Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

0
votes
1answer
82 views

Google certificate gcp.gvt2.com untrusted / expired?

My antivirus noted gcp.gvt2.com certificate is expired today, gvt2.com alegently used by google analytics. It might to do with Google distrust of Symantec https://security.googleblog.com/2018/03/...
-2
votes
0answers
47 views

Redirected to Google favicon from a certain website then starts redirecting somewhere else [on hold]

https://www.google.com/favicon.ico So inspected the elements/code and explored through <head> and <style type="text/css">. My first impression was it was filled with all sorts of ad-...
0
votes
1answer
44 views

Unknown URL parameters in google query

I received an email which is classified as "potentially malicious" by my email program (Thunderbird), where links are actually a google URL query with extra parameters: For example, the displayed ...
1
vote
1answer
46 views

Google login button - what prevents an rogue app from stealing a token?

Here are steps to setup a Google login button on a web client: https://developers.google.com/identity/sign-in/web/sign-in When click on the Google login button this pops up: All the interactions are ...
1
vote
1answer
153 views

Does Google flag all subdomains for malware/phishing if one is infected?

After I tried logging to my host's cpanel today, I got the safe browsing warning, about the site "redirecting users to harmful websites". The cpanel uses an address like this: https://subdomainXX....
0
votes
0answers
25 views

How large is AppEngine's Private Key?

AppEngine provides methods for signing binary data - e.g. via the Go language's SignBytes[1] However, it doesn't specify any information about how large the private key is. Is this published ...
4
votes
2answers
781 views

How does Google protect against scraping?

I'm trying to implement security against scraping on my website to prevent basic scraping techniques. Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
2
votes
1answer
98 views

Concerted attack on linked google accounts?

Yesterday I received two (authentic) e-mails from Google saying they prevented sign-in attempts to two (very old) google accounts of mine. Google says they used the correct passwords, which turned out ...
0
votes
1answer
112 views

Does Google identify me from my 'phone?

As per my previous question I would like to escape Google as much as possible. Since I realize that I can’t do this completely, I will do what I can, although some might find it pointless. I have ...
2
votes
2answers
208 views

By using reCAPTCHA which information is Google collecting?

Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
0
votes
1answer
39 views

Does facebook/google app id need to keep secret if possible?

For example, suppose I have an app which includes a link to use the facebook feed dialog, eg: https://www.facebook.com/dialog/feed?app_id=xxxxx&link= Which means the Facebook id is revealed to ...
0
votes
0answers
19 views

How to safely store OAuth2 credentials in a Desktop application

I've been searching for a good answer to this problem for a while now, and have seen questions that could be duplicates, but none of them seem to have good/definitive answers that work for my case. I ...
2
votes
0answers
31 views

Minimum set of ACS features to secure remote PCIe devices

According to a Google blog post, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service features (ACS, ...
0
votes
0answers
38 views

In google OAuth callback, is providing redirect_uri by client a security risk?

for example, at callback url of google oauth,to convert 'code' to access_token, I need: Client side href: https://accounts.google.com/o/oauth2/auth?scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%...
0
votes
2answers
97 views

How does google know if I am logging in from a new machine(using web browser)? [duplicate]

Every time i sign into my google account on a web browser on a new machine, it warns me of suspicious activity. How does google know its a new machine? I am trying to implement a similar thing for my ...
2
votes
0answers
61 views

Does Google check for Unicode characters to determine spam now in Gmail?

I was reading some tweets from @pwnallthethings regarding the John Podesta spear phishing emails. What the email looked like: The Change Password button link, notice the domain com-...
1
vote
1answer
132 views

Outsmart Google Drive censorship with 7zip encryption

I use sometimes Google Drive for sharing large files. Google Drive is fast and user friendly. I don't wish that Google sees the content of my files and try to encrypt the filename and content. My ...
0
votes
0answers
171 views

Android Messages Web and Privacy

Recently Google rolled out the feature to send SMS/Chat messages over Web via their Android Messages app. The approach seems similar to the WhatsApp Web Client. What I didn't find however are ...
1
vote
0answers
39 views

Security concerns in cookie exporting between browsers

I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
1
vote
2answers
167 views

Is there a way to fool google with wrong location information [closed]

Google maps tracks our mobile location accurately using multiple ways: gps, cellular network, nearby wifi networks etc. It knows the hotels, banks and other places I have been to. Recently, when I ...
1
vote
0answers
67 views

Google Accounts: Reverse lookup of recovery-email

Is there a way to check all the emails that has my email as "Recovery Email"?
0
votes
0answers
119 views

Why does Google's “identify a thing” captcha include a long waiting time between showing images?

One of Google's "Recaptcha" challenges asks users to identify a "thing" (typically a car or something similar) in a set of different small photos on a 3x3 grid: After clicking one of the "things", ...
0
votes
0answers
28 views

After downloading my private key/public key pair from a Google API service account, where is my public key?

I'm sure there's an obvious answer - I have been searching. I created a Google service account and generated a key. The tutorials say that this creates a public/private key pair. The created file is ....
13
votes
2answers
614 views

How can I escape Google?

I am unsure how to formulate this question, so please feel free to edit it. I considered asking on https://android.stackexchange.com/ but feel that this is more security related and more likely to ...
0
votes
1answer
80 views

What is the risk of sharing the client_secret.json in a public repo?

I have a python script which writes data into a public google sheets file and for using the google sheets API I need to have a user authorize my script. I want to share the script with others and thus ...
0
votes
0answers
353 views

How to handle a Google security warning to a non Google email address?

