Questions tagged [google]

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

Is it possible to determine which Google account triggered Google Find My Device? [closed]

I received an alert that my phone was located by Google Find My Device. I did not do it. No one has accessed my account and I have 2fa enabled
Paul Bevan's user avatar
1 vote
0 answers
72 views

Hundreds of bots creating accounts using sign-in with Google

We are getting hundreds of bots creating accounts using sign-in with google, like this in this format: Colin Bush: [email protected] Tambra Lockett: [email protected] Marjorie ...
Zeone line's user avatar
0 votes
0 answers
28 views

Is using the user's default PDF viewer better than using the internal Google PDF viewer

I'm figuring out some Google Policy Settings, which should be deployed via GPO and I was wondering if AlwaysOpenPdfExternally, which disables the Google PDF viewer and opens the device's default PDF ...
Cradles's user avatar
1 vote
0 answers
73 views

In Google account, a suspicious Android Galaxy Tab device is persistent to revoking

I have a Galaxy Tab device, but have already signed out from it and reset the tab to factory. However, in my Google account, there is still a device of "Galaxy Tab", added 200+ days ago, in ...
user avatar
0 votes
0 answers
108 views

Does Google use an IP address to identify a user? [duplicate]

I used Google Search in Chrome incognito mode without logging in to my account, so no cookies were stored. However, somehow I instantly got a bunch of ads relevant to my search on Instagram. There ...
Sogawa-sps's user avatar
3 votes
0 answers
186 views

Can a bad guy ever get access to my gmail account using ONLY the 2fa app or ONLY the recovery phone (plus username)?

Let's say X is a malicious person. Let's say I have a gmail account with a recovery phone and with 2fa enabled. Let's say X knows the username but not the password. X doesn't have any other ...
capet's user avatar
  • 131
0 votes
1 answer
860 views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
Alpha-Craft's user avatar
0 votes
0 answers
44 views

Does Google Colaboratory save code on local computer when using local runtime?

When running Python code from Google Colab on local computer (local runtime), is it saved on the local computer or not?
Yuqi's user avatar
  • 1
1 vote
0 answers
61 views

What are the ranges of values for DH parameter a and DH parameter b [closed]

I have discovered that Diffie Hellman(DH)shared key is unequal in Apple Numbers, Google Sheets, and Mac Excel (2008). In Section 1.0, the first try at a solution uses a small Prime to produce certain ...
Simple.Simon's user avatar
2 votes
0 answers
440 views

Automated bot/spammer bypassing google recaptcha v2

I have a Laravel registration form with the invisible google recaptcha v2 installed with the security set to highest level within the recaptcha admin console - code as follows: <div> <div ...
adam78's user avatar
  • 121
0 votes
1 answer
2k views

How does Google's "on-device encryption" work?

I use Google to store some of my passwords and I noticed a "On-Device encryption" option in Google Chrome settings, that I had disabled. From what I understood, by allowing this, the ...
user10099's user avatar
  • 105
0 votes
2 answers
158 views

Digital legacy: safe to save password manager login info in Gmail draft?

Google accounts have a "Digital Legacy" feature, where accounts that go inactive for a long period (3 months, 6 months, etc.) and do not respond to alerts will eventually trigger Inactive ...
cr0's user avatar
  • 373
1 vote
0 answers
61 views

RESTful API with Google API and OAuth2

As the title says, I want to create a RESTful API (stateless) that will access Google API endpoints. First I want to authenticate the user and then use that token provided by Google to access Google ...
ktop's user avatar
  • 11
1 vote
0 answers
87 views

Resetting a well-protected Google account password

Situation: a new client came to me because of a torrent of identity theft issues. One of the issues: several of their Google accounts were having their passwords changed every few days. Each time, ...
Stanley Krute's user avatar
2 votes
1 answer
1k views

How to interpret a Google "Someone is trying to sign in to your account from another device" message?

