Questions tagged [google]
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
579
questions
1
vote
1
answer
1k
views
Unknown URL parameters in google query
I received an email which is classified as "potentially malicious" by my email program (Thunderbird), where links are actually a google URL query with extra parameters:
For example, the displayed ...
- 151
3
votes
1
answer
297
views
Google login button - what prevents an rogue app from stealing a token?
Here are steps to setup a Google login button on a web client:
https://developers.google.com/identity/sign-in/web/sign-in
When click on the Google login button this pops up:
All the interactions are ...
- 131
1
vote
1
answer
944
views
Does Google flag all subdomains for malware/phishing if one is infected?
After I tried logging to my host's cpanel today, I got the safe browsing warning, about the site "redirecting users to harmful websites".
The cpanel uses an address like this:
https://subdomainXX....
- 163
1
vote
0
answers
86
views
How large is AppEngine's Private Key?
AppEngine provides methods for signing binary data - e.g. via the Go language's SignBytes[1]
However, it doesn't specify any information about how large the private key is.
Is this published ...
- 541
4
votes
2
answers
2k
views
How does Google protect against scraping?
I'm trying to implement security against scraping on my website to prevent basic scraping techniques.
Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
- 161
2
votes
1
answer
291
views
Concerted attack on linked google accounts?
Yesterday I received two (authentic) e-mails from Google saying they prevented sign-in attempts to two (very old) google accounts of mine. Google says they used the correct passwords, which turned out ...
- 735
1
vote
2
answers
2k
views
Does Google identify me from my 'phone?
As per my previous question I would like to escape Google as much as possible.
Since I realize that I can’t do this completely, I will do what I can, although some might find it pointless.
I have ...
- 1,410
7
votes
2
answers
5k
views
By using reCAPTCHA which information is Google collecting?
Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
- 79
0
votes
1
answer
240
views
Does facebook/google app id need to keep secret if possible?
For example, suppose I have an app which includes a link to use the facebook feed dialog, eg:
https://www.facebook.com/dialog/feed?app_id=xxxxx&link=
Which means the Facebook id is revealed to ...
- 535
3
votes
0
answers
498
views
Minimum set of ACS features to secure remote PCIe devices
According to a Google blog post from 2017, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service ...
- 66.7k
0
votes
2
answers
2k
views
How does google know if I am logging in from a new machine(using web browser)? [duplicate]
Every time i sign into my google account on a web browser on a new machine, it warns me of suspicious activity. How does google know its a new machine? I am trying to implement a similar thing for my ...
5
votes
1
answer
1k
views
Does Google check for Unicode characters to determine spam now in Gmail?
I was reading some tweets from @pwnallthethings regarding the John Podesta spear phishing emails.
What the email looked like:
The Change Password button link, notice the domain com-...
- 787
2
votes
1
answer
2k
views
Outsmart Google Drive censorship with 7zip encryption
I use sometimes Google Drive for sharing large files. Google Drive is fast and user friendly.
I don't wish that Google sees the content of my files and try to encrypt the filename and content. My ...
- 1,469
6
votes
1
answer
3k
views
Android Messages Web and Privacy
Recently Google rolled out the feature to send SMS/Chat messages over Web via their Android Messages app.
The approach seems similar to the WhatsApp Web Client. What I didn't find however are ...
- 61
1
vote
0
answers
118
views
Security concerns in cookie exporting between browsers
I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
- 11
1
vote
2
answers
5k
views
Is there a way to fool google with wrong location information [closed]
Google maps tracks our mobile location accurately using multiple ways: gps, cellular network, nearby wifi networks etc. It knows the hotels, banks and other places I have been to. Recently, when I ...
- 407
1
vote
1
answer
466
views
Google Accounts: Reverse lookup of recovery-email
Is there a way to check all the emails that has my email as "Recovery Email"?
- 3,313
0
votes
0
answers
883
views
Why does Google's "identify a thing" captcha include a long waiting time between showing images?
