Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
3
votes
2answers
36 views
Android Security - Giving Google Your Phone Number
While setting up my Android account on my phone, I am asked
If you like, you can add this phone's number to your account ....
..for example you number will be used to:
Reset your password ...
0
votes
1answer
66 views
Why does Google say my password is weak when I only added a division sign after a bunch of random stuff?
I noticed something very interesting after trying to charge my password for a Google account of mines, it seems strange.
I went to the Google security control panel and selected to change my password ...
-1
votes
1answer
62 views
Does Google Chrome collect data unrelated to browsing activity?
I'm exclusively running Firefox, but I'd like to install the leading browser Chrome for troubleshooting purposes. Browsing-related data collection isn't a concern in this case, but I'm worried if the ...
1
vote
0answers
29 views
Working with Security Metadata in APK file
According to this Blog post, Google has added a Security Metadata on top of an APK to verify that it was originally distributed by Google Play. More specifically it adds APK Signing Block to the APK ...
2
votes
0answers
65 views
Disable Google API key without access to google account
I was trying the new google api - I created anonymous account - added there my debit card, set up the API key for google maps. Tried API and pushed my API key to shared repository (yes I know - my ...
0
votes
0answers
10 views
Where/How does Chrome store login credentials in macOS? [migrated]
I swear I've seen this question thoroughly answered somewhere before but I couldn't find the answer I'm looking for...
Chrome secures our saved passwords in the System.keychain, right? But when I ...
1
vote
0answers
38 views
Are FIDO U2F keys (like dual Yubikeys or dual Google Titan keys) undermined by the Google account recovery process?
According to the Google information page here: https://support.google.com/accounts/answer/6103523
If you don’t have another second step or forgot your password
Note:
2-Step Verification ...
0
votes
0answers
29 views
Google login 2FA: security events to cell / always require Cell confirmation (2FA)
For Google account with 2FA enabled :
How to require cellular confirmation to a critical event such as a password change.
How to get notifications to cellular regarding a password-change.
How to ...
1
vote
0answers
17 views
Google search results hijacked locally / displaying moot in all browsers [duplicate]
So, since yesterday I have quite obviously caught something that Windows Defender doesn't recognize.
Symptoms:
All Google services suffer from Ad injection (non-YouTube ad overlays that cannot be ...
0
votes
1answer
211 views
Google certificate gcp.gvt2.com untrusted / expired?
My antivirus noted gcp.gvt2.com certificate is expired today, gvt2.com alegently used by google analytics.
It might to do with Google distrust of Symantec https://security.googleblog.com/2018/03/...
0
votes
1answer
53 views
Unknown URL parameters in google query
I received an email which is classified as "potentially malicious" by my email program (Thunderbird), where links are actually a google URL query with extra parameters:
For example, the displayed ...
3
votes
1answer
89 views
Google login button - what prevents an rogue app from stealing a token?
Here are steps to setup a Google login button on a web client:
https://developers.google.com/identity/sign-in/web/sign-in
When click on the Google login button this pops up:
All the interactions are ...
1
vote
1answer
175 views
Does Google flag all subdomains for malware/phishing if one is infected?
After I tried logging to my host's cpanel today, I got the safe browsing warning, about the site "redirecting users to harmful websites".
The cpanel uses an address like this:
https://subdomainXX....
0
votes
0answers
26 views
How large is AppEngine's Private Key?
AppEngine provides methods for signing binary data - e.g. via the Go language's SignBytes[1]
However, it doesn't specify any information about how large the private key is.
Is this published ...
4
votes
2answers
816 views
How does Google protect against scraping?
I'm trying to implement security against scraping on my website to prevent basic scraping techniques.
Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
2
votes
1answer
102 views
Concerted attack on linked google accounts?
Yesterday I received two (authentic) e-mails from Google saying they prevented sign-in attempts to two (very old) google accounts of mine. Google says they used the correct passwords, which turned out ...
1
vote
1answer
211 views
Does Google identify me from my 'phone?
As per my previous question I would like to escape Google as much as possible.
Since I realize that I can’t do this completely, I will do what I can, although some might find it pointless.
I have ...
4
votes
2answers
493 views
By using reCAPTCHA which information is Google collecting?
Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
0
votes
1answer
43 views
Does facebook/google app id need to keep secret if possible?
For example, suppose I have an app which includes a link to use the facebook feed dialog, eg:
https://www.facebook.com/dialog/feed?app_id=xxxxx&link=
Which means the Facebook id is revealed to ...
0
votes
0answers
25 views
How to safely store OAuth2 credentials in a Desktop application
I've been searching for a good answer to this problem for a while now, and have seen questions that could be duplicates, but none of them seem to have good/definitive answers that work for my case.
I ...
2
votes
0answers
33 views
Minimum set of ACS features to secure remote PCIe devices
According to a Google blog post, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service features (ACS, ...
0
votes
0answers
101 views
In google OAuth callback, is providing redirect_uri by client a security risk?
for example, at callback url of google oauth,to convert 'code' to access_token, I need:
Client side href:
https://accounts.google.com/o/oauth2/auth?scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%...
0
votes
2answers
122 views
How does google know if I am logging in from a new machine(using web browser)? [duplicate]
Every time i sign into my google account on a web browser on a new machine, it warns me of suspicious activity. How does google know its a new machine? I am trying to implement a similar thing for my ...
3
votes
1answer
113 views
Does Google check for Unicode characters to determine spam now in Gmail?
I was reading some tweets from @pwnallthethings regarding the John Podesta spear phishing emails.
What the email looked like:
The Change Password button link, notice the domain com-...
1
vote
1answer
172 views
Outsmart Google Drive censorship with 7zip encryption
I use sometimes Google Drive for sharing large files. Google Drive is fast and user friendly.
