IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [google-apps]

45 questions
296
votes
6 answers

How does Google know where I am?

Whenever I open the Google Maps app on my Android mobile phone, Google always seems to know my location, and it is very accurate (usually it places me on the map even in the correct room). Also, this happens even if both WiFi adapter and GPS are…
MNLR
  • 2,247
  • 3
  • 10
  • 10
40
votes
8 answers

Is it safe to store passwords on Google drive?

In the past I have seen having a Google drive document and have FTP username/passwords there. Is storing passwords in Google drive a good practice?
secuaz
  • 519
  • 1
  • 4
  • 6
22
votes
4 answers

What is the point of restricting a google API key by HTTP referer?

If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct? So is it worthwhile to use this restriction?
ryan
  • 323
  • 1
  • 2
  • 7
13
votes
3 answers

Can IT see my Google Drive traffic?

I'm on my phone but on the work network. What could they see about my Google Drive traffic? Could they see folder and file names? Could they see documents and photos? It's encrypted, so would they just see generic Google Drive traffic or can they…
Bill Z
  • 163
  • 1
  • 1
  • 4
9
votes
4 answers

Why would distributing via Google Play be more secure than distributing APKs?

Why do so many Android developers use Google Play to distribute apps instead of (or in addition to) simply putting the APK on their secure website along with a checksum or signature of it?
Geremia
  • 1,636
  • 3
  • 19
  • 33
8
votes
2 answers

Are all Google app-passwords equal? What is their attack scope?

Upon setting up app-passwords, Google sends a mail: This app password will allow you to access your Google account from a device or application that can only be configured with a username and password, rather than a username, password and a…
Pacerier
  • 3,253
  • 6
  • 34
  • 61
6
votes
2 answers

Can Google Docs be used to “sanitize” a Word or Excel document?

Sometimes I have to download some Word or Excel documents from uncredible sites. I need not only to read but also to edit them. I heard that the Microsoft Office suite is a very popular attack vector. Although I patch my Windows and Office regularly…
user129187
5
votes
3 answers

Distribute Program with Sheets API Credentials

I am trying to write a program that uses the Google Sheets API to read spreadsheets and operate on the data. My program contains a credentials.json file which I obtained from the Java Quickstart page (also obtainable from the Google Developers…
Cardinal System
  • 51
  • 6
5
votes
0 answers

Is there a good way to store OAuth2 tokens for a native application?

Currently I have a native PC application that builds and uploads a configuration to an embedded Linux device (i.e. the client). This device connects to Google Calendar via their OAuth2 API. The configuration requires: A resource owner to login to…
Mogarrr
  • 151
  • 2
3
votes
0 answers

Storing user's private files on S3 and securing access using signed URLs - good idea?

I will be storing private user's files on S3. The files will be PDFs, possibly containing private financial information. I'm considering letting users directly access the files on S3, without proxying all the traffic through my app server. How…
ssobczak
  • 131
  • 1
3
votes
2 answers

Can Google Policy Profile remotely erase all data on the device?

I'd like to configure my company's Google e-mail on my iPhone, however when enabling e-mail profile in Inbox, Gmail, Mail or any other app, the following Device Policy Alert is shown: To use Google apps on this device as ..., your organisation…
kenorb
  • 799
  • 4
  • 8
  • 27
3
votes
1 answer

Shouldn't user content return 403 forbidden?

If I copy the URL for a shared or private image from sites like fbcdn.net or googleusercontent.com and open it in a logged out session, the images appear. Shouln't this return a 403 forbidden error (like Dropbox) instead of giving a malicious user…
simplegamer
  • 163
  • 5
3
votes
1 answer

Can I trust Google Scripts on sites like Labnol?

For example, consider this script. It requires me to grant permission to my Gmail account, but I'm confused why this is necessary -- is it not myself who is running the script? Or is my data going through someone else's servers than Google? Can I…
user541686
  • 2,502
  • 2
  • 21
  • 28
2
votes
1 answer

Is it safe to view video files on Google Drive online?

I have a video file on my Drive which is very old but I am not sure whether it's infected or not. Is it safe to view this MP4 on Google Drive (no downloading only viewing it in the Drive app)?
MangoLlama
  • 21
  • 2
2
votes
1 answer

Question about credentials.json file

I have a python script that connects to google drive and upload some files automatically. The first time the application runs, it asks for a google account to use in its behalf to upload files to that drive. However, I had to configure a project…
Raul Luna
  • 121
  • 4
1
2 3