Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
553
questions
0
votes
0
answers
10
views
Spurious sitempas are added to google search console without authentication [closed]
I have a wordpress website and it is connected to google search console. Very often atleast once a month i experience this issue.
Anonymous sitemaps containing fake links (just to drive traffic to ...
-1
votes
0
answers
13
views
Limiting Mobile Fingerprints For Google?
I run a small agency managing numerous Google accounts and am trying to determine the best route for managing/hiding fingerprints on mobile from Google, outside of good dedicated proxies (which I ...
0
votes
0
answers
32
views
Googleupdate.exe runs ping encoded - Is this expected?
I was looking at our M365 Defender and was doing some looking around. I noticed the process GoogleUpdate.exe run an encoded ping.
The command was "GoogleUpdate.exe" /ping <encoded stuff&...
- 133
2
votes
1
answer
195
views
Can my ISP know that I have more than one Google Drive account?
So, I have 2 Google Drive accounts. Let's say Drive A and Drive B.
If one day I login/upload to Drive A then log out, then login/upload to Drive B, can they notice that I have 2 different accounts? Or ...
user276916
0
votes
1
answer
47
views
Why is Google advising to not use the super admin account in Google Workspaces for daily activities
Google is advising here to not use a super admin account for daily activities in Google Workspaces: https://support.google.com/a/answer/9011373?hl=en&fl=1
Unfortunately Google does not give any ...
- 1
0
votes
1
answer
87
views
Can Google see the screen when using Chrome Remote Desktop?
I was wondering if Google can see my computer screen while I'm using Chrome Remote Desktop.
Let's assume there's my main PC named A and my other PC named B.
PC B will have the Chrome extension ...
- 1
0
votes
2
answers
53
views
Using Google Domains' Email Forwarding Service for throwaway accounts and other things
I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
0
votes
1
answer
141
views
Does Google Meet leak my IP?
My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible.
But when I read about webRTC and STUN servers, I ...
- 1
0
votes
0
answers
99
views
Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?
I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
- 101
1
vote
0
answers
48
views
Does Google Update perform cryptographic checks against releases?
My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities.
On the pro side, ...
- 169
0
votes
0
answers
45
views
Google Password I didn't create
I opened Google, and a popup occurred briefly before I reflexively closed it. I then realized it had said something about a new password saved to the Google Password Manager, I think - which is weird,...
- 111
1
vote
3
answers
373
views
Mistyped "google" and came to a suspicious page with a browser hijacker
I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com
After going to ...
- 111
0
votes
1
answer
95
views
How to view all SSL certificates for a website using Google Chrome?
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
4
votes
0
answers
177
views
Disturbing/suspicious Google notifications about account recovery and password change
This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
- 141
27
votes
2
answers
9k
views
How is Google abused for DDoS attacks?
While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent.
I'm ...
- 383
0
votes
0
answers
79
views
Is it possible for someone to get my personal information if I log in with their google mail id in my device for some work related thing?
I was working on an app for a client which had a premium subscription with play store with their mail id, so I had to log in with their email on my device to test the application.
But right after I ...
0
votes
1
answer
154
views
How google is protecting the MITM attack
If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
- 3
2
votes
1
answer
111
views
Backup Google Authenticator transferring QR code
I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
- 23
0
votes
1
answer
76
views
Is this insecure to show in cookie Google Tag?
While researching one site, I found that if you enter document.cookie (Firefox) I can see this filed in cookie _gat_gtag_UA_XXXXXXXXX_1=1. There were plain text. As I know gtag is for Google Tag ...
- 137
0
votes
1
answer
307
views
Is it possible for malware to infect google drive?
If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
user261600
3
votes
1
answer
522
views
What is Google's "match the number" verification trying to achieve?
When I log into my Google account from my laptop with 2FA enabled, I usually get a prompt on my smartphone in order to confirm the log in. I tap OK and then I am logged in.
However sometimes I am not ...
- 133
0
votes
0
answers
86
views
Requiring Google Mobile Service token
I'm pentesting an android application written in Cordova and while inspecting the network traffic I found some interesting endpoint that I would like to test.
However, this endpoint need a tokenID (ex....
- 101
-1
votes
2
answers
224
views
Are the private URLs from Google Photos actually unguessable?
Maybe my math is wrong, but here it goes.
If I generate a private url to share an album in Google Photos, I get something like this
https://photos.app.goo.gl/*****************
where the asterisks are ...
- 93
16
votes
2
answers
6k
views
Is cloudflare injecting tracking code for PDF requests in browsers via the browser PDF plugin?
Opening a PDF link in the browser (e.g. google chrome with the ootb PDF viewer plugin) apparently indicates that when the PDF is hosted on a cloudflare-facing domain there is additional data present ...
- 291
2
votes
0
answers
154
views
Is it a good practice to store both the Google Oauth2 access token and the refresh token in the database un hashed?
I recently came across a source code where they save a user's refresh token and the access token upon sign in through Google into the database. This is done to access the Google APIs later on through ...
- 121
0
votes
1
answer
176
views
Diagnose Google security warning?
I have received the following from Google:
Critical security alert
Suspicious attempt to sign in with your password
Google prevented someone who knows your password from signing in to your account. ...
- 115
2
votes
1
answer
165
views
How to prevent small mistakes that have massive impact?
I frequently have very personal files temporarily on my virtual desktop.
I sometimes download a new program, which is going into a VM. Before sending it in there, I tend to VirusTotal scan it.
I load ...
- 21
0
votes
0
answers
75
views
Is it insecure to show the g-captcha response in the query string of a GET request?