I don't wish that Google sees the content of my files and try to encrypt the filename and content. My ...
2
votes
1answer
266 views
Android Messages Web and Privacy
Recently Google rolled out the feature to send SMS/Chat messages over Web via their Android Messages app.
The approach seems similar to the WhatsApp Web Client. What I didn't find however are ...
1
vote
0answers
40 views
Security concerns in cookie exporting between browsers
I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
1
vote
2answers
301 views
Is there a way to fool google with wrong location information [closed]
Google maps tracks our mobile location accurately using multiple ways: gps, cellular network, nearby wifi networks etc. It knows the hotels, banks and other places I have been to. Recently, when I ...
1
vote
0answers
106 views
Google Accounts: Reverse lookup of recovery-email
Is there a way to check all the emails that has my email as "Recovery Email"?
0
votes
0answers
154 views
Why does Google's “identify a thing” captcha include a long waiting time between showing images?
One of Google's "Recaptcha" challenges asks users to identify a "thing" (typically a car or something similar) in a set of different small photos on a 3x3 grid:
After clicking one of the "things", ...
0
votes
0answers
32 views
After downloading my private key/public key pair from a Google API service account, where is my public key?
I'm sure there's an obvious answer - I have been searching. I created a Google service account and generated a key. The tutorials say that this creates a public/private key pair. The created file is ....
14
votes
2answers
718 views
How can I escape Google?
I am unsure how to formulate this question, so please feel free to edit it.
I considered asking on https://android.stackexchange.com/ but feel that this is more security related and more likely to ...
0
votes
1answer
117 views
What is the risk of sharing the client_secret.json in a public repo?
I have a python script which writes data into a public google sheets file and for using the google sheets API I need to have a user authorize my script. I want to share the script with others and thus ...
0
votes
0answers
914 views
How to handle a Google security warning to a non Google email address?
I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account.
All the links in the emails point ...
0
votes
1answer
75 views
Best practice to share google drive API credentials for being used by a script?
In a nutshell: Shall I share oauth2-credentials in our source code with the scope of full write-access to a google drive from a dedicated single-purpose google-account?
so, I've written a python ...
1
vote
1answer
122 views
I provided lots of un-encrypted personal data to Google Drive over the years. How can I best retake control over my data?
I am an average user of the internet, with my very legal, normal and humble private life. Over the years I have uploaded all kinds of personal data to Google Drive, and I'm regretting this decision, ...
0
votes
1answer
2k views
Can my employer see my Google Search Data on my personal IOS device when I’m at home but accidentally logged into company Google Account?
I was browsing the web at home using Safari on my IOS device (mainly Google search). I happened to scroll to the very bottom of the screen and realized Google was logged into my Google account for ...
2
votes
1answer
277 views
How to route internet traffic through google
I'm in a situation which my network provider blocks all my internet access except for google and its branches (drive , gmail ,etc...).
I'm looking for a way to route my traffic through google (with a ...
1
vote
1answer
142 views
Haunted Google Account?
Not to be dramatic but at my level of inexperience, the title is what I'm left with. Hoping smarter people can point me in the right direction, so here goes...
A google account used in a school ...
7
votes
3answers
1k views
How does entering “a” phone number help Google “verify it's me?”
Today I tried to sign into my Google account while at university. Google blocked the attempt, and asked for a phone number. Below is a screenshot of the form Google showed me.
It says:
Verify it's ...
5
votes
0answers
732 views
How was Google recaptcha v2 bypassed several times?
There are multiple reports of a reᴄᴀᴘᴛᴄʜᴀ v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ.
But there is something I am failing to understand: for ...
5
votes
1answer
169 views
How Google Detects State Sponsored Attacks
A user on Twitter posted a screenshot in which Google warns him as he may be targeted by state sponsored attackers. What kind of attacks can be detected by Google and how?
0
votes
0answers
94 views
What are the risks with logging in with Google or FB auth to third party sites? [duplicate]
You can now log in via FB or Google to sites like this one. That's because, presumably, once you've been authenticated from either, you can be trusted to manage information of a less-confidential ...
1
vote
3answers
492 views
This Site May be Hacked Google Flag
My site shows the "This site may be hacked flag" underneath my domain in search results. This only shows on homepage and no further warning shows when visiting the page.
I have checked within my ...
1
vote
2answers
235 views
Disable weak cipher for Google Cloud App engine custom domain website
I'm not sure if this belongs here or in stack overflow. I have set up a custom domain website using a PHP Google Cloud App engine. After some third party security testing i've been advised to disable ...
0
votes
0answers
62 views
How does google maps use IP routing to get the location of someone exactly? [duplicate]
I have given an assigment at uni and im wondering about how google maps get my location and how do they relate to IP routing?
1
vote
0answers
49 views
How can I reclaim a company email account from former Canadian distributor? [closed]
A former company rep in Canada took our (COMPANY DBA)@GMAIL.COM address for use in representing our products in Canada. She has moved on and seems to have discarded the name as all that seem so come ...
2
votes
1answer
475 views
What does Chrome use as the key for decrypting my saved passwords?
When using Chrome, Chrome offers to remember my password on non-Google sites.
If my Google password is the key used to decrypt the other passwords that Chrome stores for me, wouldn't Chrome have to ...
7
votes
3answers
852 views
Is Google Analytics tracking actually safe to use on pages with sensitive information?
When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough.
But when you add this code are you giving Google the ability to scrape the ...
1
vote
0answers
91 views
Strange crawl requests from google bot
My Wordpress web site recently had a strange crawl link from Google. This is the list of crawl errors on my Google Webmaster Tools page:
Are these normal requests from google, or has my website been ...
