A branch of computer technology known as information security as applied to computers and networks.

learn more… | top users | synonyms

64
votes
5answers
119k views

Facebook detects if you are logged in Gmail

Today I was playing with some web security, and there was a surprise when I decided to test the Forget the Password link on Facebook. I chose to send the password reset code to my Gmail address, and ...
42
votes
17answers
3k views

Is there a safe way to save passwords?

I have a lot of passwords from various websites. I never use the same one twice, but the problem is that I keep forgetting them so I want to save them somewhere. If I'm on the same computer I can save ...
41
votes
1answer
9k views

How does Google's new two-factor authentication work with IMAP, POP, etc.?

I'm very excited about Google's new two-factor authentication. Two-factor authentication means, in this case, that instead of just authenticating based on "something you know" (your password) you also ...
38
votes
2answers
6k views

Any risk in replying to a message on Facebook?

I got a message from someone I've never met before, or even heard of, from Nigeria. He wants to learn to write Java code and is asking me if I can recommend any websites or e-books to help him. He ...
24
votes
2answers
1k views

How, exactly, does a Facebook worm work?

I initially had assumed that a FB friend of mine was spreading a malicious link because she had innocently accepted an app and given it privileges, but she says that's not the case. See the exchange: ...
20
votes
4answers
766 views

Can I access GMail through SSL?

Is there a way to access GMail securely over SSL?
20
votes
4answers
16k views

How to remove Dropbox access from a computer you no longer have?

I have Dropbox installed on a few computers. One of which I no longer have access to. I no longer wish for that computer to be able to have access to my Dropbox account but I see no way to stop ...
20
votes
8answers
436 views

How can I be certain that a URL-shortened link I click isn't going to send me to a dangerous or unwanted site?

When I see a shortened URL, I'm always hesitant to click it because I don't know where the link is going to go. (In the worst case, it may lead to an XSS exploit against a site that I'm logged in to) ...
18
votes
3answers
3k views

Does Facebook provide an SSL interface?

Does Facebook only support HTTP or does it have HTTPS also?
16
votes
3answers
13k views

Is there a way to hide status updates from a friend on Facebook? (Boss Mode)

I have friends on Facebook that I like to see their status updates, but I don't necessarily want them to see my status updates. People like my boss, or my mum. Is there any way I can still be ...
16
votes
2answers
11k views

How can I get a warning if someone try to hack my Gmail account?

Is there a hidden feature in Gmail, that let you know each time someone has tried to login to your account with a wrong password? LogMeIn has this feature. Is there something like that in Google ...
15
votes
4answers
1k views

Can I trust dropbox and similar services?

Is there any verification that the encryption used can not be bypassed by the operator? Or should I actually use some encryption of my own like truecrypt? edit In the light of this complaint ...
14
votes
3answers
50k views

Facebook last login

I think somebody logged into my Facebook account. Is there any way for me to find the last login IP address or the location from where this occurred?
13
votes
3answers
4k views

How do I untrust a computer with Google two-factor authentication?

I use Google's two factor authentication to send my phone text messages with a string of 6 numbers every time I log into a computer that isn't mine. It has worked well so far until today. Today, I ...
13
votes
4answers
2k views

How can I encrypt emails sent through Gmail?

What's the best solution for encrypting emails sent from within Gmail. This could be a browser extension, a GreaseMonkey script, or something else. I realize that whoever is receiving the email will ...
12
votes
3answers
276 views

Security of browser only password managers

There are password managers like KeePass which store all the passwords in a encrypted container on the local machine. I would have to copy this container over to other machines to be able to have my ...
11
votes
3answers
1k views

Can I use one-time passwords with Gmail?

I am about to leave for a trip. During this trip, I would have to connect to my Gmail account, and I'm totally unhappy to type my password using public, unsecured machines, potentially having ...
11
votes
3answers
1k views

In Gmail, is the “always display images from” option safe?

I know that it is possible for a spammer to generate an email that claims to be from a certain sender, regardless of whether it actually is. They could use that to send me mail purporting to be from ...
10
votes
3answers
223 views

OpenID Security

Couldn't any webapp that requires an OpenID login just secretly store my password and get access to my account(s)? If not, why not?
9
votes
2answers
2k views

Is it safe to use Gravatar?

I vaguely remember hearing that Gravatar had some security or privacy flaw. I think it was that someone could extract your e-mail address if you used a Gravatar. Is Gravatar safe? How do you know? ...
9
votes
1answer
2k views

How do I protect my Google/Gmail account?

I have seen lots of horror stories of people who have lost control of their Google account, especially Gmail. How can I prevent the same thing from happening to me? What steps can I take to protect ...
9
votes
1answer
718 views

Does email from one Gmail account to another ever leave the Gmail system?

I ask because I connect to Gmail over HTTPS and if emails sent from one account to another (or the same account, just to back something up) don't actually leave Google then it's end-to-end email ...
9
votes
1answer
102 views

What happens when I browse items in my Lastpass vault on Chrome while running other extensions that can “Access all your data on all websites”?

The way I use Lastpass with Chrome, I often open and browse my vault items, including the passwords. I just noticed with horror that I have several other extensions enabled that have permission to ...
8
votes
5answers
264 views

What to do when a service asks for your gmail password?

On many services, there is the request to connect to your gmail (or other webmail service) account in order to retrieve your contacts information (so to add them to your network in the new service). ...
8
votes
5answers
241 views

Online antivirus webapp?

I was wondering whether there's any webapp that allows you to upload a suspicious file and have it diagnosed without having to install anything locally. I'm fed up with the performance impact most of ...
8
votes
10answers
1k views

Client-side encrypted online backup service

I'm very interested in using an online backup service to keep my data safe from malfunctioning hardware. And I am, of course, willing to pay for the service. However, I don't want my data to be ...
8
votes
4answers
103 views

What is OpenID, and what do you need to do to get one?

