Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
475
questions
0
votes
0answers
10 views
Unauthorized backups, how to seize back data? [migrated]
It appears that someone at my company (likely using stolen admin credentials) had set up backups for the whole org on G Suite using Backupify and Spinbackup. We need to secure the data. ...
0
votes
0answers
5 views
Snapshot G Suite? [migrated]
Is there a way to snapshot all data in G Suite for a whole organization? The two methods I know about are "Data Export" (for an admin) and "Takeout" (for each individual user).
The problem is that ...
1
vote
1answer
28 views
Security while casting my YouTube on a smart TV
I was wondering if casting from my YouTube account on my phone onto someone's tv gives access to my YouTube account to the owner of the tv once I stop casting.
2
votes
1answer
115 views
Understanding how my google mail account was hacked
My google account was compromised recently, and I'm trying to go through all details to understand how. Maybe you guys have ideas.
I discovered a few days ago that my gmail account had the following ...
7
votes
0answers
165 views
How to verify that Google's apt signing key change is not malicious?
I have an Ansible script that setup google chrome apt repo. I keep Google's signing key together with the scripts (rather than download it every time) because I think it minimizes the chance of ...
0
votes
0answers
51 views
Google's “Cross-client identity” seems unsafe
From Google's Cross-client identity document:
Cross-client access tokens
[...]
The effect is that if an Android app requests an access token for a particular scope, and the requesting ...
5
votes
1answer
176 views
Functional Google 2FA code (via SMS) received from a random (but in use) mobile phone number
tl;dr for those who are misunderstanding my post: imagine your friend who uses GMail suddenly tells you they have 2FA enabled, and logged in to their account, and that the 2FA code (SMS) they received ...
3
votes
0answers
74 views
How does Chrome's Renderer Code Integrity Protection Work?
I recently heard of Chrome's Renderer Code Integrity Protection, which is apparently supposed to prevent unsigned dlls from being loaded into the chrome.exe process, and figured I'd test what would ...
2
votes
1answer
748 views
The following signatures were invalid: EXPKEYSIG 6494C6D6997C215E Google Inc despite correct signing key
Ubuntu (focal 20.04)
Using Google webdesigner apt repository in /etc/apt/sources.list.d/google-webdesigner.list:
deb [arch=amd64] https://dl.google.com/linux/webdesigner/deb/ stable main
leads to:
...
1
vote
2answers
190 views
Two factor authentication turned on for my Google account (Phone) - but still hacked
I just got a message today that someone changed my password on my Google account.
The email seems legit, and Google confirmed there was a login from Ukraine two weeks ago in recent activity.
The ...
0
votes
1answer
114 views
Didn't log out of YouTube - Is this a problem?
Recently, when staying in a rented apartment, I signed in to the YouTube app on the smart TV by entering a code using chrome on my tablet to pair them. I was planning to log out before I vacated the ...
2
votes
1answer
35 views
Question about credentials.json file [duplicate]
I have a python script that connects to google drive and upload some files automatically.
The first time the application runs, it asks for a google account to use in its behalf to upload files to ...
0
votes
3answers
61 views
How to login to websites with Google Authenticator using new phone?
I know this question has been asked before - or similar. I really don't understand Google Authenticator. If I have set up 2FA on my old phone and can no longer use my old phone - how do I login to ...
1
vote
0answers
74 views
Google security warning on rclone
I am setting up some new configurations with rclone to backup stuff to google drive. I am configuring application with the steps on https://rclone.org/drive/#making-your-own-client-id
When I am going ...
2
votes
1answer
122 views
Why is Goodreads connecting to Google when I visit their website?
I was browsing Goodreads.com with uBlock origin installed on my browser. I'm not a web developer but, I understand that some websites send requests to "ajax.googleapis.com" in order to design their UI....
0
votes
1answer
74 views
Use of HTTP functions in GCP Cloud Functions Is Not Secure. Why they are still available?
As Google mentions itself in the documentation,
the HTTP functions in Cloud Functions have no authentication and are not secure. HTTP functions are unprotected and will respond to any HTTP request,...
