 votes
1 answer
3k views

Is it possible for malware to infect google drive?

If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
user avatar
4 votes
1 answer
6k views

What is Google's "match the number" verification trying to achieve?

When I log into my Google account from my laptop with 2FA enabled, I usually get a prompt on my smartphone in order to confirm the log in. I tap OK and then I am logged in. However sometimes I am not ...
yankee's user avatar
  • 143

1
2 3 4 5
12