Questions tagged [google]

Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.

Filter by
Sorted by
Tagged with
296 votes
6 answers
161k views

How does Google know where I am?

Whenever I open the Google Maps app on my Android mobile phone, Google always seems to know my location, and it is very accurate (usually it places me on the map even in the correct room). Also, this ...
MNLR's user avatar
  • 2,247
281 votes
3 answers
24k views

How did "tech-supportcenter" phishers trick Google?

Related: Is the Web browser status bar always trustable? How can Google search change the location in a URL tooltip? I've always thought you can "hover" over a link to see where it really goes, ...
browly's user avatar
  • 2,100
266 votes
4 answers
169k views

How does Google Authenticator work?

Google Authenticator is an alternative to SMS for 2Step verification, installing an app on Android where the codes will be sent. It works without any connectivity; it even works on plane mode. This ...
user avatar
135 votes
9 answers
20k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
samayo's user avatar
  • 929
134 votes
7 answers
25k views

How did Google know I looked something up?

Yesterday I was searching DuckDuckGo for booking a vacation. I ended up reading a lot on one specific website. Today multiple websites show me Google banners from this specific website. Normally, I ...
P.Yntema's user avatar
  • 1,047
111 votes
5 answers
17k views

What should I do about Gmail ad asking me for password?

I just got a pop-up after having logged on to Gmail. It said it was from https://googleads.g.doubleclick.net and asked for username and password. What should I do about this? Has anyone else seen ...
morten's user avatar
  • 881
88 votes
3 answers
18k views

Google account verification request

Yesterday evening my android phone (Google Play Services app) asked me to log in again into my account due to "security changes" (I don't remember the exact wording used). I double checked it was the ...
BgrWorker's user avatar
  • 1,929
86 votes
2 answers
20k views

How did someone log-in to my Gmail account from Kenya?

While on holiday in France in May I received an email from Google "New sign-in". Your Google Account was just used to sign in: Nairobi, Kenya. Tuesday, 26 May 2015 22:10 (East Africa Time). I ...
Colonel Panic's user avatar
80 votes
3 answers
10k views

Possible reason for displaying two different websites on single domain?

This is something interesting. Try going to http://www.circaventures.com/ You will get a venture capital company. Now go to google and search "Circa Ventures". The first result you get is the exact ...
Maggi Iggam's user avatar
80 votes
3 answers
87k views

What are the dangers of allowing "less secure apps" to access my Google account?

According to https://support.google.com/accounts/answer/6010255: Google may block sign in attempts from some apps or devices that do not use modern security standards. Since these apps and devices ...
Hjulle's user avatar
  • 906
76 votes
12 answers
24k views

Is Google overreaching by forcing me to use TLS?

Gmail was recently changed to require HTTPS for everyone, whether they want to use it or not. While I realize that HTTPS is more secure, what if one doesn't care about security for certain accounts? ...
tylerl's user avatar
  • 83.3k
70 votes
3 answers
11k views

Why is Google still using a SHA-1 certificate on its own site when they are phasing them out in Chrome?

Firefox dev tools show that https://www.google.com is using a certificate signed with SHA-1. Why is Google doing this when they are phasing out the certificate themselves? Shouldn't this only hurt ...
sgoblin's user avatar
  • 733
64 votes
3 answers
6k views

Are staggered roll outs of security patches bad?

Many Android devices, including the Google Nexus line, are now receiving monthly security patches via OTA updates, accompanied by the Android Security Bulletins. However, these updates are often ...
tonytan's user avatar
  • 698
63 votes
2 answers
10k views

How are one-time password generators like Google Authenticator different from having two passwords?

Google Authenticator uses the TOTP algorithm to generate your One-Time Password (OTP). TOTP works like this : The server generates a secret key and shares with the client (you) when the client ...
Ashwin's user avatar
  • 1,647
61 votes
6 answers
118k views

Can my IT department read my Google Hangouts chats while at work?

Is Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but ...
Jack's user avatar
  • 713
58 votes
9 answers
161k views

How does Google Maps know where I am, when I'm using a VPN?

How does Google Maps determine my location? I've gotten some understanding of Google Maps' geolocation methods from here: http://friendlybit.com/js/geolocation-and-google-maps/ In the newer ...
user10732's user avatar
  • 683
53 votes
5 answers
11k views

Is authentication using Facebook/Google considered good practice?