0
votes
1answer
90 views
Random text sent to my boyfriend [closed]
My boyfriend said he received a text from me. I never typed it or sent it to him or anyone else. It somehow randomly was sent to his phone but wasn't in my messages to him. How could this happen?
0
votes
0answers
5 views
share workbook with oauth client
sorry for the cross-posting with SO, I realized that information security would be more revelant in this case.
I set up a oAuth Client ID and authorized it to see and edit my google sheets.
This ...
1
vote
2answers
59 views
How far is my Access Point BSSID sent in my internet packets?
My question relates to this question: How does Google know where I am? and ask a similar question to this (but that accepted answer doesn't pertain to BSSIDs).
The chosen answer in my first linked ...
0
votes
1answer
41 views
Google Cloud IAM login to linux machines
Is it true that in GCP, accounts that will be used to log in to linux machines can be provisioned in Google Cloud IAM? And if so, how is it achieved (i.e. using directory services or by amending etc ...
0
votes
2answers
77 views
What are the risks from letting users share their own calendars?
I've worked for a variety of technologies companies. In working for startups I've noticed a wide variety of opinions about whether sharing calendars is a security risk. I can imagine that it would ...
0
votes
1answer
45 views
How to encrypt user data in app using Google Sign-In
I am currently writing an application which needs to store user data encrypted in the database. One of the requirements is that some of the data stored in the database needs to be encrypted in a way ...
0
votes
1answer
72 views
Are AWS Signed URL's crawled by google?
I have used Amazon pre signed url to share content.
https://boto3.amazonaws.com/v1/documentation/api/latest/guide/s3-presigned-urls.html
Is google able to crawl this url? I'm sharing this url with ...
0
votes
0answers
58 views
Google SMS verification codes broken on a loop - should I be concerned?
So this is a little out of the ordinary. Not sure what to make of it.
I've enable 2-Step Verification on a Google account.
When opening mail or other G-related services, it sends an SMS(text message) ...
1
vote
3answers
382 views
What can someone do with a Google auth token?
I just received an email from "Have I been pwned" to say my credentials have been made public via a breach. The quoted text is:
"The exposed data included names, email addresses, genders, spoken
...
0
votes
1answer
92 views
Is there any real protection against Google on Android phones? [closed]
There's a lot one can do to protect his self identity and from being tracked on standard computer machine, but I wonder if there's any way to do so(or at least as close as it possible) on the Android ...
4
votes
0answers
110 views
Privacy implications of GCM on MicroG
GCM (now FCM after a change of ownership to a Google subsidiary) is a push notification framework which is commonly used on Android phones. MicroG is an open source reimplementation of Google ...
0
votes
0answers
50 views
Received Google calendar invite but no organizer?
Whenever my wife and I invite each-other to an event which we create we always see the organizer above the guest but this spam invite does not have one.
How is this possible? Can I achieve this?
1
vote
2answers
206 views
Google searches seen by ISP
When you enter something in the search bar right before it connects to google, can an ISP see that?
3
votes
1answer
133 views
What can an attacker do with credentials.json [duplicate]
A few months ago I was experimenting with a project which needed to read a Google sheets page. It didn't end up going anywhere, but today I accidentally checked the project, including credentials.json ...
0
votes
0answers
89 views
Can Google and Apple read Telegram notifications's body?
When using e2e encryption (secret chats), the answer is obviously no (I hope), but I am talking about NOT e2e-encrypted messages, the ones stored in the cloud.
I am of course aware that the messages ...
1
vote
1answer
91 views
Is there a way to check if Google Drive is scanning folders other than the ones I have synced?
I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2.
I want to sync Folder2 to my Google Drive. But this additional ...
-1
votes
1answer
5k views
What is “play security information update”
In my android phone I have random downloading progress started by download manager. The notification says "play security information update". I have no idea if this is a regular android security check ...
0
votes
1answer
78 views
For two-factor authentication is it a security issue to have phone authentication and Google Titan Security Key?
