{"id":13037,"date":"2022-04-19T09:24:03","date_gmt":"2022-04-19T06:24:03","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=13037"},"modified":"2022-04-19T09:24:03","modified_gmt":"2022-04-19T06:24:03","slug":"dunyanin-en-buyuk-data-sizintilarindan-biri-gerceklesti","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=13037","title":{"rendered":"D\u00fcnyan\u0131n En B\u00fcy\u00fck Data S\u0131z\u0131nt\u0131lar\u0131ndan Biri Ger\u00e7ekle\u015fti"},"content":{"rendered":"<p>On y\u0131l\u0131 a\u015fk\u0131n m\u00fcddettir kimlik h\u0131rs\u0131zlar\u0131 ve internet doland\u0131r\u0131c\u0131lar\u0131, insanlar\u0131n paralar\u0131n\u0131 \u00e7almak, hesaplar\u0131na girmek ya da onlara b\u00fcr\u00fcnmek i\u00e7in \u00e7al\u0131nm\u0131\u015f kullan\u0131c\u0131 datalar\u0131n\u0131n oldu\u011fu bir karaborsa olu\u015fturdular. Ekim ay\u0131nda ise hepimizi sarsmas\u0131 gereken bir geli\u015fme ya\u015fand\u0131: <strong>1,2 milyar insan\u0131n verisinin inan\u00e7s\u0131z bir bi\u00e7imde depoland\u0131\u011f\u0131\u00a0<\/strong>ortaya \u00e7\u0131kt\u0131.<\/p>\n<p>\u0130nternetin en karanl\u0131k noktalar\u0131n\u0131 ara\u015ft\u0131ran Vinny Troia, d\u00fcn yay\u0131nlad\u0131\u011f\u0131 bir yaz\u0131s\u0131nda Ekim ay\u0131nda yapt\u0131\u011f\u0131 ke\u015fiften bahsetti. Troia, toplamda <strong>1,2 milyar<\/strong> kayd\u0131n bulundu\u011fu\u00a0<strong>4 terabaytl\u0131k \u015fahs\u00ee datalar\u0131n<\/strong> inan\u00e7l\u0131 olmayan bir sunucu \u00fczerinde a\u00e7\u0131kta ve kolay kolay eri\u015filebildi\u011fini ke\u015ffetti.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/30\/bf0b532a87b6b000dcc5c1c92b1391223f8f6701.jpeg\"\/><\/p>\n<p>Bu inan\u0131lmaz ke\u015fif gezegenimizde ya\u015fayan insanlar\u0131n bir\u00e7oklar\u0131n\u0131 ilgilendirse de\u00a0korunan bilgilerin ne olduklar\u0131 da biliniyor. Datalar, \u015fifreleriniz, kredi kart\u0131 numaralar\u0131n\u0131z ya da kimlik numaran\u0131z \u00fczere bilgileri i\u00e7ermiyor. Lakin i\u00e7iniz rahatlamas\u0131n, ortal\u0131kla resmen av\u0131n\u0131 bekleyen bilgilerimiz \u00fczere epey <strong>ayr\u0131nt\u0131l\u0131 bilgilerimizi i\u00e7eriyor<\/strong>.<\/p>\n<p>\u0130nan\u00e7s\u0131z bir bi\u00e7imde saklanan bilgilerimizde y\u00fcz milyonlarca insan\u0131n konut ve cep telefon numaras\u0131, Facebook, Twitter, LinkedIn ve Github \u00fczere <strong>toplumsal medya profillerimiz<\/strong>, 50 milyonun \u00fczerinde <strong>telefon numaras\u0131<\/strong> ve 622 milyon <strong>mail adresi<\/strong> bulunuyor. Yani bizi aldatmaya \u00e7al\u0131\u015fan bir ki\u015fi, hakk\u0131m\u0131zda neredeyse t\u00fcm bilgilerimize eri\u015febiliyor.<\/p>\n<p><b>Troia ke\u015ffi nas\u0131l yapt\u0131?<\/b><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/30\/1108c5c4a0f9e979578369514d1fd2fddfbb5b23.jpeg\"\/><\/p>\n<p>Vinny Troia, g\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131 arkada\u015f\u0131 Bob Diachenko ile BinaryEdge ve Shodan\u2019da rastgele bir s\u0131z\u0131nt\u0131 olup olmad\u0131\u011f\u0131n\u0131 denetim ederken bu inan\u0131lmaz \u015feyle kar\u015f\u0131la\u015ft\u0131. Sunucunun IP adresi lakin Google Cloud Services\u2019a kadar takip edilebiliyordu, hasebiyle bilgileri <strong>kimin depolad\u0131\u011f\u0131 bilinmiyordu<\/strong>.