{"id":19939,"date":"2022-05-02T03:24:04","date_gmt":"2022-05-02T00:24:04","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=19939"},"modified":"2022-05-02T03:24:04","modified_gmt":"2022-05-02T00:24:04","slug":"binlerce-android-uygulamada-zimni-giris-kesfedildi","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=19939","title":{"rendered":"Binlerce Android Uygulamada Z\u0131mn\u00ee Giri\u015f Ke\u015ffedildi"},"content":{"rendered":"<p>Bu hafta yay\u0131nlanan kapsaml\u0131 bir akademik ara\u015ft\u0131rmaya g\u00f6re\u00a0<strong>12.706<\/strong> <strong>Android<\/strong> <strong>uygulamas\u0131nda<\/strong> bilinmeyen eri\u015fim anahtar\u0131, ana parola ve b\u00e2t\u0131n komut \u00fczere sakl\u0131 art kap\u0131 eri\u015fimlerine benzeyen davran\u0131\u015flar saptand\u0131. ABD ve Avrupa&#39;dan akademisyenler, ara\u015ft\u0131rmalar\u0131nda bu art kap\u0131 eri\u015fimlerini saptayabilmek i\u00e7in\u00a0InputScope isminde bir ara\u00e7 geli\u015ftirdiler. Bu ara\u00e7 150.000&#39;den fazla Android uygulamas\u0131n\u0131n i\u00e7inde bulunan giri\u015f formu alanlar\u0131n\u0131 tahlil etmede kullan\u0131ld\u0131.<\/p>\n<p>Daha yak\u0131ndan bak\u0131lacak olursa, bilim insanlar\u0131 Play Store&#39;dan (indirilme say\u0131lar\u0131na dayanarak) <strong>100.000<\/strong> uygulamay\u0131, \u00fc\u00e7\u00fcnc\u00fc parti ma\u011fazalardan en tan\u0131nan <strong>20.000<\/strong> uygulamay\u0131 ve Samsung ayg\u0131tlarda y\u00fckl\u00fc olarak gelen <strong>30.000<\/strong>&#39;i<strong>n<\/strong> <strong>\u00fczerinde<\/strong> uygulamay\u0131 incelediler. Ara\u015ft\u0131rma grubu, bulgular\u0131n\u0131n tasa verici oldu\u011funu a\u00e7\u0131klad\u0131. Toplam\u00a012.706 uygulaman\u0131n \u00e7e\u015fitli t\u00fcrden\u00a0arka kap\u0131 eri\u015fim imk\u00e2n\u0131n\u0131 sa\u011flad\u0131\u011f\u0131 belirtiliyor.<\/p>\n<p><b>Sald\u0131rganlara a\u00e7\u0131k kap\u0131<\/b><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/54\/b64cb0fc477a19aa68ee5fc6b4cec5e78ea2dd22.jpeg\"\/><\/p>\n<p>Ara\u015ft\u0131rmac\u0131lar bu sakl\u0131 a\u00e7\u0131k kap\u0131 d\u00fczeneklerinin, sald\u0131rganlara telefon kullan\u0131c\u0131lar\u0131n\u0131n hesaplar\u0131na <strong>yetkisiz<\/strong> <strong>giri\u015f<\/strong> elde etme imk\u00e2n\u0131 tan\u0131yabilece\u011fine vurgu yap\u0131yorlar. Dahas\u0131, \u015fayet sald\u0131rgan\u0131n bir ayg\u0131ta fizik\u00ee eri\u015fimi varsa ve bu uygulamalardan biri ayg\u0131ta y\u00fckl\u00fcyse, bu durumda sald\u0131rgan taraf bir telefona eri\u015febilir ya da ayr\u0131cal\u0131kl\u0131 bir bi\u00e7imde, uygulaman\u0131n bilgi giri\u015f alan\u0131nda gizlenmi\u015f bir komut arac\u0131l\u0131\u011f\u0131yla\u00a0o ayg\u0131tta <strong>kod<\/strong> <strong>\u00e7al\u0131\u015ft\u0131rabilir<\/strong>.