Questions tagged [security]

A branch of computer technology known as information security as applied to computers and networks.

Filter by
Sorted by
Tagged with
72
votes
5answers
120k views

Facebook detects if you are logged in Gmail

Today I was playing with some web security, and there was a surprise when I decided to test the Forget the Password link on Facebook. I chose to send the password reset code to my Gmail address, and ...
51
votes
1answer
24k views

Why did I get a "There's been a change to your Google account" message and password reprompt?

I got a message on my mobile today: "There's been a change to your Google account" along with a prompt to re-enter my password. Could someone be using my account or is this a known issue?
45
votes
17answers
3k views

Is there a safe way to save passwords? [closed]

I have a lot of passwords from various websites. I never use the same one twice, but the problem is that I keep forgetting them so I want to save them somewhere. If I'm on the same computer I can save ...
43
votes
1answer
16k views

How does Google's new two-factor authentication work with IMAP, POP, etc.?

I'm very excited about Google's new two-factor authentication. Two-factor authentication means, in this case, that instead of just authenticating based on "something you know" (your password) you also ...
28
votes
11answers
2k views

How can I be certain that a URL-shortened link I click isn't going to send me to a dangerous or unwanted site?

When I see a shortened URL, I'm always hesitant to click it because I don't know where the link is going to go. (In the worst case, it may lead to an XSS exploit against a site that I'm logged in to) ...
27
votes
2answers
3k views

How, exactly, does a Facebook worm work?

I initially had assumed that a FB friend of mine was spreading a malicious link because she had innocently accepted an app and given it privileges, but she says that's not the case. See the exchange: ...
23
votes
4answers
17k views

How do I untrust a computer with Google two-factor authentication?

I use Google's two factor authentication to send my phone text messages with a string of 6 numbers every time I log into a computer that isn't mine. It has worked well so far until today. Today, I ...
23
votes
2answers
9k views

Can I generate backup codes for AWS multi-factor authentication (MFA)?

I'm using multi-factor authentication (MFA) to log into the Amazon AWS console. I'm using Google Authenticator on my Android phone to generate the one-time tokens. Other services sometimes provide ...
21
votes
4answers
35k views

How to remove Dropbox access from a computer you no longer have?

I have Dropbox installed on a few computers. One of which I no longer have access to. I no longer wish for that computer to be able to have access to my Dropbox account but I see no way to stop ...
20
votes
4answers
4k views

Does Facebook provide an SSL/TLS interface?

Does Facebook only support HTTP or does it have HTTPS also?
20
votes
1answer
82k views

How to re-add the security question in Gmail?

As we all might know that today is "Safe Internet Day". So Google is reminding us for the security check-up. I tried it. And I saw that I could remove my security question. I did it with the belief ...
19
votes
1answer
37k views

How do I protect my Google/Gmail account?

I have seen lots of horror stories of people who have lost control of their Google account, especially Gmail. How can I prevent the same thing from happening to me? What steps can I take to protect ...
18
votes
3answers
24k views

Is there a way to hide status updates from a friend on Facebook? (Boss Mode)

I have friends on Facebook that I like to see their status updates, but I don't necessarily want them to see my status updates. People like my boss, or my mum. Is there any way I can still be ...
18
votes
3answers
19k views

How can I get a warning if someone try to hack my Gmail account?

Is there a hidden feature in Gmail, that let you know each time someone has tried to login to your account with a wrong password? LogMeIn has this feature. Is there something like that in Google ...
16
votes
3answers
18k views

Can I use one-time passwords with Gmail?

I am about to leave for a trip. During this trip, I would have to connect to my Gmail account, and I'm totally unhappy to type my password using public, unsecured machines, potentially having ...
14
votes
2answers
3k views

Is it safe to use Gravatar? [closed]

I vaguely remember hearing that Gravatar had some security or privacy flaw. I think it was that someone could extract your e-mail address if you used a Gravatar. Is Gravatar safe? How do you know? ...
14
votes
3answers
63k views

Facebook last login

I think somebody logged into my Facebook account. Is there any way for me to find the last login IP address or the location from where this occurred?
13
votes
4answers
2k views

How can I encrypt emails sent through Gmail?