I received this message on my Pixel 4a phone yesterday evening: I pressed "No, it's not me" and then saw this message: I was at home with a cat and five-year-old son. I was cooking and my ...
cja's user avatar
  • 1,629
1 vote
2 answers
1k views

Security Implications from Base64 Image

I copy / pasted a data:image/png;Base64 image from a Google search into a Google Slide, before realizing it was a BASE64 image. Is there any possibility that this contains malicious code, or any way ...
Questionstoask's user avatar
1 vote
0 answers
98 views

Creating session based on Google sign in

Does it make sense to implement your own session management on top of the Google sign in? Scenario: I have a web app where I allow users to sign in with Google. I just need this sign in to verify the ...
gaurav5430's user avatar
1 vote
1 answer
43 views

University Email (Outlook) Changed and Auto-Updated in Browser and Google Account

I recently noticed my email address for the University I work for was changed - from "[email protected]" to "[email protected]". I also noticed that the version of the ...
wyv no's user avatar
  • 11
1 vote
1 answer
128 views

Google Auth - should you send the ID token to the FE, or create a new JWT?

I'm trying to understand what the best practice is here. When a user signs in with Google, they then send you an 'id_token' which contains a bunch of information about the user, and the token ...
Jon Nicholson's user avatar
0 votes
1 answer
245 views

Is Google mining the content of emails I send to people who use gmail? Could they?

If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
Ben's user avatar
  • 9
1 vote
1 answer
108 views

Does Google share it's international database of search queries with LEA agencies for purposes of breaking encryption?

So, suppose a person accidentally typed their complex encryption password into Google search. They weren't logged in to any Google services so the search was anonymous, and they continued to use this ...
Valeriano's user avatar
1 vote
0 answers
899 views

Can websites see the Google account I'm logged into?

If I go on a website, can the owner see what Google and Youtube account I use (on the same browser or not) even if I don't give that information away? I ran one of those tests from privacy.net and it ...
user avatar
0 votes
1 answer
148 views

Unauthorized access to Google account after change of password, what now?

About a month ago, a friend got a security warning about some stranger signing into his Google account, so we changed his password to a strong randomly generated password with all characters (I think ...
Sebastian Norr's user avatar
2 votes
2 answers
185 views

When using Google Translate's "website" functionality, do passwords entered go through Google?

I'm looking at the functionality offered by Google Translate's option to translate an entire website. It opens in a new tab with the domain https://whatever-is-the-website-domain-com.translate.goog/. ...
Jan Żankowski's user avatar
1 vote
0 answers
335 views

How does google recognize my device when I login and have 2FA

I have 2FA turned on for my google account. I was using incognito to log in, and google still recognized my device; I tried using a VPN to change my IP address, but it still recognized my device. I'm ...
user17886134's user avatar
1 vote
0 answers
9k views

I received an email that someone created Snapchat with my e-mail - is this a known scam?

On July 31 and a second time after around twelve o'clock at night (August 1) I received two E-mails, which asked me to confirm my E-mail to create an Snapchat account and the second one was stating ...
JustACuriousFox 's user avatar
0 votes
1 answer
2k views

Abnormal Receiving of Google Verification Codes

Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
Kepler's user avatar
  • 1
1 vote
2 answers
393 views

How are advertisements through Facebook targeting me moments after searching on a different computer

When connected to my home network, I only use the Facebook app on my phone. I never log into Facebook via a browser on my laptop or other computer connected to my home network. How is it possible that ...
Engineer999's user avatar
0 votes
1 answer
1k views

Does Google Authenticator share device information to website?

I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
John's user avatar
  • 1
1 vote
1 answer
597 views

Why can't I use my phone for Google's Advanced Protection?

I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key. The advanced protection enrollment, asks me to ...
pkExec's user avatar
  • 163
2 votes
1 answer
243 views

Can my ISP know that I have more than one Google Drive account?