<\/p>\n<p>Ara\u015ft\u0131rmac\u0131lar, 10 milyondan fazla indirilen tan\u0131nan bir uzaktan eri\u015fim uygulamas\u0131n\u0131 \u00f6rnek g\u00f6steriyorlar. Bu uygulamada bulunan <strong>ana<\/strong> <strong>parola<\/strong> arac\u0131l\u0131\u011f\u0131yla, kullan\u0131c\u0131 telefonunu kaybetti\u011finde eri\u015fimi k\u0131s\u0131tlasa bile\u00a0eri\u015fimin kilidi k\u0131r\u0131labiliyor. Bunun yan\u0131 s\u0131ra, tekrar tan\u0131nan bir ekran kilitleme uygulamas\u0131, rastgele kullan\u0131c\u0131lar\u0131n parolalar\u0131n\u0131 resetleyerek ekran kilidini a\u00e7acak ve sisteme giri\u015f yapmas\u0131n\u0131 sa\u011flayacak bir <strong>eri\u015fim<\/strong> <strong>anahtar\u0131na<\/strong> sahip.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/54\/9f9c08a2a5d8cfdda062f45d4d990c71e7131424.jpeg\"\/><\/p>\n<p>Bir di\u011fer \u00f6rnekte, tekrar tan\u0131nan bir yay\u0131n uygulamas\u0131n\u0131n <strong>y\u00f6netici<\/strong> <strong>aray\u00fcz\u00fcne<\/strong> eri\u015filmesini sa\u011flayan bir eri\u015fim anahtar\u0131 bulunuyor. Bu yoldan bir sald\u0131rgan uygulamay\u0131 yine d\u00fczenleyebilir ve ek fonksiyonlar\u0131n kilidini a\u00e7abilir. Son olarak, tan\u0131nan bir \u00e7eviri uygulamas\u0131nda, <strong>fiyatl\u0131<\/strong> <strong>\u00fcyeli\u011fi<\/strong> ortadan kald\u0131racak b\u00e2t\u0131n bir anahtar ke\u015ffedildi.\u00a0<\/p>\n<p>Ara\u015ft\u0131rmac\u0131lar,\u00a0Play Store&#39;da yer alan\u00a0<strong>6.800<\/strong> uygulamada bu tip art kap\u0131 eri\u015fimleri tespit ettiklerini belirtiyorlar. Samsun ayg\u0131tlarda y\u00fckl\u00fc gelen uygulamalardaki say\u0131ysa\u00a0<strong>4.800<\/strong>. Ara\u015ft\u0131rmac\u0131lar, bu sorunun bulundu\u011fu uygulamalar\u0131n sahibi t\u00fcm geli\u015ftiricilere haber verdiklerini fakat bunlar\u0131n kimilerinden geri d\u00f6n\u00fc\u015f alamad\u0131klar\u0131n\u0131 s\u00f6ylediler.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/54\/b860d9b9002a86f49295024282d2dbeff1194299.png\"\/><\/p>\n<p>B\u00fct\u00fcn bunlar\u0131n yan\u0131nda, <strong>4.028<\/strong> Android uygulamas\u0131nda makus kelam filtresi ya da siyasi m\u00fcnasebetlerle olu\u015fturulmu\u015f kara listeler oldu\u011fu tespit edildi.\u00a0<\/p>\n<div> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>Bu hafta yay\u0131nlanan kapsaml\u0131 bir akademik ara\u015ft\u0131rmaya g\u00f6re\u00a012.706 Android uygulamas\u0131nda bilinmeyen eri\u015fim anahtar\u0131, ana parola ve b\u00e2t\u0131n komut &#8230;<\/p>\n","protected":false},"author":1,"featured_media":19940,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[2133,346,1021,3721,2941],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/19939"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19939"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/19939\/revisions"}],"predecessor-version":[{"id":19941,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/19939\/revisions\/19941"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/19940"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}