Questions tagged [google-apps]
The google-apps tag has no usage guidance.
50
questions
0
votes
1
answer
54
views
sealed data from a stolen laptop
Is there a way to force google drive to erase all files + passwords contained on a computer at shutdown (as a proactive measure)? Or this could be accomplished by a standard script to delete all cache ...
0
votes
1
answer
74
views
What security reviews are done on apps in mobile app stores? [closed]
What checks (static analysis, dynamic analysis etc.) does Google, Apple, Amazon etc. do on their app stores with each app developer submit? Are they automatic or manual?
Does any app store review ...
- 129
-4
votes
1
answer
130
views
How do non technical users tell which App stores are safe enough & remain safe using an app store as their quality/vetting varies?
Further to my previous question.
I'm now asking for the 'so what' for all app stores...
Which app store performs better checks so non-technical users can trust the protection? Including 3rd party app ...
- 129
1
vote
2
answers
78
views
If I login to a mobile/web app with a Google account, what stops the developer also using that account?
I have an admittedly-vague understanding of how OAUTH works, but I recently went through the rigmarole of installing rclone and having it sync some files from my Google Drive to my Linux laptop.
As ...
- 418
0
votes
1
answer
41
views
How secure is it to use Google Docs or MS Office online version to share data?
How safe/secure is it to use Google Docs or MS Office online to share data?
That is, if Alice create a new spreadsheet and inserts data into that document and then invites Bob to access that ...
- 489
0
votes
1
answer
82
views
How could attacker know user names of my Google Workspace? [closed]
I found in my Google admin logs that someone from outside my organization is trying to log in frequently by testing all our user accounts against weak passwords. I'm wondering how could that happen?
...
- 109
0
votes
0
answers
46
views
Just got "Find My Device located this device" notification - but I didn't try to locate it and I'm login only at that Android device and my closed PC
This is weird - I've checked my Google account and I'm only logged in at my Android device, my PC (which was closed at the time of the msg.), and Chromecast device.
Couldn't find anywhere any ...
0
votes
0
answers
75
views
Spam popup using Google news
The other day I was using Google News, clicked a Politico link, and got a popup saying Google had selected me to get a free iPad if I answered some survey questions. I didn't fall for it but I had ...
- 101
2
votes
1
answer
526
views
Is it safe to view video files on Google Drive online?
I have a video file on my Drive which is very old but I am not sure whether it's infected or not. Is it safe to view this MP4 on Google Drive (no downloading only viewing it in the Drive app)?
- 21
3
votes
0
answers
422
views
Actual Meaning of Google Drive App Permissions?
I'm trying to understand what the permissions granted to a Google Drive connected app actually mean. The example I'm looking at is MindMup 2 For Google Drive, but it could be almost any as the ...
- 131
0
votes
1
answer
211
views
Diagnose Google security warning?
I have received the following from Google:
Critical security alert
Suspicious attempt to sign in with your password
Google prevented someone who knows your password from signing in to your account. ...
- 115
0
votes
1
answer
243
views
Can school administration see what I'm browsing on my personal computer at home?
I'm wondering what type of access a school administrator might have to my browsing history/watch while I am working and teaching.
I work from home on my private wi-fi network, and I use my personal ...
0
votes
0
answers
126
views
Can the Android "Always-on" VPN setting be relied upon to route all traffic through VPN?
If a user sets up a stock Android device to use a VPN and uses the "Always-on" setting, can they be sure[1] that no traffic will leak outside of the VPN?
[1] Assuming no malware is installed ...
- 1,618
0
votes
0
answers
98
views
Google forms for school election
I have been incharged to manage online votings at school for school president and vice president for 11th grade only. A group of us will be excluded from voting of course. We plan to use Google forms, ...
0
votes
0
answers
355
views
Is it safe to embed a google form on a website without an SSL Certificate?
I designed a Google Form for a website which does not have an SSL Certificate. I have planned to embed it onto a page using an iframe tag. I am currently testing it and have published a test page with ...
user238702
0
votes
1
answer
1k
views
Can one trust OS and apps from Onyx: app store, modified Android, Onyx Cloud
Onyx Boox is a brand of e-book reader produced by Onyx International Inc, based in China. They have e-book readers based on Android OS. They have features that can violate user privacy or other ...