One of Google's "Recaptcha" challenges asks users to identify a "thing" (typically a car or something similar) in a set of different small photos on a 3x3 grid:
After clicking one of the "things", ...
- 142
21
votes
2
answers
5k
views
How can I escape Google?
I am unsure how to formulate this question, so please feel free to edit it.
I considered asking on https://android.stackexchange.com/ but feel that this is more security related and more likely to ...
- 1,410
1
vote
2
answers
1k
views
What is the risk of sharing the client_secret.json in a public repo?
I have a python script which writes data into a public google sheets file and for using the google sheets API I need to have a user authorize my script. I want to share the script with others and thus ...
- 383
0
votes
0
answers
4k
views
How to handle a Google security warning to a non Google email address?
I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account.
All the links in the emails point ...
- 109
0
votes
1
answer
688
views
Best practice to share google drive API credentials for being used by a script?
In a nutshell: Shall I share oauth2-credentials in our source code with the scope of full write-access to a google drive from a dedicated single-purpose google-account?
so, I've written a python ...
- 383
1
vote
1
answer
241
views
I provided lots of un-encrypted personal data to Google Drive over the years. How can I best retake control over my data?
I am an average user of the internet, with my very legal, normal and humble private life. Over the years I have uploaded all kinds of personal data to Google Drive, and I'm regretting this decision, ...
- 387
2
votes
1
answer
21k
views
Can my employer see my Google Search Data on my personal IOS device when I’m at home but accidentally logged into company Google Account?
I was browsing the web at home using Safari on my IOS device (mainly Google search). I happened to scroll to the very bottom of the screen and realized Google was logged into my Google account for ...
- 21
2
votes
2
answers
1k
views
How to route internet traffic through Google
I'm in a situation where my network provider blocks all my internet access except for Google and its branches (Drive, Gmail, etc).
I'm looking for a way to route my traffic through Google (with Google ...
1
vote
1
answer
257
views
Haunted Google Account?
Not to be dramatic but at my level of inexperience, the title is what I'm left with. Hoping smarter people can point me in the right direction, so here goes...
A google account used in a school ...
- 13
13
votes
4
answers
10k
views
How does entering "a" phone number help Google "verify it's me?"
Today I tried to sign into my Google account while at university. Google blocked the attempt, and asked for a phone number. Below is a screenshot of the form Google showed me.
It says:
Verify it's ...
- 239
6
votes
1
answer
2k
views
How was Google recaptcha v2 bypassed several times?
There are multiple reports of a reᴄᴀᴘᴛᴄʜᴀ v2 bypass. Most of the time, the explanation is neural networks services provided by Google or IBM.
But there is something I am failing to understand: for ...
- 1,472
6
votes
1
answer
258
views
How Google Detects State Sponsored Attacks
A user on Twitter posted a screenshot in which Google warns him as he may be targeted by state sponsored attackers. What kind of attacks can be detected by Google and how?
- 193
1
vote
4
answers
1k
views
Google shows my site as hacked in their search results
Google shows a "This site may be hacked" warning underneath my domain in search results. No further warning are shows when visiting the page.
I have tried to make sure my site is safe. I've looked ...
- 111
5
votes
2
answers
2k
views
Disable weak cipher for Google Cloud App engine custom domain website
I'm not sure if this belongs here or in stack overflow. I have set up a custom domain website using a PHP Google Cloud App engine. After some third party security testing i've been advised to disable ...
- 171
1
vote
0
answers
118
views
How can I reclaim a company email account from former Canadian distributor? [closed]
A former company rep in Canada took our (COMPANY DBA)@GMAIL.COM address for use in representing our products in Canada. She has moved on and seems to have discarded the name as all that seem so come ...
- 11
2
votes
1
answer
779
views
What does Chrome use as the key for decrypting my saved passwords?
When using Chrome, Chrome offers to remember my password on non-Google sites.
If my Google password is the key used to decrypt the other passwords that Chrome stores for me, wouldn't Chrome have to ...
- 129
11
votes
3
answers
4k
views
Is Google Analytics tracking actually safe to use on pages with sensitive information?
