Hot answers tagged security
I suggest the use of Keepassx, an cross-platform password manager, and Dropbox. Create your password database with Keepassx and then synchronize it across all of your computers using Dropbox. I've used this approach for about a year and a half with no issues. (I should also mention that Dropbox keeps older revisions of files so even if your database is ...
What you need to do is generate an application-specific password for each client you want to authenticate to your Google account. Then enter the application-specific password instead of your password or password + verification code. You can generate these application-specific passwords by going to this page (use your domain name instead of example.com): ...
Yes, just add an "s" to the http in the address bar - so to get to Gmail over SSL, type in: https://www.gmail.com You can also change a setting in Gmail to require your account to use SSL: We've recently made the 'Always use https' setting the default behavior in Gmail (the default used to be http). Here's some background: If you sign in to Gmail via a ...
Whilst it is possible to unlink other computers through the web interface, as slhck noted, this leaves all of your files where you don't want them. Depending on the sensitivity of your files (and how much work you want for yourself) you can: Back up all Dropbox files locally Delete any sensitive files from your Dropbox Wait for the sync to remove these ...
I've never looked into its security, but LastPass (http://lastpass.com/) is designed to do just that
The OAuth tokens for Google are at https://accounts.google.com/b/0/IssuedAuthSubTokens (it's different from Linked Accounts). When I tried it, Facebook created a popup with a OAuth prompt the first time and only briefly opened a blank popup on subsequent attempts. De-authorizing Facebook makes the prompts appear again.
Go to https://www.dropbox.com/account#security and here under My devices, unlink the machines you no longer own: Note that the computer, according to Dropbox: will no longer stay in sync, but it will keep a copy of any file it currently has.
"No" is the correct answer--you should never give away your password. Gmail now supports OAuth, an industry standard protocol, enabling you to give your consent for specific access to your mail without sharing your password.
You can change these under your privacy settings. On your Privacy Settings page, select "Custom" as your plan and then "Customize Settings." Click "Posts by me" under "Things I share" and select "Customize." From this screen you will be able to blacklist specific people from viewing your status updates and posts.
Gmail now uses https by default. Default https access for Gmail We are currently rolling out default https for everyone. If you've previously set your own https preference from Gmail Settings, nothing will change for your account. If you trust the security of your network and don't want default https turned on for performance reasons, you can turn ...
Google does not have this feature currently. Gmail does log successful access to your account though, so you would see if anybody managed to actually break in. At the bottom of your gmail page it says "Last account activity: [x] minutes ago from [ip]". If you click the details link, it will show you a list of the most recent access, the location, and the IP ...
If your files are of a very sensitive nature then you should already be taking measures to secure them regardless of any promises or the good reputation of the service. If however these files are of 'normal' sensitivity then the risk of bad press will usually be enough to guarantee they're good behaviour, after all your files are probably worth less to ...
Try 'Shields Up' by GRC
They can't, as you only send your password to your OpenID provider. However, there is a risk that a site could send you to a fake provider that collects your password, so it is important to double-check that the URI you're on is correct before entering your password.
Google offers quite a few tools to help you keep unwanted persons out of your account, but some of them only work if you activate and use them. Keep your Account Recovery Options up to date Mobile telephone number: If you forget your password, or if there is unusual activity on your account, Google can send you a security code via SMS for you to prove you ...
You could use a service like Unshorten Services supported: TinyURL.com, SnipURL.com, NotLong.com, Metamark.net, zURL.ws and many others.
You can configure Facebook to always ask you to register the device whenever you log in to a new location. It then shows a log of where you have recently logged in from. Note that when you log in it asks you to choose the location name yourself, so it's possible that an attacker could get a lucky guess as to what you would set it to yourself, but this can ...
Unfounded. You need to be authenticated to actually view any emails. Just to show you how sure I am, here is a link to one of my emails. Unless you are authenticated as the user who "owns" that email, it will just redirect you to the inbox (tested with another account).
VirusTotal VirusTotal.com is a website that provides free file checking. It uses up to 41 different antivirus products. Files can be sent either through the website or via email. The variety of products used by the website allows a user to check for viruses that the user's own antivirus solution may have missed, or to verify against false positives. The ...
I'm the Gmail Community Manager. I spoke with our team about what you described. What you are seeing is a bug in our system related to the use of IPv6. Very specific types of logins to do with mobile phone syncing that come in over IPv6 are not currently treated correctly. We're in the process of fixing this issue and I apologize for the inconvenience.
You can generate one time codes that can be used as part of two-step verification that doesn't require your phone. You can print out a bunch before you go and stick them in your wallet or luggage to use as needed. Other than that, there are a number of guides with suggestions for trying to stay secure. Make sure you are using HTTPS (default now) and if you ...
Clear the browser's cookies (and perhaps cache/history). 'Trust this computer' option doesn’t work For computers you trust, Google recommends you select the "Trust this computer" option when you are asked for a verification code. When you check this box, you won’t have to enter a code every time you sign in to your account from that computer. ...
According to Google Support: Removing trusted computers from your list You can remove computers from your set of trusted computers at any time. To do so, sign in to your account and go to your 2-step verification settings page. Under the “Advanced” section, you’ll have the choice to remove the computer you’re using at the time or all other ...
No, individual tabs and windows have no way of knowing which other tabs / windows are open.
Yes - have a look at https://ssl.facebook.com/, however I do not think it is intended for use. All links from this site will redirect you back to non-SSL. I suppose it's grand if you want to check your live feed securely. As a note: Going to https://www.facebook.com will throw a certificate error, so rather use the above link for access.
Notice: This answer is now out of date. This feature has become publicly available, however it is turned off by default. To enable it, navigate to Account Settings > Account Security and check the HTTPS box.
The whole point of open ID is that it takes you to a safe website that asks for your password (your open ID provider), which then sends only the information you allow it to the site requesting the information (e.g. email address, name, etc.). For a detailed explanation of how it works, check out Wikipedia's article on what happens during the login process.
Speaking personally I've used Gravatar since signing up with Stack Overflow nearly 2 years ago and haven't noticed any problems. I used a unique e-mail address which is only used for Stack Exchange sites which means that if it was compromised they wouldn't get very far, and if e-mails started turning up from strange sources using that address I'd know it ...
Only top voted, non community-wiki answers of a minimum length are eligible