<\/p>\n<p>Bununla birlikte Vinny Troia, bu datalar\u0131 birisinin daha evvel bulup bulmad\u0131\u011f\u0131n\u0131, bulduysa indirip indirmedi\u011fini de bilmiyordu. Fakat Vinny\u2019nin s\u00f6yledi\u011fine nazaran sunucuyu bulmak ve ona ula\u015fmak hayli kolayd\u0131. Sunucuya eri\u015fmek i\u00e7in yap\u0131lmas\u0131 gereken tek \u015fey taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011funa \u2018<strong>http:\/\/35.199.58.125:9200<\/strong>\u2019 adresini yazmakt\u0131. Eri\u015fim i\u00e7in rastgele bir <strong>\u015fifre ya da yetki gerekmiyordu<\/strong>.<\/p>\n<p>Ke\u015ffi yapan Vinny Troia, avlanmay\u0131 bekleyen bilgileri bulduktan sonra bu ke\u015ffini \u00e7abucak <strong>FBI\u2019a <\/strong>bildirdi. Troia\u2019n\u0131n bildirisinden birka\u00e7 saat sonra FBI, internette dola\u015fan bilgileri \u00e7evrimd\u0131\u015f\u0131 yapmak i\u00e7in <strong>sunucuyu kapatt\u0131<\/strong>. FBI taraf\u0131ndan ise olayla ilgili rastgele bir a\u00e7\u0131klama yap\u0131lmad\u0131.<\/p>\n<p><b>Bilgiler etiketlenmi\u015fti:<\/b><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/30\/e1aa01f4c43b9fc1420202ff5f7be93f5c0ee23b.jpeg\"\/><\/p>\n<p>Troia\u2019n\u0131n ke\u015ffetti\u011fi bilgiler bir ortada toplanm\u0131\u015f d\u00f6rt data setinden olu\u015fuyordu. Bunlardan \u00fc\u00e7\u00fc San Francisco\u2019da bulunan <strong>People Veri Labs\u2019den (PDL) <\/strong>gelmi\u015f olarak etiketlenmi\u015fti. PDL, kendi sitesinde 1,5 milyardan fazla insan\u0131n verisini sat\u0131l\u0131k olarak lanse ediyor.<\/p>\n<p>People Veri Labs, sat\u0131l\u0131k datalar\u0131n yan\u0131nda bir milyondan fazla \u015fahs\u00ee e-posta adresini, 420 milyondan fazla LinkedIn URL\u2019sini, bir milyardan fazla Facebook URL\u2019sini ve kimli\u011fini ve 400 milyondan fazla telefon numaras\u0131n\u0131 da b\u00fcnyesinde sakl\u0131yor.<\/p>\n<p>Olayla ilgili a\u00e7\u0131klama yapan PDL kurucu orta\u011f\u0131 Sean Thorne, \u015firketinin a\u00e7\u0131\u011fa \u00e7\u0131kan datalar\u0131 bar\u0131nd\u0131ran <strong>sunucunun sahibi olmad\u0131\u011f\u0131n\u0131<\/strong> s\u00f6yledi. Vinny Troia\u2019da bilgileri inceleme f\u0131rsat\u0131 buldu\u011fu i\u00e7in PDL\u2019in hakl\u0131 oldu\u011funu d\u00fc\u015f\u00fcn\u00fcyor. Lakin ortada bir soru h\u00e2l\u00e2 cevaplanam\u0131yor: <strong>Bilgiler nas\u0131l topland\u0131<\/strong>?<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/30\/42005940effbebeaad477cde18dc3458c293231d.jpeg\"\/><\/p>\n<p>PDL, kendisinden al\u0131\u015fveri\u015f yapan m\u00fc\u015fterilere s\u0131rf datalar\u0131 sunuyor, datalar\u0131n g\u00fcvenli\u011fini sa\u011flamak <strong>m\u00fc\u015fteriye ba\u011fl\u0131<\/strong> oluyor. Pekala PDL\u2019e m\u00fcsaadesiz eri\u015fim sa\u011flanm\u0131\u015f olabilir mi? Troia\u2019ya nazaran bu da olas\u0131l\u0131klar ortas\u0131nda yer alm\u0131yor. Zira \u015firketten data sat\u0131n almak, m\u00fcsaadesiz eri\u015fim sa\u011flamaktan \u00e7ok daha kolay.<\/p>\n<p>\u00dc\u00e7 bilgi setinin d\u0131\u015f\u0131nda ba\u015fka data seti ise \u2018<strong>OXY<\/strong>\u2019 olarak etiketlenmi\u015fti. Vinny Troia, bu etiketin ABD\u2019li bilgi sa\u011flay\u0131c\u0131s\u0131 <strong>Oxydata\u2019ya <\/strong>ili\u015fkin olabilece\u011fini d\u00fc\u015f\u00fcn\u00fcyor. Oxydata, d\u00fcnya \u00e7ap\u0131nda 195 \u00fclkeden ve 85 sanayiden 380 milyondan fazla \u00e7al\u0131\u015fan\u0131n ve t\u00fcketicinin bilgilerini bulunduruyor. Bu datalar\u0131n toplam boyutu ise 4 terabayt.