A branch of computer technology known as information security as applied to computers and networks.
60
votes
5answers
117k views
Facebook detects if you are logged in Gmail
Today I was playing with some web security, and there was a surprise when I decided to test the Forget the Password link on Facebook.
I chose to send the password reset code to my Gmail address, and ...
38
votes
2answers
6k views
Any risk in replying to a message on Facebook?
I got a message from someone I've never met before, or even heard of, from Nigeria. He wants to learn to write Java code and is asking me if I can recommend any websites or e-books to help him. He ...
38
votes
17answers
2k views
Is there a safe way to save passwords?
I have a lot of passwords from various websites. I never use the same one twice, but the problem is that I keep forgetting them so I want to save them somewhere. If I'm on the same computer I can save ...
36
votes
1answer
7k views
How does Google's new two-factor authentication work with IMAP, POP, etc.?
I'm very excited about Google's new two-factor authentication. Two-factor authentication means, in this case, that instead of just authenticating based on "something you know" (your password) you also ...
24
votes
2answers
1k views
How, exactly, does a Facebook worm work?
I initially had assumed that a FB friend of mine was spreading a malicious link because she had innocently accepted an app and given it privileges, but she says that's not the case. See the exchange:
...
19
votes
4answers
495 views
17
votes
3answers
917 views
How to remove Dropbox access from a computer you no longer have?
I have Dropbox installed on a few computers. One of which I no longer have access to.
I no longer wish for that computer to be able to have access to my Dropbox account but I see no way to stop ...
17
votes
9answers
352 views
How can I be certain that a URL-shortened link I click isn't going to send me to a dangerous or unwanted site?
When I see a shortened URL, I'm always hesitant to click it because I don't know where the link is going to go. (In the worst case, it may lead to an XSS exploit against a site that I'm logged in to)
...
16
votes
3answers
3k views
16
votes
2answers
6k views
How can I get a warning if someone try to hack my Gmail account?
Is there a hidden feature in Gmail, that let you know each time someone has tried to login to your account with a wrong password?
LogMeIn has this feature. Is there something like that in Google ...
15
votes
4answers
1k views
Can I trust dropbox and similar services?
Is there any verification that the encryption used can not be bypassed by the operator? Or should I actually use some encryption of my own like truecrypt?
edit In the light of this complaint ...
15
votes
3answers
6k views
Is there a way to hide status updates from a friend on Facebook? (Boss Mode)
I have friends on Facebook that I like to see their status updates, but I don't necessarily want them to see my status updates. People like my boss, or my mum.
Is there any way I can still be ...
12
votes
4answers
1k views
How can I encrypt emails sent through Gmail?
What's the best solution for encrypting emails sent from within Gmail. This could be a browser extension, a GreaseMonkey script, or something else.
I realize that whoever is receiving the email will ...
11
votes
3answers
33k views
Facebook last login
I think somebody logged into my Facebook account. Is there any way for me to find the last login IP address or the location from where this occurred?
11
votes
3answers
853 views
In Gmail, is the “always display images from” option safe?
I know that it is possible for a spammer to generate an email that claims to be from a certain sender, regardless of whether it actually is. They could use that to send me mail purporting to be from ...
10
votes
3answers
216 views
OpenID Security
Couldn't any webapp that requires an OpenID login just secretly store my password and get access to my account(s)?
If not, why not?
9
votes
3answers
249 views
Security of browser only password managers
There are password managers like KeePass which store all the passwords in a encrypted container on the local machine. I would have to copy this container over to other machines to be able to have my ...
8
votes
5answers
248 views
What to do when a service asks for your gmail password?
On many services, there is the request to connect to your gmail (or other webmail service) account in order to retrieve your contacts information (so to add them to your network in the new service).
...
8
votes
5answers
230 views
Online antivirus webapp?
I was wondering whether there's any webapp that allows you to upload a suspicious file and have it diagnosed without having to install anything locally.
I'm fed up with the performance impact most of ...
8
votes
10answers
1k views
Client-side encrypted online backup service
I'm very interested in using an online backup service to keep my data safe from malfunctioning hardware. And I am, of course, willing to pay for the service.
However, I don't want my data to be ...
8
votes
4answers
98 views
What is OpenID, and what do you need to do to get one?
I'm not sure I understand what OpenID is ... but I see plenty of sites that ask you for it. What is it? and how do I create one?
8
votes
1answer
466 views
Does email from one Gmail account to another ever leave the Gmail system?
I ask because I connect to Gmail over HTTPS and if emails sent from one account to another (or the same account, just to back something up) don't actually leave Google then it's end-to-end email ...
8
votes
3answers
3k views
How worried should I be that my gmail is showing IMAP access from an Amazon EC2 instance?
When I click that link at the bottom of my gmail screen where it says "Last account activity: 0 minutes ago at IP 50.19.49.49 Details". I click the link and sure enough, it shows accesses from my own ...
8
votes
4answers
25k views
How did my email get hacked? What to do next?
I use Hotmail. My password was strong (upper/lower case letters, digits, and special characters. No dictionary words. It was only 8 characters, maybe that was the problem?
I only use this password ...
8
votes
1answer
461 views
Trello backend database security
I'm trying to find out a bit more about the data security of Trello as I'm trying to introduce the use Trello at the company I work for.
The company is ISO 27001 accredited and is therefore hesitant ...
7
votes
3answers
565 views
Accessing my Google Reader account without using my main Google Account password
Is there anyway I can access a Google Reader account without entering my main password that could be used to steal access to my other service accounts, like Gmail?
I like to spend my free time ...
7
votes
6answers
117 views
Ensuring a web application is secure before utilizing it
How can one go about verifying the security and legitimacy of a web application before accessing it?