So, I have 2 Google Drive accounts. Let's say Drive A and Drive B. If one day I login/upload to Drive A then log out, then login/upload to Drive B, can they notice that I have 2 different accounts? Or ...
user avatar
0 votes
1 answer
116 views

Why is Google advising to not use the super admin account in Google Workspaces for daily activities

Google is advising here to not use a super admin account for daily activities in Google Workspaces: https://support.google.com/a/answer/9011373?hl=en&fl=1 Unfortunately Google does not give any ...
micha's user avatar
  • 1
0 votes
1 answer
1k views

Can Google see the screen when using Chrome Remote Desktop?

I was wondering if Google can see my computer screen while I'm using Chrome Remote Desktop. Let's assume there's my main PC named A and my other PC named B. PC B will have the Chrome extension ...
johnny's user avatar
  • 1
1 vote
2 answers
243 views

Using Google Domains' Email Forwarding Service for throwaway accounts and other things

I registered my current web domain (masonbitbyte.dev) with Google Domains and one of the offered features is an email alias / forwarding service. I can create over 100 email addresses on my domain (...
MasonBitByte's user avatar
0 votes
1 answer
1k views

Does Google Meet leak my IP?

My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible. But when I read about webRTC and STUN servers, I ...
Furman's user avatar
  • 1
0 votes
0 answers
224 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
dragi's user avatar
  • 101
1 vote
0 answers
70 views

Does Google Update perform cryptographic checks against releases?

My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities. On the pro side, ...
JohnyD's user avatar
  • 169
0 votes
0 answers
293 views

Google Password I didn't create

I opened Google, and a popup occurred briefly before I reflexively closed it. I then realized it had said something about a new password saved to the Google Password Manager, I think - which is weird,...
Erhannis's user avatar
  • 111
1 vote
3 answers
1k views

Mistyped "google" and came to a suspicious page with a browser hijacker

I misspelt google as "googe" (very dumb, yes). It took me to a page that asked me to enter my birthdate. The URL was something along the lines of luj dott proasdf dott com After going to ...
mistes 's user avatar
  • 111
0 votes
1 answer
993 views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
The Amateur Coder's user avatar
5 votes
0 answers
1k views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
Sz.'s user avatar
  • 151
27 votes
2 answers
9k views

How is Google abused for DDoS attacks?

While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent. I'm ...
blnks's user avatar
  • 383
0 votes
1 answer
228 views

How google is protecting the MITM attack

If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
kodeFox's user avatar
2 votes
1 answer
182 views

Backup Google Authenticator transferring QR code

I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
lucasresck's user avatar
0 votes
1 answer
115 views

Is this insecure to show in cookie Google Tag?

While researching one site, I found that if you enter document.cookie (Firefox) I can see this filed in cookie _gat_gtag_UA_XXXXXXXXX_1=1. There were plain text. As I know gtag is for Google Tag ...
dokichan's user avatar
  • 157
0 votes
1 answer
2k views

Is it possible for malware to infect google drive?

If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
user avatar
4 votes
1 answer
4k views

What is Google's "match the number" verification trying to achieve?

When I log into my Google account from my laptop with 2FA enabled, I usually get a prompt on my smartphone in order to confirm the log in. I tap OK and then I am logged in. However sometimes I am not ...
yankee's user avatar
  • 143
0 votes
0 answers
148 views

Requiring Google Mobile Service token

I'm pentesting an android application written in Cordova and while inspecting the network traffic I found some interesting endpoint that I would like to test. However, this endpoint need a tokenID (ex....
D.Rek's user avatar
  • 101
-1 votes
2 answers
427 views

Are the private URLs from Google Photos actually unguessable?

Maybe my math is wrong, but here it goes. If I generate a private url to share an album in Google Photos, I get something like this https://photos.app.goo.gl/***************** where the asterisks are ...
cinico's user avatar
  • 103
16 votes
2 answers
6k views

Is cloudflare injecting tracking code for PDF requests in browsers via the browser PDF plugin?

Opening a PDF link in the browser (e.g. google chrome with the ootb PDF viewer plugin) apparently indicates that when the PDF is hosted on a cloudflare-facing domain there is additional data present ...
ccpizza's user avatar
  • 291

1
2 3 4 5
12