A branch of computer technology known as information security as applied to computers and networks.
3
votes
4answers
13k views
How to check if somebody else is signing to my Yahoo account
I have Hotmail/Yahoo/GMail email accounts. How to check if somebody else is logging in to my email accounts? I mean Sometimes I send offline message to my Yahoo Messenger but when I log in to my yahoo ...
1
vote
1answer
39 views
Is there a centralised security notifications list for web based apps? [closed]
This may be in the wrong stackexchange but I was wondering if there was a centralised mailing list or website that sent out security advisories for different web apps?
0
votes
1answer
61 views
I search application which help me to secure my different accounts, please help [closed]
Several days ago somebody steal my account (from mail.ru), after that they are steal my premium EA account and several accounts for different MMORPG. fortunately I restore access to all accounts, but ...
0
votes
1answer
228 views
What happens to my deleted Trello cards?
I am trying to push Trello for adoption within my organisation, but there is concern from higher up about the deletion of data.
Are cards logically deleted (ie setting deleted=true) or are they ...
0
votes
0answers
35 views
Safe login from App1 to App2 via link [closed]
I have two webapps, App1 in PHP, and App2 in RoR. Each user as an account
The desidered use case is that user login in App1, then can go to App2 without using another set of credentials, but by ...
3
votes
1answer
2k views
Allow friends to comment in a photo I'm tagged in
My wife often takes photos of our child and uploads them to Facebook. She tags me so my friends can see the photo as well. However, my friends cannot like or comment on these photos. When I do the ...
0
votes
0answers
163 views
Are Facebook Profiles viewable when not logged in?
I was just killing some time on Facebook, had the profile pages of a few of my friends open and then, I suddenly logged off.
To my shock, I was still able to see a few profiles, but for a few others, ...
2
votes
1answer
166 views
With Gmail's 2-step verification, what's the purpose of the “recovery email address”?
If I have a change in phone number, and the two-step stops working, is the recovery email address going to be all it takes to get back full access, or is that only going to be useful for a forgotten ...
3
votes
2answers
633 views
How to always browse Facebook using HTTPS [duplicate]
Possible Duplicate:
Does Facebook provide an SSL interface?
I've googled and searched on our site here, but the best I can find is the question How to get Facebook to use “http://” instead ...
2
votes
4answers
79 views
Any free online service which keeps track of all the passwords automatically?
I don't want to enter the password to a site to keep the record. I want a service which automatically catches the passwords and stores it.
6
votes
2answers
1k views
What does using 'Login with Facebook' or 'Facebook Connect' to login to another site allow the site to do?
When I use a Facebook account to login to another website, what does 'logging in with Facebook' allow that website do with my Facebook account?
Can they post messages on my wall or news feed or ...
3
votes
2answers
214 views
Two factor gmail authentication: How to login from *either* device?
How can I use 2 factor gmail authentication in this situation?
I have a gmail account, a laptop and a phone. I use 2 factor authentication so that when i try to access gmail on the laptop, i verify ...
2
votes
1answer
1k views
Is this email from Google Wallet spam, fraud, or legitimate?
I have just received an email from Google wherein they are asking for my physical address so that I can continue to use my Google Wallet account. This is strange since I have never used Google Wallet. ...
0
votes
2answers
799 views
How safe Is “My Permissions”?
How safe is the My Permissions site? It looks like a good way to keep track of what inter-web-app permissions you've granted, at least for the big names. However, I'm at the stage where I'm ...
0
votes
2answers
3k views
Is this a spam email? It says it confirms a Paypal payment, what should I do?
FW:You just sent a payment to Colin Peterson De: PayPalAgregar a
contactos Enviado: Tue, 1 May, 2012 a la(s) 3:09 pm Para:XXX PayPal
You just sent a payment Transaction ID: ...
0
votes
1answer
108 views
Is there two-factor authentication for hosted wordpress.com blogs?
There is a plugin that supports two-factor authentication via Google's Authenticator for self-hosted Wordpress blogs. Is there a similar feature I can turn on for hosted wordpress.com blogs? Every ...
36
votes
1answer
7k views
How does Google's new two-factor authentication work with IMAP, POP, etc.?