When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough.
But when you add this code are you giving Google the ability to scrape the ...
- 261
1
vote
0
answers
186
views
Strange crawl requests from google bot
My Wordpress web site recently had a strange crawl link from Google. This is the list of crawl errors on my Google Webmaster Tools page:
Are these normal requests from google, or has my website been ...
- 111
2
votes
1
answer
3k
views
Does Google have access to keystrokes on our Android device keyboard? [duplicate]
I am using an end-to-end encrypted messenger on my smartphone. However, today I asked myself if the content of the messages is really secure because of the keyboard on my Android device.
As you know, ...
- 869
3
votes
1
answer
215
views
Google Account collecting browser history and cookies?
I am using some random site in Microsoft Edge. There are no account associate neither with the site nor the browser. Now,
What will happen if I login in Google Account and keep it logged in. Will it ...
- 964
0
votes
1
answer
836
views
Received a mail that my password for an app has been reset. Does this mean my GMail is compromised?
Today morning I received a very troubling message in my inbox. I saw that there was a message that my account password for ZoHo has been successfully reset.
I don't remember making any such request ...
- 275
10
votes
2
answers
2k
views
Are all Google app-passwords equal? What is their attack scope?
Upon setting up app-passwords, Google sends a mail:
This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
- 3,313
5
votes
2
answers
13k
views
Whatsapp access to Google Drive
I am very concerned today as I discovered whatsapp has access to my google drive.
Does this mean whatsapp can steal my google drive data with this access or is it restricted only to a specific folder?...
- 153
0
votes
2
answers
4k
views
Where can I find Google Backup Codes? [closed]
I am traveling long term and I don't want to put my SIM card in the phone every month to receive the SMS code when signing-in to Google (I always recieve 10+ other text messages which costs me a lot).
...
- 121
0
votes
1
answer
305
views
Google adds ryanair flight to calendar without being logged in [closed]
I booked a flight with ryanair in a browser, where I'm not logged in to google or using googles search engine(I'm using duckduckgo.com)
I didn't use my Google email address in ryanair!
After booking ...
- 133
1
vote
1
answer
329
views
Logging someone else's google account on my Andoid device
Earlier today I had to add someones's Google account to my Android phone, to help them with something. My phone is a Samsung Galaxy S7 with the latest Android version, not sure if this is important. ...
- 13
4
votes
2
answers
1k
views
Gmail Account Password Compromised Twice In Two Weeks
I have an many Gmail accounts and I've never had any issues like this. I created a new Gmail account for a new website I created. It has the same name as the website, e.g. something.com and something@...
- 181
79
votes
3
answers
10k
views
Possible reason for displaying two different websites on single domain?
This is something interesting.
Try going to http://www.circaventures.com/
You will get a venture capital company.
Now go to google and search "Circa Ventures". The first result you get is the exact ...
- 781
4
votes
1
answer
2k
views
How secure is Firebase?
I am considering using Google's Firebase database for a project, but I am a little concerned with how secure that data will be.
As I understand the flow, the web-based (or mobile) application will ...
- 275
1
vote
3
answers
321
views
Do large companies storing private user data ensure no single insider can abuse user data? if so, how?
Let's say we have a large company X which stores private user information. For example an e-mail provider, or social network provider. I mainly have GMail and Facebook in mind. So the company has ...
- 111
-2
votes
1
answer
636
views
DNS Request makes Google Image Unsafe to Use
I always thought the images from Google image search were under the domain of Google URLs.
As long as you don’t click the image to visit the original site that hosts that picture, you were with ...
- 9
6
votes
1
answer
6k
views
Can I know who tried to login to my Google account?
I recevied a notification that someone tried to access my Google account and it was denied, so i quickly changed the password. Google tells me the IP number in the notification and a location. I ...
0
votes
1
answer
129
views
Google and yahoo: what criteria do they use to qualify a "new device"?
So, I have two computers and I use my smart phone's internet on those computers. Yahoo during a brief period actually locked me out of my account because "try logging in on a device i normally log in ...
- 149