I am trying to setup my Google account to have some proper security. But I'm finding parts of it confusing. I used to just use my phone as my 2FA device. Where I would get a texted code. Then I ...
-2
votes
1answer
152 views
Reason for fake academic pdf files found on sites like Google Scholar? [closed]
Using my web-browser, I clicked a link on Google Scholar that led to a fake paper (in .pdf format). The pdf contained many keywords and phrases related to the research topic, possibly for search ...
-1
votes
1answer
55 views
How Google location changes to a different location [closed]
Does anyone have an idea how it is possible that my phone registers a location I have never been to before?
0
votes
0answers
54 views
How does Google restrict API access by mobile App ID?
Google Cloud Platform API service has an option to restrict API access to specified iOS bundle identifiers.
How is Google able to accomplish that since any mobile clients can easily spoof the bundle ...
5
votes
1answer
484 views
Is restricting a Google API key for an Android app useless?
According to Google, one can add the SHA-1 certificate fingerprint and the name of the package in the Google Developers Console to restrict the usage of his API key to his Android app, so that ...
0
votes
0answers
49 views
Would iCloud data “cross-contaminate” Google account?
Sorry for asking such “wild” sounding question.
Basically, iCloud can be allowed to sync bookmarks to Google Chrome browser through iCloud Windows application. And most of the time, your Chrome ...
3
votes
3answers
995 views
Why does WhatsApp not encrypt Google Drive backups?
WhatsApp has end-to-end encryption, promising privacy to users.
However, it becomes useless if backups to Google Drive are unencrypted. Our supposedly private data goes to the control of Google.
No ...
1
vote
2answers
121 views
Should Google User ID's be hashed when stored in the database
I'm currently developing an auth backend that allows for both Google and Email/Password as authentication methods.
I'm basically treating the Google ID and Password as credentials here. I'm already ...
1
vote
1answer
77 views
What are the risks of redirecting my email with Google Domains?
I have bought a domain from Google Domains. One of the features they offer is to redirect all email sent to that domain to any other email address of my choice. Now I'm wondering; is it secure and ...
3
votes
1answer
257 views
What's the difference between using duckduckgo with !google bangs and using google directly?
Is there any security advantage in searching on duckduckgo using !google? Or is it effectively the same as searching directly on google?
-2
votes
1answer
95 views
is it possible that an attacker catch a page name from history?
like if an attacker sets a dns rebinding would he be able to get the router name from the history so he can make his attack more accurate .
4
votes
2answers
207 views
Is it possible to track/save Google searches that were never submitted?
When you start typing out a google search, it lists a bunch of options to autocomplete your search. This made me wonder how that autocomplete works. Is there a cache stored somewhere in the browser? ...
4
votes
1answer
113 views
Repercussions on Google account used to access a compromised service
Suppose the following scenario:
A cloud service reports a breach in which user account information (usernames and password data, e.g. password hashes) was accessed.
The attacker has sufficient ...
3
votes
0answers
289 views
Can SS7 attacks intercept SMS sent to a Google Voice number?
Hackers are able to steal 2FA SMS messages by exploiting SS7. As far as my understanding goes, this means gaining access to the SS7 system and then broadcasting a message akin to "This number is ...
-4
votes
2answers
185 views
How did Google “decode” my Gsuite password? [closed]
Google has recently admitted they were storing "G Suite" users' passwords un-hashed on their systems.
But if a hashed password was transmitted to Google when I logged in to my account then how did ...
1
vote
1answer
909 views
How Recaptcha Detect Fake User-Agent
I'm trying to understand how can recaptcha__en.js detect fake User-Agent, for the test you can try the demo here with addon User-Agent switcher installed, for logged in user it will get score 0.9 no ...
2
votes
1answer
427 views
How did Instagram know the content of my WhatsApp conversation and Google searches?
My friend forwarded me some information about a business via WhatsApp (on mobile). I did some Google searching on that business on a desktop.
I've deactivated my Facebook account for almost a year ...