- 101
1
vote
1
answer
99
views
Would it be a big security vulnerability if someone wrote a browser extension to retrieve personal information on Google's behalf?
I am a 6th grader working in a project and came across the following question:
On most browsers, you can inject JavaScript code into the browser, for example by typing in javascript:alert('Injecting ...
- 115
1
vote
1
answer
433
views
Where to store pydrive secret?
Backstory: been toying with the idea of setting up some raspberry pi cctv cameras. originally I was going to store all footage for 31 days (complying with DPA) on a network drive but decided against ...
- 47
2
votes
1
answer
364
views
Question about credentials.json file [duplicate]
I have a python script that connects to google drive and upload some files automatically.
The first time the application runs, it asks for a google account to use in its behalf to upload files to ...
- 121
1
vote
1
answer
307
views
Google Location Accuracy datafeed
Since Android 9, there is an option in your location preferences which is called
Location Accuracy.
I know how Google determines my location over wifi and now I wonder if Location Accuracy has also ...
- 637
0
votes
2
answers
1k
views
What are the risks from letting users share their own calendars?
I've worked for a variety of technologies companies. In working for startups I've noticed a wide variety of opinions about whether sharing calendars is a security risk. I can imagine that it would ...
- 145
0
votes
1
answer
152
views
Are spam invites on Google calendar dangerous? [duplicate]
I was recently "invited" to win a free phone on my Google calendar. At first I was concerned that my account was compromised, but i think anyone can send a calendar invite.
Is it safe for me to ...
0
votes
1
answer
252
views
How to prevent sharing of document templates in Google drive that I didn't authorize?
Not too long ago, I decided to switch to Google Drive and Docs to write my cover letter and resumes, I already use the e-mail address to send them anyways, so using Drive and Docs seemed like a good ...
user214532
1
vote
1
answer
152
views
Is there a way to check if Google Drive is scanning folders other than the ones I have synced?
I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2.
I want to sync Folder2 to my Google Drive. But this additional ...
3
votes
0
answers
133
views
Storing user's private files on S3 and securing access using signed URLs - good idea?
I will be storing private user's files on S3. The files will be PDFs, possibly containing private financial information.
I'm considering letting users directly access the files on S3, without ...
- 131
5
votes
3
answers
599
views
Distribute Program with Sheets API Credentials
I am trying to write a program that uses the Google Sheets API to read spreadsheets and operate on the data.
My program contains a credentials.json file which I obtained from the Java Quickstart page ...
2
votes
3
answers
2k
views
Google Drive and GDPR [closed]
I can't seem to find much information on this online, and forgive me if this is obvious to other folks in the info-sec community but would storing documents such as CVs of applicants, letters written ...
- 21
-2
votes
1
answer
372
views
What are the risks of visiting someone else's Google Photo while logged in?
I was browsing Reddit on its official mobile app. I tapped on a photo to see a larger version. I was expecting to be lead to Imgur, but to my surprise it went to Google Photos.
Having the app for ...
- 421
2
votes
1
answer
406
views
Malicious Google Drive Links
Curious about a new form of spam I've noticed in my inbox. Someone seems to be using my email address to fill-out forms on sites, so that I receive the bounce back message. In this message there is a ...
- 21
13
votes
3
answers
24k
views
Can IT see my Google Drive traffic? [duplicate]
I'm on my phone but on the work network. What could they see about my Google Drive traffic? Could they see folder and file names? Could they see documents and photos?
It's encrypted, so would they ...
- 163
0
votes
1
answer
364
views
Stolen Google OAuth refresh token
I had authorized Google account on my Mac computer. I think my keychain is stolen and google oauth refresh token was stored in it. I removed the OS X app from my Google account.
Is the old OAuth ...
user156092
8
votes
2
answers
1k
views
Are all Google app-passwords equal? What is their attack scope?
Upon setting up app-passwords, Google sends a mail:
This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
- 3,263
5
votes
0
answers
99
views
Is there a good way to store OAuth2 tokens for a native application?
Currently I have a native PC application that builds and uploads a configuration to an embedded Linux device (i.e. the client). This device connects to Google Calendar via their OAuth2 API. The ...