<\/p>\n<p>Vinny Troia ve arkada\u015f\u0131 Diachenko, PDL ve Oxydata\u2019dan elde edildi\u011fi kestirim edilen datalar\u0131 kar\u015f\u0131la\u015ft\u0131rm\u0131\u015flar. Kar\u015f\u0131la\u015ft\u0131rma sonucunda ise her iki kayna\u011f\u0131n da birbirine m\u00fckemmel bir bi\u00e7imde uydu\u011funu g\u00f6rm\u00fc\u015fler. Troia\u2019n\u0131n Oxydata verisi LinkedIn profilinin kopyas\u0131n\u0131 i\u00e7erirken PDL profili <strong>10 y\u0131l evvel ald\u0131\u011f\u0131 telefon s\u0131n\u0131r\u0131n\u0131<\/strong> bile i\u00e7eriyormu\u015f.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/30\/4e7bff402e98f2a7230dc846b5f55d276aac308c.jpeg\"\/><\/p>\n<p>Lakin Oxydata kurumlararas\u0131 sat\u0131\u015f y\u00f6neticisi Martynas Simanauskas, \u015firketin rastgele bir m\u00fcsaadesiz te\u015febb\u00fcsle kar\u015f\u0131la\u015fmad\u0131\u011f\u0131n\u0131 s\u00f6yledi. Martynas ayr\u0131yeten \u015firketinin sa\u011flad\u0131\u011f\u0131 datalar\u0131n \u2018<strong>OXY\u2019 etiketiyle etiketlenmedi\u011fini<\/strong> de aktard\u0131. Lakin datalar\u0131n bir m\u00fc\u015fterilerinden al\u0131nm\u0131\u015f olabilece\u011fini s\u00f6yledi. Nat\u00fcrel datalar\u0131n nas\u0131l al\u0131nd\u0131\u011f\u0131n\u0131n kesin a\u00e7\u0131klamas\u0131n\u0131n olmad\u0131\u011f\u0131n\u0131 biz de bir sefer daha s\u00f6yleyelim.<\/p>\n<p>Her iki data sa\u011flay\u0131c\u0131s\u0131 da asl\u0131nda satt\u0131klar\u0131 bilgilerin m\u00fc\u015fterileri taraf\u0131ndan berbat kullan\u0131lm\u0131\u015f olabilece\u011fini s\u00f6yl\u00fcyor. \u0130\u015fte tam olarak bu bahsedilen \u015fey de bilgi al\u0131m sat\u0131m sanayisinin bir di\u011fer sorununu g\u00f6zler \u00f6n\u00fcne seriyor. Bu al\u0131\u015fveri\u015flerde g\u00f6r\u00fcn\u00fc\u015fe nazaran <strong>g\u00fcvenlik ve sakl\u0131l\u0131k<\/strong> sa\u011flanm\u0131yor.<\/p>\n<p>\u0130\u00e7inizi bir nebze de olsa rahatlatmak i\u00e7in birka\u00e7 \u015fey s\u00f6yleyebiliriz. Bilgilerin internette dola\u015f\u0131yor olmas\u0131, bir hacker\u0131n bu datalara \u00e7abucak eri\u015fmi\u015f oldu\u011fu manas\u0131na gelmiyor. Ama bu \u00e7e\u015fit datalar\u0131n ortada inan\u00e7s\u0131z bir bi\u00e7imde dola\u015f\u0131yor olu\u015fu ve bunun muhtemelen <strong>tek \u00f6rnek olmad\u0131\u011f\u0131<\/strong> ger\u00e7e\u011fi akl\u0131m\u0131zdan \u00e7\u0131km\u0131yor.<\/p>\n<div> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>On y\u0131l\u0131 a\u015fk\u0131n m\u00fcddettir kimlik h\u0131rs\u0131zlar\u0131 ve internet doland\u0131r\u0131c\u0131lar\u0131, insanlar\u0131n paralar\u0131n\u0131 \u00e7almak, hesaplar\u0131na girmek ya da onlara b\u00fcr\u00fcnmek &#8230;<\/p>\n","protected":false},"author":1,"featured_media":13038,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[2710,1687,1527,1032,2711],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/13037"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13037"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/13037\/revisions"}],"predecessor-version":[{"id":13039,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/13037\/revisions\/13039"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/13038"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}