I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account. All the links in the emails point ...
0
votes
1answer
71 views

Best practice to share google drive API credentials for being used by a script?

In a nutshell: Shall I share oauth2-credentials in our source code with the scope of full write-access to a google drive from a dedicated single-purpose google-account? so, I've written a python ...
1
vote
1answer
111 views

I provided lots of un-encrypted personal data to Google Drive over the years. How can I best retake control over my data?

I am an average user of the internet, with my very legal, normal and humble private life. Over the years I have uploaded all kinds of personal data to Google Drive, and I'm regretting this decision, ...
0
votes
1answer
1k views

Can my employer see my Google Search Data on my personal IOS device when I’m at home but accidentally logged into company Google Account?

I was browsing the web at home using Safari on my IOS device (mainly Google search). I happened to scroll to the very bottom of the screen and realized Google was logged into my Google account for ...
2
votes
1answer
203 views

How to route internet traffic through google

I'm in a situation which my network provider blocks all my internet access except for google and its branches (drive , gmail ,etc...). I'm looking for a way to route my traffic through google (with a ...
1
vote
1answer
135 views

Haunted Google Account?

Not to be dramatic but at my level of inexperience, the title is what I'm left with. Hoping smarter people can point me in the right direction, so here goes... A google account used in a school ...
7
votes
3answers
858 views

How does entering “a” phone number help Google “verify it's me?”

Today I tried to sign into my Google account while at university. Google blocked the attempt, and asked for a phone number. Below is a screenshot of the form Google showed me. It says: Verify it's ...
5
votes
0answers
640 views

How was Google recaptcha v2 bypassed several times?

There are multiple reports of a reᴄᴀᴘᴛᴄʜᴀ v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ. But there is something I am failing to understand: for ...
6
votes
1answer
169 views

How Google Detects State Sponsored Attacks

A user on Twitter posted a screenshot in which Google warns him as he may be targeted by state sponsored attackers. What kind of attacks can be detected by Google and how?
0
votes
0answers
92 views

What are the risks with logging in with Google or FB auth to third party sites? [duplicate]

You can now log in via FB or Google to sites like this one. That's because, presumably, once you've been authenticated from either, you can be trusted to manage information of a less-confidential ...
1
vote
3answers
457 views

This Site May be Hacked Google Flag

My site shows the "This site may be hacked flag" underneath my domain in search results. This only shows on homepage and no further warning shows when visiting the page. I have checked within my ...
1
vote
2answers
155 views

Disable weak cipher for Google Cloud App engine custom domain website

I'm not sure if this belongs here or in stack overflow. I have set up a custom domain website using a PHP Google Cloud App engine. After some third party security testing i've been advised to disable ...
0
votes
0answers
62 views

How does google maps use IP routing to get the location of someone exactly? [duplicate]

I have given an assigment at uni and im wondering about how google maps get my location and how do they relate to IP routing?
1
vote
0answers
49 views

How can I reclaim a company email account from former Canadian distributor? [closed]

A former company rep in Canada took our (COMPANY DBA)@GMAIL.COM address for use in representing our products in Canada. She has moved on and seems to have discarded the name as all that seem so come ...
2
votes
1answer
363 views

What does Chrome use as the key for decrypting my saved passwords?

When using Chrome, Chrome offers to remember my password on non-Google sites. If my Google password is the key used to decrypt the other passwords that Chrome stores for me, wouldn't Chrome have to ...
7
votes
3answers
581 views

Is Google Analytics tracking actually safe to use on pages with sensitive information?

When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough. But when you add this code are you giving Google the ability to scrape the ...
1
vote
0answers
88 views

Strange crawl requests from google bot

My Wordpress web site recently had a strange crawl link from Google. This is the list of crawl errors on my Google Webmaster Tools page: Are these normal requests from google, or has my website been ...
2
votes
1answer
393 views

Does Google have access to keystrokes on our Android device keyboard? [duplicate]

I am using an end-to-end encrypted messenger on my smartphone. However, today I asked myself if the content of the messages is really secure because of the keyboard on my Android device. As you know, ...
3
votes
1answer
90 views

Google Account collecting browser history and cookies?

I am using some random site in Microsoft Edge. There are no account associate neither with the site nor the browser. Now, What will happen if I login in Google Account and keep it logged in. Will it ...
0
votes
1answer
221 views

Received a mail that my password for an app has been reset. Does this mean my GMail is compromised?

Today morning I received a very troubling message in my inbox. I saw that there was a message that my account password for ZoHo has been successfully reset. I don't remember making any such request ...
5
votes
1answer
113 views

Are all Google app-passwords equal? What is their attack scope?

Upon setting up app-passwords, Google sends a mail: This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
2
votes
1answer
959 views

Whatsapp access to Google Drive

I am very concerned today as I discovered whatsapp has access to my google drive. Does this mean whatsapp can steal my google drive data with this access or is it restricted only to a specific folder?...
0
votes
2answers
1k views

Where can I find Google Backup Codes? [closed]

I am traveling long term and I don't want to put my SIM card in the phone every month to receive the SMS code when signing-in to Google (I always recieve 10+ other text messages which costs me a lot). ...
0
votes
1answer
89 views

Google adds ryanair flight to calendar without being logged in [closed]

I booked a flight with ryanair in a browser, where I'm not logged in to google or using googles search engine(I'm using duckduckgo.com) I didn't use my Google email address in ryanair! After booking ...
1
vote
1answer
87 views

Logging someone else's google account on my Andoid device

Earlier today I had to add someones's Google account to my Android phone, to help them with something. My phone is a Samsung Galaxy S7 with the latest Android version, not sure if this is important. ...