- 151
1
vote
2
answers
618
views
SPF and DKIM passes for SPAM message when using SES and Google Mail
We have websites hosted on AWS, are using SES to send out mailings, and use Google Mail for sending and receiving company mail.
Every so often I receive SPAM emails to my Priority Inbox in Google ...
- 201
0
votes
2
answers
485
views
Would it be HIPAA compliant to share docs with EHR data between two HIPAA compliant Gsuite organizations
Assuming both organizations have HIPAA compliant G-Suite and have signed the necessary legal documents.
My gut says this should not be a problem as its done within the google servers, am I missing ...
- 3
1
vote
1
answer
4k
views
Can a google form contain a virus or other malware?
Just wondering if this is possible? A newsletter I'm applying to be featured in needs my information to be filled out on a google form. I remember Word documents used to be vulnerable to macro viruses,...
- 11
3
votes
2
answers
11k
views
Can Google Policy Profile remotely erase all data on the device?
I'd like to configure my company's Google e-mail on my iPhone, however when enabling e-mail profile in Inbox, Gmail, Mail or any other app, the following Device Policy Alert is shown:
To use Google ...
- 809
9
votes
4
answers
787
views
Why would distributing via Google Play be more secure than distributing APKs?
Why do so many Android developers use Google Play to distribute apps instead of (or in addition to) simply putting the APK on their secure website along with a checksum or signature of it?
- 1,676
2
votes
0
answers
395
views
How to confirm that a ‘Google Play Services’ app isn’t a phishing attempt? [duplicate]
A user of mine was recently prompted by an app purporting to be from Google to re-enter their password on their personal phone.This prompt was derived in the form of an un-dismissible notification.
...
- 7,729
22
votes
4
answers
12k
views
What is the point of restricting a google API key by HTTP referer?
If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct?
So is it worthwhile to use this restriction?
- 323
0
votes
1
answer
126
views
Infecting synchronized devices through the cloud
I have a laptop with Windows installed and iPhone both synchronised to Dropbox. Also I use Google Drive app on my phone and on my laptop I access Drive using browser. Which way of using cloud is more ...
- 127
6
votes
2
answers
2k
views
Can Google Docs be used to “sanitize” a Word or Excel document?
Sometimes I have to download some Word or Excel documents from uncredible sites. I need not only to read but also to edit them. I heard that the Microsoft Office suite is a very popular attack vector. ...
user129187
2
votes
0
answers
802
views
Security risks/benefits of using Google voice?
A small business that handles sensitive information needs to implement a VOIP system that provides better security than the regular cellular network.
What are the security risks/benefits of using ...
- 21
295
votes
6
answers
158k
views
How does Google know where I am?
Whenever I open the Google Maps app on my Android mobile phone, Google always seems to know my location, and it is very accurate (usually it places me on the map even in the correct room). Also, this ...
- 2,237
0
votes
0
answers
783
views
RADIUS for Access Point Authentication with Google Apps For Business
We're looking to move our current access points from using a static password potentially to RADIUS. However, the closest to a directory service we have is Google Apps for Business, which does support ...
- 6,341
3
votes
1
answer
891
views
Shouldn't user content return 403 forbidden?
If I copy the URL for a shared or private image from sites like fbcdn.net or googleusercontent.com and open it in a logged out session, the images appear.
Shouln't this return a 403 forbidden error (...
- 163
3
votes
1
answer
5k
views
Can I trust Google Scripts on sites like Labnol?
For example, consider this script.
It requires me to grant permission to my Gmail account, but I'm confused why this is necessary -- is it not myself who is running the script? Or is my data going ...
- 2,522
2
votes
4
answers
5k
views
Why can't Google Forms be used for elections?
I have been looking into secure online voting systems for a fairly small-scale (though extremely important) leadership election (~1000 voters).
I have been researching End-to-End auditable voting ...
- 129
1
vote
0
answers
97
views
How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?
How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
- 1,507
41
votes
8
answers
38k
views
Is it safe to store passwords on Google drive?
In the past I have seen having a Google drive document and have FTP username/passwords there.
Is storing passwords in Google drive a good practice?
- 529