{"id":16894,"date":"2022-04-26T09:42:03","date_gmt":"2022-04-26T06:42:03","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=16894"},"modified":"2022-04-26T09:42:03","modified_gmt":"2022-04-26T06:42:03","slug":"eanin-bilgilerini-ortaya-cikaracak-guvenlik-acigi-kapatildi","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=16894","title":{"rendered":"EA\u2019n\u0131n Bilgilerini Ortaya \u00c7\u0131karacak G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Kapat\u0131ld\u0131"},"content":{"rendered":"

Siber g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131, k\u0131sa m\u00fcddet evvel g\u00f6r\u00fcnt\u00fc oyunu devi Electronic Arts (EA) \u015firketine ili\u015fkin Slack kanallar\u0131n\u0131n bir listesini kopyalamalar\u0131na m\u00fcsaade veren bir a\u00e7\u0131k ke\u015ffetti.\u00a0Sorun \u00e7ok k\u0131sa vakitte giderildi lakin o denli g\u00f6r\u00fcn\u00fcyor ki bulunan bu a\u00e7\u0131k, ara\u015ft\u0131rmac\u0131lar taraf\u0131ndan de\u011fil de bilgisayar korsanlar\u0131<\/strong> taraf\u0131ndan ke\u015ffedilmi\u015f olsayd\u0131, kanal isimlerini ve kapal\u0131 \u015firket projeleriyle ilgili \u00f6teki bilgileri ortaya \u00e7\u0131karmak \u00e7ok da s\u0131k\u0131nt\u0131 olmazd\u0131.<\/p>\n

Mevzuya a\u00e7\u0131kl\u0131k getiren isim, sorunu bulduktan sonra EA'ya bildiren Dubai merkezli siber g\u00fcvenlik firmas\u0131 spiderSilk'in ara\u015ft\u0131rmac\u0131s\u0131 Mossab Hussein oldu. Hussein\u2019e nazaran a\u00e7\u0131\u011f\u0131n sebebi m\u00fchendislerin yapt\u0131\u011f\u0131 bir kodlama kusuruydu ve bu kusurdan etkilenen toplam 29 bin<\/strong> adet kanal bulunuyordu.<\/p>\n

<\/p>\n

Hussein ayr\u0131yeten \u201cSlack i\u00e7in giri\u015f \u015fifreleri EA'n\u0131n PagerDuty konu\u015fland\u0131rmas\u0131 i\u00e7inde yap\u0131land\u0131r\u0131lm\u0131\u015f durumda, yani bir sald\u0131rgan bunu ke\u015ffetseydi, t\u00fcm d\u00fcnyadaki eski ve yeni EA \u00e7al\u0131\u015fanlar\u0131na ili\u015fkin t\u00fcm kullan\u0131c\u0131lar\u0131n listesini alabilirdi”\u00a0<\/em>dedi.\u00a0Ele ge\u00e7irilebilecek \u00f6b\u00fcr \u015feyler ortas\u0131nda EA'n\u0131n Slack \u00e7al\u0131\u015fma alan\u0131ndaki t\u00fcm kanallar\u0131n tam bir listesi <\/strong>ve \u00fczerinde \u00e7al\u0131\u015f\u0131lan proje ba\u015fl\u0131klar\u0131, dok\u00fcmanlar, URL i\u00e7eren kanal a\u00e7\u0131klamalar\u0131 oldu\u011funu da eklersek san\u0131yoruz bunun bir \u015firket i\u00e7in ne kadar mak\u00fbs bir durum olabilece\u011fini anlatmaya yard\u0131mc\u0131 olur.<\/p>\n

Ara\u015ft\u0131rmac\u0131 Hussein, spiderSilk'in mevzuyu 19 Kas\u0131m 2019'da 1000 kanall\u0131k<\/strong> bir \u00f6rnek listeyle birlikte EA'ya bildirdi\u011fini ve EA'n\u0131n 21 Aral\u0131k'ta t\u00fcm problemleri \u00e7\u00f6zd\u00fc\u011f\u00fcn\u00fc s\u00f6yleyerek kar\u015f\u0131l\u0131k verdi\u011fini de kelamlar\u0131na ekledi.<\/p>\n

Electronic Arts'\u0131n a\u00e7\u0131klamas\u0131 gecikmedi<\/b><\/p>\n

<\/p>\n

EA \u015firketinin \u0130rtibat Lider Yard\u0131mc\u0131s\u0131 John Reseburg ise, “Raporun akabinde sorunun s\u00fcratli bir halde \u00e7\u00f6z\u00fcld\u00fc\u011f\u00fcn\u00fc do\u011frulayabilirim. Ara\u015ft\u0131rma \u015firketinin bu mevzudaki bulgular\u0131n\u0131 takdir ediyoruz. Bu t\u00fcrl\u00fc \u015firketlerden gelen datalar, oyuncular\u0131m\u0131z, oyunlar\u0131m\u0131z ve \u015firketimiz i\u00e7in g\u00fcvenlik tedbirlerini<\/strong> daima olarak test etmenin ve g\u00fczelle\u015ftirmenin k\u0131ymetli bir par\u00e7as\u0131”<\/em> kelamlar\u0131yla olay\u0131 do\u011frular bi a\u00e7\u0131klamada bulundu.<\/p>\n

G\u00f6r\u00fcnt\u00fc oyunu \u015firketleri, haz\u0131rlad\u0131klar\u0131 pazarlama stratejilerinden evvel s\u0131zan oyunlar\u0131n\u0131n detaylar\u0131 hakk\u0131nda \u00e7ok kayg\u0131 duyuyor ve \u00e7oklukla bunlar\u0131 kendi i\u00e7lerinde tart\u0131\u015fmak i\u00e7in \u00e7e\u015fitli takma isimler<\/strong> kullan\u0131yor.\u00a0Bilgisayar korsanlar\u0131 Slack kanallar\u0131n\u0131n bir listesine sahip olsa bile, oyun isimlerini anlamamalar\u0131 m\u00fcmk\u00fcn olabilirdi lakin yeniden de \u00f6nlemi elden b\u0131rakmamakta yarar var.<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

Siber g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131, k\u0131sa m\u00fcddet evvel g\u00f6r\u00fcnt\u00fc oyunu devi Electronic Arts (EA) \u015firketine ili\u015fkin Slack kanallar\u0131n\u0131n bir listesini …<\/p>\n","protected":false},"author":1,"featured_media":16895,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[346,2637,920,946],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/16894"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16894"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/16894\/revisions"}],"predecessor-version":[{"id":16896,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/16894\/revisions\/16896"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/16895"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16894"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16894"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16894"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}