Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
2
votes
0answers
16 views
Why does Android mix phone state with phone identity?
The "Phone State" permission on Android is widely requested by many apps. The explanation often given by the developer is that the app needs it in order to determine when you're on the phone, to stop ...
2
votes
1answer
45 views
Does the file browser in Chrome OS send data across the network?
Chrome OS does allow syncing with Google Drive, which obviously does send data through the network, but what about the local file system?
0
votes
1answer
35 views
Security design behind google's application specific password [duplicate]
When using Google's two-step verification with services that can't use it, such as mail clients on smartphones and desktops, the solution is to create application-specific passwords for those ...
0
votes
0answers
13 views
How can I block linked ads on Google Chrome [migrated]
Some days back I suddenly got ads on my google chrome when ever I try to open any page.After searching online how to block ads,I found one adblock extension.I have installed adblock and it was working ...
-1
votes
1answer
31 views
Is it applicable to use Google Authenticator against TEMPEST?
I would like to know about Multi-Factor Authentication is applicable for TEMPEST or not.
Why I'm asking is I have suspicious matter every day also captured as log.
My concern:
It's possible to ...
0
votes
3answers
91 views
Gmail, Google, and privacy
I am not sure whether this is the best place to get my concerns addressed, but I hope it is. I went through some earlier questions posted on this site about Gmail and privacy but they don't seem to ...
1
vote
2answers
90 views
Username and password stored under form data in Chrome Dev Tools
When I record the network tab in Chrome Developer Tools when logging in to my site I find that the username and password are stored in plaintext under form data.
You can also find it in Safari, ...
0
votes
1answer
118 views
How CDN operator will decide content fo me if i am using google public DNS [closed]
As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
0
votes
1answer
71 views
Using Gmail in China triggered lots of Two Factor SMS
A friend of mine lives in Hong Kong and she travelled to China over the weekend. Whilst there, she was able to use Gmail on her Android phone without logging in again, but she had to re-login on her ...
14
votes
4answers
349 views
Does two-factor authentication reduce the need for a long password?
I've recently enabled 2-factor auth on a number of web apps, mostly using Google Authenticator. Does this mean that the importance of a strong password on each site is reduced? I would prefer to use ...
2
votes
1answer
158 views
Where to keep key file used as composite key for Keepass 2
I used to use a master password and "Windows User Account" to get into my password datasbase with Keepass 2. Then I realized the "Windows User Account" option is garbage because if you ever want to ...
0
votes
1answer
33 views
Photo Attachment's Feature For Some Mail Servers [duplicate]
You already know google started new service which is related to gmail.
http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html
When we send new mail to friends.If it ...
5
votes
3answers
206 views
Why is Google trying to communicate with svchost.exe
First off - I usually target my questions to StackOverflow since they're programming related, and I usually login with my work account - so this will be my first post from this account, as well as my ...
3
votes
1answer
210 views
3000 new contacts being added to gmail after receiving an email
Recently I realized that there are three thousand contacts with same name and email address in my Google contacts. The name belongs to an email that I have recently received and responded to, nothing ...
32
votes
2answers
888 views
Why does Google cripple the 2FA Google Authenticator PAM module?
If you enable 2FA for Google Apps the shared secret is 160 bits. The google_authenticator PAM module on the other hand seems to use 80 bits for the shared secret.
According to RFC 4226:
R6 - The ...
2
votes
1answer
316 views
Android access tokens and access to all google services
My questions is based on the asnwer on that question:
Can the Gmail password be recovered from the Android Gmail app?
So, as I understand when we setup google account on Android devices, it stores ...
9
votes
7answers
6k views
Using google dorks for a specific site?
I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this.
Traditionally, one uses a 'dork' by searching "Index ...
2
votes
2answers
181 views
how is Google Ads managing to track me? (even if I don't keep cookies!??) [duplicate]
NOTE: in this question I am interested in discovering the actual method used by Google to track me -in my particular case- and in exploring eventual ways to circumvent it. This is completely different ...
0
votes
1answer
278 views
Google Chrome - save usernames NOT passwords [closed]
I've scoured the settings page and googled this to no avail.
I want Chrome to stop saving my passwords BUT keep saving usernames/email.
Is that possible?
All I seem to be able to do is disable ...
4
votes
3answers
404 views
Does Google's SSL encryption for searches thwart NSA spying?
Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data:
Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
0
votes
2answers
444 views
Google Authenticator - Counter Based [duplicate]
I'm trying to understand How google authenticator - counter based work. I have tried googling around finding a demo or at least how this work. I understand its a one time password but not like TOTP. I ...
-2
votes
5answers
237 views
Google Calendar has events that I didn't create and it's not shared
This has been rewritten because at first I thought this may be an accident but now it’s clear there’s a security compromise.
In my Google Calendar I noticed an event that occurred each day from ...
1
vote
2answers
483 views
Privacy of Gmail for business?
Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent ...
6
votes
3answers
760 views
Telemedicine on Google+ Hangouts or Skype. Is it encrypted?
Would one be able to have a telemedicine conversation with a patient with google+ hangouts the way one can over a telephone? In other words does the security satisfy the HIPAA regulations that say ...
0
votes
1answer
10k views
Error150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a forgery [duplicate]
Help me guys please i'm having an problem with my google account.
I can't log in it keeps saying : Error 150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a ...
0
votes
0answers
42 views
encrypted.google.com vs https://www.google.com [duplicate]
Recently I was browsing through Tor and came across https://encrypted.google.com. On doing some research, I found that https://encrypted.google.com encrypts the users traffic.
