Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [google-apps]

The tag has no usage guidance.

-2
votes
1answer
91 views

What are the risks of visiting someone else's Google Photo while logged in?

I was browsing Reddit on its official mobile app. I tapped on a photo to see a larger version. I was expecting to be lead to Imgur, but to my surprise it went to Google Photos. Having the app for ...
1
vote
1answer
89 views

Malicious Google Drive Links

Curious about a new form of spam I've noticed in my inbox. Someone seems to be using my email address to fill-out forms on sites, so that I receive the bounce back message. In this message there is a ...
13
votes
3answers
8k views

Can IT see my Google Drive traffic? [duplicate]

I'm on my phone but on the work network. What could they see about my Google Drive traffic? Could they see folder and file names? Could they see documents and photos? It's encrypted, so would they ...
0
votes
1answer
139 views

Stolen Google OAuth refresh token

I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account. Is the old OAuth ...
5
votes
1answer
116 views

Are all Google app-passwords equal? What is their attack scope?

Upon setting up app-passwords, Google sends a mail: This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
5
votes
0answers
32 views

Is there a good way to store OAuth2 tokens for a native application?

Currently I have a native PC application that builds and uploads a configuration to an embedded Linux device (i.e. the client). This device connects to Google Calendar via their OAuth2 API. The ...
1
vote
2answers
203 views

SPF and DKIM passes for SPAM message when using SES and Google Mail

We have websites hosted on AWS, are using SES to send out mailings, and use Google Mail for sending and receiving company mail. Every so often I receive SPAM emails to my Priority Inbox in Google ...
0
votes
2answers
330 views

Would it be HIPAA compliant to share docs with EHR data between two HIPAA compliant Gsuite organizations

Assuming both organizations have HIPAA compliant G-Suite and have signed the necessary legal documents. My gut says this should not be a problem as its done within the google servers, am I missing ...
1
vote
1answer
3k views

Can Google Policy Profile remotely erase all data on the device?

I'd like to configure my company's Google e-mail on my iPhone, however when enabling e-mail profile in Inbox, Gmail, Mail or any other app, the following Device Policy Alert is shown: To use Google ...
10
votes
4answers
476 views

Why would distributing via Google Play be more secure than distributing APKs?

Why do so many Android developers use Google Play to distribute apps instead of (or in addition to) simply putting the APK on their secure website along with a checksum or signature of it?
2
votes
0answers
169 views

How to confirm that a ‘Google Play Services’ app isn’t a phishing attempt? [duplicate]

A user of mine was recently prompted by an app purporting to be from Google to re-enter their password on their personal phone.This prompt was derived in the form of an un-dismissible notification. ...
9
votes
4answers
4k views

What is the point of restricting a google API key by HTTP referer?

If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct? So is it worthwhile to use this restriction?
0
votes
1answer
65 views

Infecting synchronized devices through the cloud

I have a laptop with Windows installed and iPhone both synchronised to Dropbox. Also I use Google Drive app on my phone and on my laptop I access Drive using browser. Which way of using cloud is more ...
6
votes
2answers
595 views

Can Google Docs be used to “sanitize” a Word or Excel document?

Sometimes I have to download some Word or Excel documents from uncredible sites. I need not only to read but also to edit them. I heard that the Microsoft Office suite is a very popular attack vector. ...
2
votes
0answers
703 views

Security risks/benefits of using Google voice?

A small business that handles sensitive information needs to implement a VOIP system that provides better security than the regular cellular network. What are the security risks/benefits of using ...
278
votes
6answers
119k views

How does Google know where I am?

Whenever I open the Google Maps app on my Android mobile phone, Google always seems to know my location, and it is very accurate (usually it places me on the map even in the correct room). Also, this ...
0
votes
0answers
688 views

RADIUS for Access Point Authentication with Google Apps For Business

We're looking to move our current access points from using a static password potentially to RADIUS. However, the closest to a directory service we have is Google Apps for Business, which does support ...
3
votes
1answer
220 views

Shouldn't user content return 403 forbidden?

If I copy the URL for a shared or private image from sites like fbcdn.net or googleusercontent.com and open it in a logged out session, the images appear. Shouln't this return a 403 forbidden error (...
2
votes
1answer
2k views

Can I trust Google Scripts on sites like Labnol?

For example, consider this script. It requires me to grant permission to my Gmail account, but I'm confused why this is necessary -- is it not myself who is running the script? Or is my data going ...
2
votes
1answer
2k views

Why can't Google Forms be used for elections?

I have been looking into secure online voting systems for a fairly small-scale (though extremely important) leadership election (~1000 voters). I have been researching End-to-End auditable voting ...
1
vote
0answers
55 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
34
votes
8answers
30k views

Is it safe to store passwords on Google drive?

In the past I have seen having a Google drive document and have FTP username/passwords there. Is storing passwords in Google drive a good practice?