7
votes
5answers
6k views
Yahoo Mail Does Not Have HTTPS
Why is Yahoo Mail behind in security? They don't support HTTPS yet. Gmail and many others do. I'm shocked that Yahoo still doesn't have HTTPS. Why is this? What is the logic behind not supporting ...
7
votes
2answers
93 views
Website to check my machine exposure to the internet?
My ISP just sent me over a box and now I am online. I am afraid of beeing exposed directly to the internet. Is there any website or web app which can check to which level my machine is accessible from ...
7
votes
1answer
57 views
How can I tell which programs have access to my Dropbox?
I remember giving some program access to my dropbox account, but I don't remember which program.
How can I see which programs have read/write power on my account?
7
votes
2answers
1k views
Is it safe to use Gravatar?
I vaguely remember hearing that Gravatar had some security or privacy flaw. I think it was that someone could extract your e-mail address if you used a Gravatar. Is Gravatar safe? How do you know?
...
7
votes
3answers
2k views
Has Facebook disabled Login Approvals?
I have recently discovered that login approvals on Facebook is no longer available:
Compare this with @gravity's screenshot from this answer:
Is there anything special that I'll have to ask my ...
7
votes
1answer
381 views
Is this Yahoo mail mobile form secure?
Using my android device I went to "mail.yahoo.com" on my web browser. It forwarded me to this page: http://mlogin.yahoo.com/w/login/user ...
The page prompts me to enter my username and password, but ...
7
votes
0answers
2k views
Delete old Facebook wall posts [duplicate]
Possible Duplicate:
Script or App to remove own Facebook status updates
Related:
How to delete all Facebook posts/comments older than 1 year?
How can I delete all Facebook status ...
6
votes
6answers
785 views
Can any web applications tell if I have Facebook open in a different tab or window?
I have Facebook open in one tab, and I open YouTube in another. YouTube asks me if I want to sign in with my Facebook account. Can YouTube tell if I have Facebook open in a different tab or window?
6
votes
2answers
806 views
Gmail account accessed from reserved IP address
Gmail tells me that it was recently accessed by IP address 242.162.62.141, and that it blocked the suspicious access, and I should change my password immediately. But 242.162.62.141 is a reserved IP ...
6
votes
2answers
327 views
Strange address appearing in my Gmail's last account activity
I was checking the last account activity in my Gmail, found the following line:
Access type: Browser
Location:
2001:6b0:1:1fe0:22cf:30ef:fe7c:4000 (A
number in this format)
Date: 01 ...
6
votes
2answers
434 views
Can I use one-time passwords with Gmail?
I am about to leave for a trip. During this trip, I would have to connect to my Gmail account, and I'm totally unhappy to type my password using public, unsecured machines, potentially having ...
6
votes
3answers
2k views
Email is not secure, but what about Gmail using HTTPS, and if sending to myself?
I sometimes send myself some notes using Gmail, but I think if it is regular email, anybody on the Internet backbone or routing place can read your email, so it is not private...
But Gmail uses ...
6
votes
1answer
2k views
Reusing a phone number in two (or more) Facebook accounts - Is it allowed?
I have two Facebook accounts for some personal reasons. I have my phone number registered to one of them. I want to register my phone number to also the other one for security reason, but I'm worried ...
6
votes
3answers
174 views
Is this a Google+ privacy risk? Should we be concerned?
I feel like there's no real need for this sort of information to be available to everyone:
http://www.gstatic.com/s2/sitemaps/sitemap-7000.txt
Since Google hosts gstatic.com, I feel like they should ...
6
votes
2answers
4k views
How can I get Gmail to support S/MIME?
I have Outlook configured to automatically sign and encrypt (when possible) outgoing messages. When I send mail to my Gmail (for testing, to see how this appears to addressees) I see that Gmail ...
6
votes
2answers
1k views
What does using 'Login with Facebook' or 'Facebook Connect' to login to another site allow the site to do?
When I use a Facebook account to login to another website, what does 'logging in with Facebook' allow that website do with my Facebook account?
Can they post messages on my wall or news feed or ...
5
votes
6answers
7k views
How secure is sending an email from GMail?
When you send an email from GMail to someone what measures do they have in place to make sure that my email is not read by man in the middle attacks, or other servers that the email is routed through. ...
5
votes
3answers
156 views
How to I safely log on to gmail from an un-trusted PC?
I have just got back from holiday, I was not willing to check my email form the hotel’s “internet café” PC, as I could not think of a way of eliminate the risk that it had a “password logging” worm, ...
5
votes
2answers
2k views
Should I give Google my phone number?
Gmail is bothering me lately with this message:
Hey, this is important: We don't have a password recovery email address or phone number for your account. If you lose access, we may not be able to ...
5
votes
1answer
923 views
How to securely share your Amazon wish list with only certain people
On Amazon is there any way to share wish lists with only certain people? I can make a list public or private and I can share it, but can I make it public to only certain people can see it?
5
votes
1answer
8k views
Can I see when and where my Facebook account was accessed?
Does Facebook keep records of when I, or someone else, accesses or logs into my account? I want to be able to see the access log from my homepage.
My computer was recently stolen and my Facebook was ...
5
votes
1answer
1k views
Is there a way of disabling Google's password recovery feature?
I have a YouTube channel and it's running under a different Google account to my normal one. I have a secure password with it and alternate e-mail address set up but I thought I'd see how secure the ...
5
votes
1answer
927 views
How can I verify my PayPal account without giving them direct access to my bank account?
Most sites where you can buy products with PayPal require your account to be verified. It appears that the only way to verify your account is by associating it with your bank account. I prefer not to ...