What's the best solution for encrypting emails sent from within Gmail. This could be a browser extension, a GreaseMonkey script, or something else. I realize that whoever is receiving the email will ...
13
votes
2answers
14k views

Is there a way of disabling Google's password recovery feature?

I have a YouTube channel which is under a different Google account to my normal one. I have a secure password with it, and an alternate e-mail address set up, but I thought I'd see how secure the ...
12
votes
4answers
2k views

Can I trust Dropbox and similar services? [closed]

Is there any verification that the encryption used can not be bypassed by the operator or should I actually use some encryption of my own like TrueCrypt? edit In the light of this complaint against ...
12
votes
5answers
6k views

How does YouTube know my Google identity without my explicitly connecting?

I've found that recently when I visit YouTube, I am automatically logged in with my Google/Gmail Account. I don't like this at all. I do not want my video browsing history tied up with my Google ...
12
votes
3answers
366 views

Security of browser only password managers [closed]

There are password managers like KeePass which store all the passwords in an encrypted container on the local machine. I would have to copy this container over to other machines to be able to have my ...
12
votes
3answers
1k views

In Gmail, is the "always display images from" option safe?

I know that it is possible for a spammer to generate an email that claims to be from a certain sender, regardless of whether it actually is. They could use that to send me mail purporting to be from ...
10
votes
3answers
266 views

OpenID Security

Couldn't any webapp that requires an OpenID login just secretly store my password and get access to my account(s)? If not, why not?
10
votes
1answer
4k views

Spam events appear in my Google Calendar

In my Google Calendar, I sometimes find spam events that I never created. In the screenshot below, you can see that they even managed to put my email address in the "Created by" field. They are ...
10
votes
3answers
6k views

Why should I use the Google Authenticator app instead of SMS?

I use Google's two-factor authentication, because I know that access to my email account is the skeleton key to all my other accounts. And... it's pretty annoying - I'm frequently swapping computers ...
10
votes
1answer
1k views

Does email from one Gmail account to another ever leave the Gmail system?

I ask because I connect to Gmail over HTTPS and if emails sent from one account to another (or the same account, just to back something up) don't actually leave Google then it's end-to-end email ...
10
votes
2answers
20k views

How can I get Gmail to support S/MIME?

I have Outlook configured to automatically sign and encrypt (when possible) outgoing messages. When I send mail to my Gmail (for testing, to see how this appears to addressees) I see that Gmail doesn'...
10
votes
1answer
45k views

How to disable Gmail's login verification "There's something unusual about how you're signing in."?

Sometimes, I get this message: There's something unusual about how you're signing in. To show that it's really you, complete the task below. This usually happens when attempting to log in from ...
10
votes
2answers
31k views

Does Google's "Suspicious sign in prevented " mean that my password is compromised?

I received Google's "Suspicious sign in prevented" email, and verified that it is legitimate, and this is definitely not my login attempt. I immediately changed my Google password, however, the email ...
10
votes
1answer
210 views

What happens when I browse items in my Lastpass vault on Chrome while running other extensions that can "Access all your data on all websites"?

The way I use Lastpass with Chrome, I often open and browse my vault items, including the passwords. I just noticed with horror that I have several other extensions enabled that have permission to "...
9
votes
5answers
815 views

What to do when a service asks for your Gmail password?

On many services, there is the request to connect to your Gmail (or other webmail service) account in order to retrieve your contacts information (so to add them to your network in the new service). ...
9
votes
1answer
11k views

How does one check what websites a person logs into using their Google account?