I am aware that the g-captcha response cannot be used twice and expires after 2 minutes, but are there any security concerns using GET instead of POST?
0
votes
0
answers
90
views
Were Google's old link-sharing links not cryptographically random?
This year, Google is notifying users that shared links to their shared Google drive files will change:
https://support.google.com/a/answer/10685032?hl=en
The announcement begins:
To make file sharing ...
- 101
0
votes
0
answers
96
views
How to detect and prevent phishing attacks on Gmail via Logging and DLP?
We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
- 733
2
votes
0
answers
246
views
What is google recommendation to fix the task hijacking issue
Applications running on android devices below 10 are vulnerable to task hijacking. Even though the issue is fixed from android 11 and above, we cannot tell our customers to upgrade the android version ...
- 21
1
vote
0
answers
108
views
Is it secure that anyone could claim Google My Business ownership? [closed]
Today I found that Google has a funny feature that allows everyone to claim ownership of a particular business, and if the owner does not reject it in 3 days, then the business ownership is set to the ...
- 813
0
votes
0
answers
85
views
Can hashbang (#!) URLs be used to SEO attack a website?
Apparently Google indexes hashbang URLs: https://www.youtube.com/watch?v=kDs-MufuiAg
Can an attacker link to another website with fictitious hashbang-URLs and use it to hurt that website (if the ...
- 1
0
votes
0
answers
46
views
WP Blog with phishing js file by a Google Search Result? [duplicate]
I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano".
The first Google result seems to point to the official page: https://rafaeltheissen.com/
Here ...
- 101
1
vote
0
answers
36
views
Do I need TFA if I have a strong password? [duplicate]
This is the inverse of this question here.
Google keeps prompting me to enable Two-Factor Authentication for my Google account. I don't like the inconvenience of TFA, such as mandating that I will ...
- 933
0
votes
0
answers
159
views
Does Google have access to the mac/cpu serial numbers and similar to that?
Recently I logged in my gmail account on chrome browser and checked the devices linked to my gmail account.surprisingly in the linked devices and in the recent logins it shown my laptop hostname. I ...
- 1
1
vote
0
answers
97
views
Is Google OAuth login in 3rd party applications via system browser secure?
Numerous mobile applications allow me to "Login with Google".
From technical perspective, I assume this would usually follow those OAuth native app login integration guidelines: https://...
- 143
1
vote
2
answers
1k
views
Personal Google search history appeared on work computer. Does this mean work can see my private search history from my personal iPhone?
I was recently using my personal google account on my work computer and some of my previous google searches appeared from my personal phone. I used Safari on my personal iPhone and I guess google.
So ...
- 11
0
votes
1
answer
160
views
Will a virus/malware travel between devices when logged into the same Google account
If my laptop/desktop got infected with malware or some kind of a virus, will it be safe to log in the account on my laptop to my new PC or will it spread to it because I used the same account for new ...
- 1
1
vote
1
answer
146
views
Can Google authenticator be used to link all my accounts together?
For example, if I add two accounts from different non-Google services, can Google (or maybe those services) because of that link them both together with my gmail account?
- 13
0
votes
0
answers
273
views
Critical security alert: someone knows your password [duplicate]
Mailed-by: gaia.bounces.google.com Sign.google.com
Security: Standard encryption (TLC). So this is a legitimate email from Google.
Will this email immediately be sent if someone (who isn’t supposed ...
- 1
2
votes
1
answer
265
views
Unusual Google Chrome Download Redirection
When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL:
https[:]//accounts[.]...
- 21
3
votes
1
answer
153
views
How does the Apple/Google Exposure Notification system prevent infected users from being identified?
Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
- 131
1
vote
1
answer
146
views
How is it possible for scammers on YouTube to use the same exact username as the author of the video? [closed]
Recently, there has been an absolute massive flood of scammers on YouTube videos related to Bitcoin. Their "trick" is to use the exact same username and profile picture as the person who ...
- 19
13
votes
2
answers
4k
views
How does Google save our passwords on their server?
My friend recently told me that:
Google doesn't have our passwords saved on their database. Instead they put our password when typed on browser, through an algorithm and it'll produce a unique ...
- 133
1
vote
0
answers
108
views
Odd storage.googleapis.com link in spam email [duplicate]
I have accidentally clicked on a link in a spam mail (sent to my gmail, wasn't sent to junk folder) and it opened the link in a new firefox tab. hxxps://hm_vqh3bo6.storage.googleapis.com/24476060.html ...
- 3,253
2
votes
3
answers
662
views
How to prevent Apple and Google from accessing Telegram messages
Telegram is completely blocked in my country (entire IP range and domain of telegram is blocked), and I cannot access messages by telegram app. However, notifications for newly received telegram ...
- 129
2
votes
0
answers
179
views
Received Google 2FA Code via SMS from two unknown phone numbers [duplicate]
I recently encountered a strange incident regarding the 2FA of my Google Account.
The user Dunois has described a very similar occurrence in this post: Functional Google 2FA code (via SMS) received ...
- 21
2
votes
1
answer
283
views
Is using Google Forms to share “passcode protected” information safe from brute force attacks?
I have recently seen many people use Google Forms as a way of sharing “passcode protected” information. They seem to have the first section of the form with a required field asking for a short piece ...
- 123
0
votes
0
answers
50
views
Does Google Chrome send INCOGNITO search history data to Google? [duplicate]
Type Ctrl + Shift + N. Then type DIVIDED WE FALL and then click enter. Click a search result that takes you to YouTube. Go back to the search results. Retype "DIVIDED WE FALL by Valarie Kaur"...
- 339