A lot of services, sites, and applications offer the 'login with Facebook' or 'login with Google' option. For many sites, the browser opens a separate window in which you can enter your username and ...
Ruben's user avatar
  • 592
47 votes
8 answers
10k views

What are some considerations before moving personal data to Google Drive?

I am considering uploading some (all) of my digital personal data to Google Drive. I guess this would instantly grant access for NSA to my data. (Is that right?) Who would have access to my data on ...
gen's user avatar
  • 1,680
41 votes
2 answers
63k views

What triggers Google's reCAPTCHA

I noticed that Google's "I am not a robot" reCAPTCHA forces me to check correct images on my computer. I installed a virtual machine and tried there. Same thing. Used proxy. Same thing too. Then I ...
sanjihan's user avatar
  • 639
40 votes
2 answers
8k views

Why does Google cripple the 2FA Google Authenticator PAM module?

If you enable 2FA for Google Apps the shared secret is 160 bits. The google_authenticator PAM module on the other hand seems to use 80 bits for the shared secret. According to RFC 4226: R6 - The ...
Akshay Kumar's user avatar
39 votes
8 answers
15k views

Should we store personally identifiable information on google drive?

For a number of reasons, including remote accessibility, my company would like to move all of our accounting records, account applications, and marketing materials to Google’s Apps for Work Drive. At ...
epool's user avatar
  • 501
31 votes
6 answers
15k views

Why can't I share a one use code with anyone else?

I noticed in some cases when I get a verification code from Google it may say something along the line of: "You should not share this code with anyone else and no one from Google will ever ask for ...
Henry WH Hack v3.0's user avatar
31 votes
3 answers
13k views

Google Account: implications of using application-specific passwords

In the wake of the recent Mat Honan story I decided to try out two-factor authentication on my Google account. But in order to keep using it with Exchange, the Android OS, Google Talk and Google ...
Pieter's user avatar
  • 1,329
28 votes
3 answers
33k views

Does backing up WhatsApp on Google Drive expose messages?

I was wiping and restoring a family member's Android phone today, as it was running slowly with loads of apps on it. I decided to back up their WhatsApp messages to Google Drive in order to recreate ...
bitofagoob's user avatar
27 votes
2 answers
9k views

How is Google abused for DDoS attacks?

While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent. I'm ...
blnks's user avatar
  • 383
27 votes
3 answers
10k views

Which SSH security is stronger? 2 Factor or Public key

For SSH authentication, which is more secure? 2 Factor Authentication using a USB token/Google Authenticator(time based) OR Public/private key with password Or could they be both used at the same ...
whoiskai's user avatar
  • 379
25 votes
4 answers
14k views

What is the point of restricting a google API key by HTTP referer?

If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct? So is it worthwhile to use this restriction?
ryan's user avatar
  • 353
24 votes
1 answer
11k views

False 'Security alert' from Google - every login generates mails from '[email protected]'

Every time I log in to Google with the same MacBook I get this email: New device signed in to [email protected] Your Google Account was just signed in to from a new Mac device. You're getting ...
Sybil's user avatar
  • 1,467
24 votes
3 answers
237k views

Where to find Google Authenticator backup codes?

I'm slightly confused about obtaining Google Authenticator backup codes. I can find my Google Account backup codes at: https://myaccount.google.com/signinoptions/two-step-verification But have no ...
a.s.t.r.o's user avatar
  • 343
23 votes
2 answers
2k views

How can I trust that this is Google? [duplicate]

How do I trust that I am typing my password for Google when I'm using a Safari web view in an any iOS app?
bubakazouba's user avatar
23 votes
5 answers
10k views

CSP allowing all Google domains?

I'm trying to develop a CSP for the site https://www.lidl-tour.ro. Right now there is a policy than runs in report-only-mode, so nothing is blocked at the moment. The site contacts googleads.g....
HorstKevin's user avatar
  • 1,408
22 votes
8 answers
11k views

On two-step login forms, why is it the login name and not the password that's asked first?

There are several login forms (e.g. Google's) on the internet where you first enter your login name and then, once that's submitted, you get to enter your password. One of the advantages of this is, ...
Out of Band's user avatar
  • 9,293
21 votes
3 answers
19k views

How can I access the certificate transparency logs?

Am I going crazy or is there no way to access any of the "known logs" listed on Google's Certificate Transparency site? Every single one of the links listed there 404s, even though the list is ...
user124384's user avatar
21 votes
4 answers
21k views

Why does Firefox claim that my connection to Google is insecure?