I'm not sure I understand what OpenID is ... but I see plenty of sites that ask you for it. What is it? and how do I create one?
8
votes
3answers
4k views

How worried should I be that my gmail is showing IMAP access from an Amazon EC2 instance?

When I click that link at the bottom of my gmail screen where it says "Last account activity: 0 minutes ago at IP 50.19.49.49 Details". I click the link and sure enough, it shows accesses from my own ...
8
votes
4answers
32k views

How did my email get hacked? What to do next?

I use Hotmail. My password was strong (upper/lower case letters, digits, and special characters. No dictionary words. It was only 8 characters, maybe that was the problem? I only use this password ...
8
votes
1answer
688 views

Trello backend database security

I'm trying to find out a bit more about the data security of Trello as I'm trying to introduce the use Trello at the company I work for. The company is ISO 27001 accredited and is therefore hesitant ...
7
votes
3answers
698 views

Accessing my Google Reader account without using my main Google Account password

Is there anyway I can access a Google Reader account without entering my main password that could be used to steal access to my other service accounts, like Gmail? I like to spend my free time ...
7
votes
6answers
124 views

Ensuring a web application is secure before utilizing it

How can one go about verifying the security and legitimacy of a web application before accessing it?
7
votes
5answers
7k views

Yahoo Mail Does Not Have HTTPS

Why is Yahoo Mail behind in security? They don't support HTTPS yet. Gmail and many others do. I'm shocked that Yahoo still doesn't have HTTPS. Why is this? What is the logic behind not supporting ...
7
votes
2answers
108 views

Website to check my machine exposure to the internet?

My ISP just sent me over a box and now I am online. I am afraid of beeing exposed directly to the internet. Is there any website or web app which can check to which level my machine is accessible from ...
7
votes
1answer
76 views

How can I tell which programs have access to my Dropbox?

I remember giving some program access to my dropbox account, but I don't remember which program. How can I see which programs have read/write power on my account?
7
votes
1answer
4k views

Reusing a phone number in two (or more) Facebook accounts - Is it allowed?

I have two Facebook accounts for some personal reasons. I have my phone number registered to one of them. I want to register my phone number to also the other one for security reason, but I'm worried ...
7
votes
4answers
3k views

Has Facebook disabled Login Approvals?

I have recently discovered that login approvals on Facebook is no longer available: Compare this with @gravity's screenshot from this answer: Is there anything special that I'll have to ask my ...
7
votes
1answer
550 views

Is this Yahoo mail mobile form secure?

Using my android device I went to "mail.yahoo.com" on my web browser. It forwarded me to this page: http://mlogin.yahoo.com/w/login/user ... The page prompts me to enter my username and password, but ...
7
votes
2answers
2k views

What does using 'Login with Facebook' or 'Facebook Connect' to login to another site allow the site to do?

When I use a Facebook account to login to another website, what does 'logging in with Facebook' allow that website do with my Facebook account? Can they post messages on my wall or news feed or ...
7
votes
0answers
2k views

Delete old Facebook wall posts [duplicate]

Possible Duplicate: Script or App to remove own Facebook status updates Related: How to delete all Facebook posts/comments older than 1 year? How can I delete all Facebook status ...
6
votes
6answers
10k views

How secure is sending an email from GMail?

When you send an email from GMail to someone what measures do they have in place to make sure that my email is not read by man in the middle attacks, or other servers that the email is routed through. ...
6
votes
6answers
1k views

Can any web applications tell if I have Facebook open in a different tab or window?

I have Facebook open in one tab, and I open YouTube in another. YouTube asks me if I want to sign in with my Facebook account. Can YouTube tell if I have Facebook open in a different tab or window?
6
votes
2answers
1k views

Gmail account accessed from reserved IP address

Gmail tells me that it was recently accessed by IP address 242.162.62.141, and that it blocked the suspicious access, and I should change my password immediately. But 242.162.62.141 is a reserved IP ...
6
votes
4answers
968 views

How is my password sent across when I check gmails/access bank site?

What encryption is used when my password is sent across in gmails/when I do online banking? RSA? DSA? Public-private key encryption?. In key encryption, which entity is assigned a public/private key? ...
6
votes
2answers
570 views

Strange address appearing in my Gmail's last account activity

I was checking the last account activity in my Gmail, found the following line: Access type: Browser Location: 2001:6b0:1:1fe0:22cf:30ef:fe7c:4000 (A number in this format) Date: 01 ...
6
votes
3answers
3k views

Email is not secure, but what about Gmail using HTTPS, and if sending to myself?

I sometimes send myself some notes using Gmail, but I think if it is regular email, anybody on the Internet backbone or routing place can read your email, so it is not private... But Gmail uses ...
6
votes
1answer
1k views

Spam events appear in my Google Calendar

In my Google Calendar, I sometimes find spam events that I never created. In the screenshot below, you can see that they even managed to put my email address in the "Created by" field. They are ...
6
votes
3answers
192 views

Is this a Google+ privacy risk? Should we be concerned?

I feel like there's no real need for this sort of information to be available to everyone: http://www.gstatic.com/s2/sitemaps/sitemap-7000.txt Since Google hosts gstatic.com, I feel like they should ...
6
votes
2answers
9k views

How can I get Gmail to support S/MIME?

I have Outlook configured to automatically sign and encrypt (when possible) outgoing messages. When I send mail to my Gmail (for testing, to see how this appears to addressees) I see that Gmail ...
6
votes
1answer
3k views

Is there a way of disabling Google's password recovery feature?

I have a YouTube channel and it's running under a different Google account to my normal one. I have a secure password with it and alternate e-mail address set up but I thought I'd see how secure the ...