I'm very excited about Google's new two-factor authentication. Two-factor authentication means, in this case, that instead of just authenticating based on "something you know" (your password) you also ...
1
vote
0answers
224 views
Gmail warns of “ unusual activity” but no other IP addresses but my own have been logged by them
This morning I tried to log in to my Gmail account only to discover it was locked due to "unusual activity detected".
It gave me the option to verify my account via phone, which I did, and I got ...
1
vote
0answers
36 views
Why should I use Cloudfare? [closed]
A friend recommended me to use Cloudfare.com to manage my DNS easily but looking at the service, I don't understand what they are doing which they refer to as making my site fast and secure.
I get ...
15
votes
3answers
6k views
Is there a way to hide status updates from a friend on Facebook? (Boss Mode)
I have friends on Facebook that I like to see their status updates, but I don't necessarily want them to see my status updates. People like my boss, or my mum.
Is there any way I can still be ...
7
votes
2answers
1k views
Is it safe to use Gravatar?
I vaguely remember hearing that Gravatar had some security or privacy flaw. I think it was that someone could extract your e-mail address if you used a Gravatar. Is Gravatar safe? How do you know?
...
2
votes
1answer
891 views
I received a notification from Gmail that someone tired to sign in to my account. Is it legitimate? [duplicate]
Possible Duplicate:
Does Gmail sends “suspicious sign-in prevented ” emails or is it a trick?
I've just received the following notification, apparently from GMail:
Unusual ...
3
votes
1answer
682 views
Mail to redut.net in Gmail sent mail folder
I have noticed multiple outgoing mail messages to an address at redut.net in my Gmail "Sent Mail" folder, all sent at around the same time. The contents are base64-encoded and upon decoding it I see ...
8
votes
10answers
1k views
Client-side encrypted online backup service
I'm very interested in using an online backup service to keep my data safe from malfunctioning hardware. And I am, of course, willing to pay for the service.
However, I don't want my data to be ...
1
vote
1answer
412 views
Which popular/high-profile web applications support two-factor authentication? [closed]
I'm aware that both Google and Facebook offer two-factor authentication, by sending an SMS to your phone under certain circumstances.
What other popular or high-profile web applications support ...
-1
votes
1answer
183 views
E-Banking sites that logs user out when (browser) back button is clicked [closed]
I have used e-banking sites that will log you out whenever you navigate back/forward from the webpage (affects all GET requests, not just POST).
From a user experience point of view, it sucks (very ...
0
votes
0answers
32 views
Correct cookie management [closed]
I am trying to find a reliable source for cookie management. I read though OWASP so i roughly know what can be dangerous.
But I need to authenticate my users with cookies. Is there a complete step by ...
0
votes
1answer
52 views
Are Facebook accounts always re-attainable?
If someone hacks my Facebook account, is it that no matter what he does, can I always get back my account?
What is the maximum that he can and must do to ensure that I do not get my account back?
...
0
votes
0answers
37 views
Realtime monitoring of SSL connection? [closed]
I have a web application that is using an SSL cert.
When I visit page https://www.xyz.com/secure_login.jsp, I can use my browser to check the connection details (ie. level of encryption).
Even ...
0
votes
0answers
72 views
Understanding CSRF vulnerability in Web Application? [closed]
i'm having understanding csrf vulnerability , i'm use authorize system in my web application , but i found csrf vulnerability and that is make me confused.
here is my question
why CSRF is most ...
17
votes
9answers
352 views
How can I be certain that a URL-shortened link I click isn't going to send me to a dangerous or unwanted site?
When I see a shortened URL, I'm always hesitant to click it because I don't know where the link is going to go. (In the worst case, it may lead to an XSS exploit against a site that I'm logged in to)
...
7
votes
1answer
381 views
Is this Yahoo mail mobile form secure?
Using my android device I went to "mail.yahoo.com" on my web browser. It forwarded me to this page: http://mlogin.yahoo.com/w/login/user ...
The page prompts me to enter my username and password, but ...
5
votes
1answer
1k views
Is there a way of disabling Google's password recovery feature?