I just want to ask that ...
9
votes
4answers
545 views
What is the use of the “secret” displayed when setting up 2 Factor Authentication?
What is the purpose of the "secret" that is displayed when you take the picture of the QR code to set up 2 Factor Authentication on a non-Google site?
Why would you need it?
If you save it, doesn't ...
-1
votes
2answers
79 views
How to log into sites that you have set up Google 2 Step Authenticator if you lose your phone?
If you use Google Authenticator to log into sites using 2 Factor Authentication, how do you log in after you lose your phone?
Can you install Google Authenticator on another device?
0
votes
2answers
256 views
Do Google 2 Factor Auth backup codes work for logging into Google or other sites?
I set up Google 2 Factor Auth to log into other sites. I see there are backup codes if you lose your device.
Are these used only to log into Google, or can they be used to log into other sites?
-2
votes
2answers
215 views
Why doesn't Google 2 Factor Auth ask for a code? [closed]
I set up Google 2 Factor auth to use 2 Factor Auth with certain sites. But reading over the help suggests that Google 2 Factor Auth is only used to log into Google services like Gmail.
But when I log ...
-2
votes
1answer
331 views
What are some good user login/authentication libraries or protocols to use with Python on Google App Engine? [closed]
I've read elsewhere (http://forums.udacity.com/questions/6028436/bcrypt-not-suitable-for-pythongae) that bcrypt is not suitable for use on Google App Engine. What are some good ways to create a user ...
5
votes
1answer
846 views
What are the privacy pros and cons of using a public DNS server vs. your own?
Whether I'm using a normal internet connection setup, or tunnelling it through an anonymizing VPN or through TOR, what information of mine is revealed to whatever DNS server that I choose (e.g. Google ...
1
vote
1answer
209 views
Authenticate users through Google using only an OAuth2 access token
I have a question about having users logon to my service using their Google Credentials. I've gone through the Using OAuth 2.0 for Login documentation provided by Google.
The documentation mentions ...
1
vote
1answer
151 views
When a browser extension or user script pulls a JS file from Google's CDN, how does this compromise the user's privacy in terms of Google's reach? [duplicate]
The context from which my question has arisen is this user script which locally removes ads from Ixquick.com, which is an anonymizing 'proxy' search engine that gives the results from Google's index ...
5
votes
1answer
19k views
Can the Gmail password be recovered from the Android Gmail app?
I have an Android device with the Gmail app installed. This app can access the mailbox so there must be some kind of authentication data stored on the device (possibly an application specific ...
6
votes
2answers
505 views
Privacy risk in using Google APIs
If I use JQuery from Google APIs: http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js
Is there a privacy risk to my site? E.g. does this link enable Google to read my pages, track my ...
1
vote
1answer
31 views
How to avoid GAE app traffic being abused?
I am going to develop a simple CMS site on top of Google App Engine using webapp2. I am wondering how avoid malicious data scrapers to deliberately get the pages in order to make the app consume ...
0
votes
1answer
158 views
How does does the “Sign out all other sessions” feature work in Gmail?
In Gmail, at the bottom of the screen if you click Details it will show you your recent account activity and there's a button to sign you out of all other sessions. How does this work? Are they ...
3
votes
3answers
329 views
Does Gmail 2-factor auth increase security on smartphones?
So I have enabled 2-factor authentication on Gmail, which means that if I log in on a new machine, it sends a token to my phone.
Now, if I access Gmail from my phone, it seems like I have only one ...
2
votes
2answers
393 views
How does Google detect new devices for two factor authentication
When you enable two step verification for google accounts, you get sent a code by SMS to enter in addition to your username and password the first time you log in with a new device.
How do they ...
1
vote
1answer
80 views
AppEngine Sandbox
Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
45
votes
3answers
9k views
How does Google Authenticator work?
Google Authenticator is an alternative to SMS for 2Step verification, installing an app on Android where the codes will be sent.
It works without any connectivity; it even works on plane mode. This ...
14
votes
2answers
755 views
Can robots.txt for your face be made effective?
As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
2
votes
3answers
3k views
How to use information from GHDB and FSDB (Google-Dorks)?
I am new to information security and analysis.
Recently, I came across FSDB (Foundstone database) and GHDB (Google Hacking database) while exploring the McAfee Foundstone Sitedigger tool.
What are ...
-1
votes
1answer
329 views
Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]
Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
-1
votes
2answers
205 views
Hiding emails from Google [closed]
From what I understand Google reads/scans all my emails so that they cab "provide" targeted ads and maybe for other reasons.
If a have a group of people who want to hide their emails from Google, how ...
-2
votes
3answers
1k views
How does Google get information about FTP servers - and how to avoid it?
I searched the internet like this inurl:ftp -inurl:(http|https). I found many FTP hosts. I can add or remove files from some hosts.
How does Google get information about FTP servers? How can one avoid ...
2
votes
1answer
464 views
Google Cloud Messaging Spoof
I have few question on security of Google Cloud Messaging Service (GCM)
Is it possible to spoof messages that GCM server sends to android
clients?
Does server pushes data in encrypted format?
Data ...
3
votes
2answers
329 views
Is Chrome giving out information about me?
I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
6
votes
2answers
1k views
Will reporting phishing emails cause problems for the victim?
On GMail, I've received a phishing email from someone I know, and the email has been sent to other people the victim knows. One of the emails is claiming to be from their GMail address, while the ...
