A branch of computer technology known as information security as applied to computers and networks.

learn more… | top users | synonyms

26
votes
2answers
2k views

How, exactly, does a Facebook worm work?

I initially had assumed that a FB friend of mine was spreading a malicious link because she had innocently accepted an app and given it privileges, but she says that's not the case. See the exchange: ...
4
votes
1answer
3k views

Yahoo Mail “Strongly Believed to Be Compromised”

When I went to log into my Yahoo Mail account, Yahoo stated that it strongly believed that my account had been compromised. I'm not sure how it happened. My guess is that Yahoo was hacked. I reset ...
3
votes
5answers
3k views

Is it safe to use Google Apps For Business: Spreadsheets to keep track of passwords?

Google Apps for Business is supposed to be secure enough for corporate data, as described in their FAQ: http://www.google.com/apps/intl/en/business/faq.html They say "We also undergo regular security ...
2
votes
0answers
668 views

How Yahoo Mail login page could store cookie on some different path on user's system?

Some time ago in Yahoo Mail's login page, there was an option to keep signature as text or image on user's system. So even after user logged out and come back again, can see the signature on the same ...
7
votes
3answers
4k views

Email is not secure, but what about Gmail using HTTPS, and if sending to myself?

I sometimes send myself some notes using Gmail, but I think if it is regular email, anybody on the Internet backbone or routing place can read your email, so it is not private... But Gmail uses ...
3
votes
1answer
982 views

How does application specific passwords with Googles two-factor auth work?

When you activate Googles two-factor authentication you will have to use some application specific passwords for applications that don't support two-factor authentication. How does the application ...
0
votes
0answers
160 views

Want name only to appear after signing into gmail account, not my email address

I have been the victim of identity theft and I don't want my email address to show after I have signed in GMail. I want only the name to appear, as I use laptop in public places. ...
4
votes
1answer
497 views

Why is Gmail using Yahoo! Mail certificates?

I just got an error in Firefox 4 when trying to log into Gmail: mail.google.com is using an invalid certificate This certificate is only valid for *.mail.yahoo.com mail.yahoo.com I use ...
2
votes
1answer
286 views

Security of a Yahoo! ID Beyond Passwords?

I would just like to ask if there's a way to secure my Yahoo! ID information beyond passwords? What I mean is for example, Google has implemented a 2-way verification wherein, after a Google account ...
5
votes
1answer
741 views

AIM via GMail chat — is it encrypted through SSL?

When using GChat in the GMail interface (and using ssl/https), you have the ability to log in to AIM as well. Is this encrypted like the email and gchat? Recently I've noticed there is an icon that ...
6
votes
1answer
563 views

Security of data handling by LastPass

How does LastPass keep your data secure? Can their employees see your data? I've always used offline ways for (password/sensitive data) storage, but lately I keep hearing good things about LastPass. ...
2
votes
2answers
2k views

Google Voice account left logged on and now someones using it to text random people. How do I force him to log out?

I've changed my password and tried using gmails sign off other sessions button with no success (they are still logged in and txting). Is there a way to force the end of that session?
1
vote
1answer
5k views

How to prevent certain Facebook friends from sending you Inbox messages

Is there a way to prevent a Facebook friend from sending you Inbox messages? I want to have a group called "Public Contact Only" that basically cannot have side-bar conversations with me. The idea ...
3
votes
3answers
132 views

E-mail address protection snippet

Is there any WebApp that allows you to publish an e-mail on the web using a script tag that protects it from robots? To be more clear: I want to publish a post on Blogspot that prints my e-mail on ...
0
votes
1answer
154 views

How much data can I store in a LastPass secure note?

Does anyone know if there are limits to the amount of data you can store in a LastPass secure note? I don't want to abuse the service but I also don't want to store a large note and then lose some of ...
4
votes
2answers
605 views

If Twitter apps use OAuth why would they ask for my password?

I signed up to TweetDeck, and following the steps it appears that I issued it an OAuth token. Then I installed it (0.35.1, Linux), signed in with my TweetDeck account and tried to add my Twitter ...
0
votes
1answer
313 views
1
vote
1answer
607 views

Why my friend was able to facebook sign in to other people account

Recently, my friend show me that although she is using her own username and password, once a while, she will get accidentally sign in into a stranger account. How can it be possible someone else ...
2
votes
1answer
138 views

security and google id

There are lots of apps (on my phone, on the web, etc.) that want to use my google id for authentication and to sync data -- news readers, contact info, notes to google docs, etc. In general, they ask ...
7
votes
5answers
251 views

Online antivirus webapp? [closed]

I was wondering whether there's any webapp that allows you to upload a suspicious file and have it diagnosed without having to install anything locally. I'm fed up with the performance impact most of ...
10
votes
3answers
228 views

OpenID Security

Couldn't any webapp that requires an OpenID login just secretly store my password and get access to my account(s)? If not, why not?
2
votes
4answers
423 views

Manage Passwords between multiple individuals

My co-workers and I frequently share passwords for many different online services. We are constantly emailing each other passwords and resetting them because of the difficulty in locating the old ...
4
votes
1answer
229 views

The dangers of webapps or websites maliciously accessing my clipboard?

Is there a danger of my clipboard data being harvested by a webapp or site that I visit? I would like to stay safe, but I want to keep Javascript enabled to give a better user experience.
2
votes
3answers
83 views

Can webapps track what I am typing before I send the data?

Is there any possibility that a webapp or website I am using could be tracking or recording what I type on the page (into no box) or into input or textboxes without me having submitted a form/clicked ...
0
votes
1answer
155 views

What can a web app do with my Twitter account if I use Twitter to login to that service?

When I use a Twitter account to login to another website, what does that authorize that website to do with my Twitter account? Does it enable them to send tweets from my account, or send direct ...
4
votes
1answer
660 views

How can I prevent clickjacking attacks on Facebook?

What could I say to a less technically-savvy friend about how to prevent attacks and viruses from Facebook attacks? I have seen many of my friends accounts posting spam due to their accounts being ...
8
votes
5answers
291 views

What to do when a service asks for your gmail password?

On many services, there is the request to connect to your gmail (or other webmail service) account in order to retrieve your contacts information (so to add them to your network in the new service). ...
5
votes
1answer
3k views

How to securely share your Amazon wish list with only certain people

On Amazon is there any way to share wish lists with only certain people? I can make a list public or private and I can share it, but can I make it public to only certain people can see it?
7
votes
6answers
136 views

Ensuring a web application is secure before utilizing it

How can one go about verifying the security and legitimacy of a web application before accessing it?
8
votes
4answers
105 views

What is OpenID, and what do you need to do to get one?

I'm not sure I understand what OpenID is ... but I see plenty of sites that ask you for it. What is it? and how do I create one?
0
votes
1answer
75 views

Validate that a web application has used a specific hash function for its certificate

What is the process for verifying the hash function that was used to create a web applications certificate? I ask because there apparently has been some issue with the MD5 hash function wherein ...
12
votes
3answers
300 views

Security of browser only password managers

There are password managers like KeePass which store all the passwords in a encrypted container on the local machine. I would have to copy this container over to other machines to be able to have my ...