I keep receiving this message whenever I open any site from Google: My Firefox is up-to-date, and so my Windows 8.1. Since I don't know much about HSTS, I don't know what's going on, and obviously, I ...
Eibo's user avatar
  • 2,495
20 votes
2 answers
5k views

How can I escape Google?

I am unsure how to formulate this question, so please feel free to edit it. I considered asking on https://android.stackexchange.com/ but feel that this is more security related and more likely to ...
Mawg says reinstate Monica's user avatar
19 votes
2 answers
13k views

Is Google prompt safer then authenticator app for 2-step verification?

I guess Google's Authenticator app is safer than SMS because in app there is no data in transit once you setup your phone. Now, Google is pushing phone prompts as a replacement for authenticator app. ...
guest's user avatar
  • 193
18 votes
8 answers
26k views

Encrypting files on Google Drive

It's my understanding files kept on Google Drive are not protected. I would like to have them encrypted so that to be able to view or modify them one must enter a password. I foresee a potential ...
Celeritas's user avatar
  • 10.2k
18 votes
11 answers
9k views

Is using Gmail and encrypted documents enough for secure email communication?

My friend was asking me what would be the best way to exchange documents with clients. He was trying to tell me that just sending the documents via email was sufficient and I told him he was insane. ...
timpone's user avatar
  • 349
17 votes
2 answers
1k views

Can robots.txt for your face be made effective?

As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
n611x007's user avatar
  • 2,285
17 votes
4 answers
9k views

What is the use of the "secret" displayed when setting up 2 Factor Authentication?

What is the purpose of the "secret" that is displayed when you take the picture of the QR code to set up 2 Factor Authentication on a non-Google site? Why would you need it? If you save it, doesn't ...
B Seven's user avatar
  • 433
17 votes
2 answers
14k views

How does Google detect new devices for two factor authentication

When you enable two step verification for google accounts, you get sent a code by SMS to enter in addition to your username and password the first time you log in with a new device. How do they ...
Oliver Kohll's user avatar
17 votes
2 answers
15k views

Why does Google consider Thunderbird not secure enough?

There is a special setting in Google accounts to allow "less secure applications" access to your account. If you turn this off, Mozilla Thunderbird won't work to check your e-mail. This is confirmed ...
user32421's user avatar
  • 275
17 votes
2 answers
39k views

Why can I cast to my neighbour's TV on my Wi-Fi?

I've recently noticed that a new device shows up as available to cast to from my android phone when I'm logged on to our home Wi-Fi. It's an LG Sk8100 TV, but as we own no such TV. I'm assuming it's ...
hexamon's user avatar
  • 283
16 votes
2 answers
6k views

Is cloudflare injecting tracking code for PDF requests in browsers via the browser PDF plugin?

Opening a PDF link in the browser (e.g. google chrome with the ootb PDF viewer plugin) apparently indicates that when the PDF is hosted on a cloudflare-facing domain there is additional data present ...
ccpizza's user avatar
  • 291
16 votes
1 answer
7k views

Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

I can't believe it happened to me but I entered Gmail account's user-name and password into a website as part of a phishing scam. I use Gmail's 2-step verification and have changed my password. Is ...
BenU's user avatar
  • 285
16 votes
4 answers
6k views

Does two-factor authentication reduce the need for a long password? [duplicate]

I've recently enabled 2-factor auth on a number of web apps, mostly using Google Authenticator. Does this mean that the importance of a strong password on each site is reduced? I would prefer to use ...
Steve Bennett's user avatar
16 votes
2 answers
5k views

How does Google Analytics prevent fake data attacks against an entity's traffic?

In order to register a "hit" on Google Analytics, the list of things required are: Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
Aditya M P's user avatar
16 votes
2 answers
68k views

My email is listed as recovery email for an unknown Google account

I just received a "New sign-in" notification email from Google, saying Hi UNKONWN_PERSON, Your Google Account [email protected] was just used to sign in from SOME_BROWSER on SOME_OS ...
Mario Trucco's user avatar
  • 1,559
15 votes
2 answers
4k views

Privacy risk in using Google APIs

If I use JQuery from Google APIs: http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js Is there a privacy risk to my site? E.g. does this link enable Google to read my pages, track my ...
Erel Segal-Halevi's user avatar
15 votes
2 answers
13k views

What should I do if I type my password in the address bar, or type password in google search?

When someone accidentally types his or her password in one of the following three locations and presses enter, what should they do? username text box address bar Google search What do you suggest, ...
saber tabatabaee yazdi's user avatar

1
2 3 4 5
12