When you create Stack Exchange accounts and you want them tied to a Google account, when you log into your Google account you get taken to a separate page where it asks for permission and whether you ...
9
votes
1answer
2k views

Limit Google "trusted computer" auth cookies to 30 days

It looks like Google's two-factor authentication has switched to using long-expiration cookies for remembering "trusted" user agents, instead of the 30 day expiration previously used. This seems ...
9
votes
1answer
1k views

Trello backend database security

I'm trying to find out a bit more about the data security of Trello as I'm trying to introduce the use Trello at the company I work for. The company is ISO 27001 accredited and is therefore hesitant ...
8
votes
6answers
170 views

Ensuring a web application is secure before utilizing it

How can one go about verifying the security and legitimacy of a web application before accessing it?
8
votes
4answers
23k views

Is there a way to get Google account to sign out after specific time has passed?

Is it possible to set a timeout for my Google account to sign out my Google session on any device? I'm worried about not signing out of all my sessions, especially at the work desktop.
8
votes
3answers
6k views

Email is not secure, but what about Gmail using HTTPS, and if sending to myself?

I sometimes send myself some notes using Gmail, but I think if it is regular email anybody on the Internet backbone or routing place can read your email, so it is not private. But Gmail uses HTTPS. ...
8
votes
1answer
22k views

Reusing a phone number in two (or more) Facebook accounts - Is it allowed?

I have two Facebook accounts for some personal reasons. I have my phone number registered to one of them. I want to register my phone number to also the other one for security reason, but I'm worried ...
8
votes
3answers
6k views

How worried should I be that my gmail is showing IMAP access from an Amazon EC2 instance?

When I click that link at the bottom of my gmail screen where it says "Last account activity: 0 minutes ago at IP 50.19.49.49 Details". I click the link and sure enough, it shows accesses from my own ...
8
votes
2answers
11k views

How to securely share your Amazon wish list with only certain people

On Amazon is there any way to share wish lists with only certain people? I can make a list public or private and I can share it, but can I make it public to only certain people can see it?
8
votes
2answers
13k views

How to disable SMS in Google's 2-step verification?

Everytime I log in on a new device or browser I get the SMS text message with the 2nd step digits. It's pretty annoying. I already have the Google Authenticator to calculate my digits and it works ...
8
votes
2answers
38k views

How to turn off the security of my gmail account completely? I mean, completely

I want to turn off the security mechanism of gmail for my account so that it never ever asks me "you're logging from a strange place. We'll send an sms to your phone or call it and you're to enter the ...
8
votes
4answers
36k views

How did my email get hacked? What to do next?

I use Hotmail. My password was strong (upper/lower case letters, digits, and special characters. No dictionary words. It was only 8 characters, maybe that was the problem? I only use this password ...
8
votes
1answer
2k views

What to do if someone keeps adding me to a Trello board without my knowledge?

I am thinking about creating a team project, but unfortunately my team members can't visit me often as they are far away from my home. So I'll be needing a secure, free, team management software, and ...
8
votes
0answers
35k views

How to disable "Verify it's you" on Gmail, without phone? [duplicate]

Sometimes, when I try to access my Gmail account from some other computer or country, an annoying security feature prevents me from doing so. I get the following message: Verify it's you There's ...
7
votes
6answers
3k views

Can any web applications tell if I have Facebook open in a different tab or window?

I have Facebook open in one tab, and I open YouTube in another. YouTube asks me if I want to sign in with my Facebook account. Can YouTube tell if I have Facebook open in a different tab or window?
7
votes
3answers
28k views

How to change my Uber password or delete the account?

Uber was affected by the Cloudbleed security bug, so everyone should change their passwords or delete their accounts. But where's the "change password" feature on their web site? It's not on ...
7
votes
2answers
545 views

How to manage repeated notifications of attempts to hack into my account

Someone is repeatedly trying to gain access into my account. I have received 20 to 30 notifications of failed attempts of logging in. How do I stop them from continuing to try? They must have a ...
7
votes
1answer
111 views

How can I tell which programs have access to my Dropbox?

I remember giving some program access to my Dropbox account, but I don't remember which program. How can I see which programs have read/write power on my account?

1
2 3 4 5
7