I have a YouTube channel and it's running under a different Google account to my normal one. I have a secure password with it and alternate e-mail address set up but I thought I'd see how secure the ...
8
votes
4answers
25k views
How did my email get hacked? What to do next?
I use Hotmail. My password was strong (upper/lower case letters, digits, and special characters. No dictionary words. It was only 8 characters, maybe that was the problem?
I only use this password ...
2
votes
1answer
228 views
If I create an organization, can I limit what boards the members can see?
I would like to create an organization for our company, with boards for each department.
I need some department boards, such as HR, available only to certain people in the organization. Can I give ...
2
votes
1answer
91 views
Google authentication and authorization among their apps [closed]
Google has a bunch of apps like Google+, Gmail, Docs, Reader, etc. Internally, these apps must talk to each other securely to query information/data. I am wondering conceptually how Google implements ...
2
votes
1answer
3k views
How to contact Facebook and get IP of last unsuccessful login attempts
My account was recently unsuccessfully accessed, because I received the email about unsuccessful logins attempts and with the link to "go back to Facebook via clicking link".
I am concerned who was ...
1
vote
1answer
202 views
Is it possible to protect Facebook page from takeover by other administrator?
If many people have admin access to Facebook page one of them can delete page, or remove other administrator.
Is it possible to protect from that situation in some way (ie. master admin or password)?
...
2
votes
0answers
361 views
How to remove recovery/default email addresss
Someone has been trying to access my Yahoo Mail account through password recovery. I changed the password, so this is no longer a problem, but as I was going through "I forgot my password" recovery ...
0
votes
0answers
155 views
How to license my web application for schools? [closed]
I have a web application which I am interested in start selling it for schools, but, until now, I didn't find a proper solution for licensing it for schools.
Can some one please guide me for a ...
2
votes
0answers
149 views
Disabling referrer tracking on Facebook stops invites/messages/updates from working [closed]
I installed Noref chrome extension to stop websites from looking at which link I had come from (the referrer link) when reaching to facebook.
I now find that I can no longer use the invites, ...
0
votes
1answer
540 views
Facebook Login Notification Approval?
Apparently my Facebook login notification emails me if someone has logged-in to my account,
without any approval link/code in the email they send me. Is that really the way it's suppose to work?
...
2
votes
4answers
2k views
Should one have security/privacy concerns about scorecardresearch.com when using Ning and other sites?
We have a group who is using Ning which seems to allow us to have private discussions online.
However, one user discovered that the website scorecardresearch.com seems to be tracking our actions on ...
2
votes
3answers
253 views
Do Google Search URLs contain sensitive (private) details?
I noticed that if I'm logged into Google Account (my Gmail and everything) and do a search in the address bar, the URL of the resultant page is really long.
Now, I was wondering: is there any ...
60
votes
5answers
117k views
Facebook detects if you are logged in Gmail
Today I was playing with some web security, and there was a surprise when I decided to test the Forget the Password link on Facebook.
I chose to send the password reset code to my Gmail address, and ...
5
votes
1answer
927 views
How can I verify my PayPal account without giving them direct access to my bank account?
Most sites where you can buy products with PayPal require your account to be verified. It appears that the only way to verify your account is by associating it with your bank account. I prefer not to ...
2
votes
0answers
233 views
Security verification by phone getting error [closed]
This is not for my account, it is for my sister's, since she can't get on hers to ask these questions. She needs to verify her account by text or by calling and she does not have text messages, so by ...
11
votes
3answers
853 views
In Gmail, is the “always display images from” option safe?
I know that it is possible for a spammer to generate an email that claims to be from a certain sender, regardless of whether it actually is. They could use that to send me mail purporting to be from ...
1
vote
3answers
520 views
Sending emails to Gmail that do not trigger phishing warning
I have been using Google groups for quite some time. Recently, when I'm viewing the mails from these groups I get warnings on the header saying:
This message may not have been sent by ...
2
votes
1answer
1k views
Retrieving past application specific passwords
I'm curious if there is a way to view past application specific passwords under Google's two factor authentication.
Otherwise I figure they were for one time use and you can just keep cranking out ...
