{"id":29511,"date":"2022-05-19T19:42:03","date_gmt":"2022-05-19T16:42:03","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=29511"},"modified":"2022-05-19T19:42:03","modified_gmt":"2022-05-19T16:42:03","slug":"slackin-masaustu-uygulamasinda-kritik-acik-kesfedili","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=29511","title":{"rendered":"Slack’in Masa\u00fcst\u00fc Uygulamas\u0131nda Kritik A\u00e7\u0131k Ke\u015ffedili"},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz\u00fcn en tan\u0131nan i\u015f odakl\u0131 ba\u011flant\u0131 platformlar\u0131ndan birisi olan Slack’de<\/strong>, ge\u00e7ti\u011fimiz g\u00fcn k\u0131ymetli bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n ke\u015ffedildi\u011fi a\u00e7\u0131kland\u0131. Kritik seviyede oldu\u011fu a\u00e7\u0131klanan g\u00fcvenlik a\u00e7\u0131\u011f\u0131, hacker’lar\u0131n Slack’in masa\u00fcst\u00fc uygulamas\u0131n\u0131 kullanan kullan\u0131c\u0131lar\u0131n bilgisayarlar\u0131na eri\u015fmelerinin <\/strong>\u00f6n\u00fcn\u00fc a\u00e7\u0131yordu.<\/p>\n

G\u00fcvenlik a\u00e7\u0131\u011f\u0131, Slack’in kendi g\u00fcvenlik tak\u0131m\u0131 taraf\u0131ndan de\u011fil; \u00fc\u00e7\u00fcnc\u00fc parti g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 taraf\u0131ndan ke\u015ffedilmi\u015fti. Uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya<\/strong> imkan sa\u011flayan g\u00fcvenlik a\u00e7\u0131\u011f\u0131, rastgele bir hacker’\u0131n b\u00e2t\u0131n belgelere, \u015fifrelere, internet a\u011f\u0131na ve daha bir\u00e7ok \u015feye eri\u015fmelerini sa\u011flayacak derecede de\u011ferliydi.<\/p>\n

A\u00e7\u0131\u011f\u0131 ke\u015ffeden hacker’a sadece 1.750 dolar \u00f6d\u00fcl verildi:<\/b><\/p>\n

<\/p>\n

HackerOne’da yay\u0131nlanan g\u00fcvelik a\u00e7\u0131\u011f\u0131, Slack taraf\u0131ndan d\u00fczeltildi ve tehdit ortadan kalkt\u0131. G\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 ke\u015ffeden ve payla\u015fan <\/strong>‘oskars’ HackerOne kullan\u0131c\u0131s\u0131<\/strong>, \u00f6d\u00fcl olarak 1.750 dolar<\/strong> kazand\u0131. Ke\u015ffedilen g\u00fcvenlik a\u00e7\u0131\u011f\u0131 \u015fu ana kadar rastgele bir Slack kullan\u0131c\u0131s\u0131n\u0131 etkilemedi.<\/p>\n

HackerOne’da yer alan bilgiye nazaran hacker’lar, sald\u0131r\u0131y\u0131 s\u0131rf bir bireye yaparak sald\u0131rd\u0131klar\u0131 kullan\u0131c\u0131n\u0131n a\u011f\u0131nda yer alan \u00f6teki i\u015f arkada\u015flar\u0131na da eri\u015febiliyordu. Slack’in yan\u0131lg\u0131y\u0131 bildiren kullan\u0131c\u0131ya verdi\u011fi m\u00fckafat\u0131 g\u00f6renlerse yanl\u0131\u015f\u0131n oran\u0131yla \u00f6d\u00fcl oran\u0131n\u0131n birbirine uymad\u0131\u011f\u0131<\/strong> konusunda \u015fikayet\u00e7iydi.<\/p>\n

<\/p>\n

Bilgisayar g\u00fcvenli\u011fiyle ilgilenen bir\u00e7ok kullan\u0131c\u0131, 20 milyar dolar k\u0131ymete sahip<\/strong> Slack’in kullan\u0131c\u0131ya s\u0131rf 1.750 dolar verdi\u011fini belirterek Slack’e yak\u0131nd\u0131. Kullan\u0131c\u0131lar, birebir ara\u015ft\u0131rmac\u0131n\u0131n t\u0131pk\u0131 yan\u0131lg\u0131y\u0131 \u00f6zel bir \u015firkete bildirmesi durumunda o \u015firketin ara\u015ft\u0131rmac\u0131ya on binlerce dolar<\/strong> vermi\u015f olabilece\u011fini s\u00f6yledi.<\/p>\n

Slack’in HackerOne’daki sayfas\u0131nda <\/strong>yer alan bilgiye nazaran ke\u015ffedilen ak\u0131n\u0131n \u00e7e\u015fidi olan ‘uzaktan kod \u00e7al\u0131\u015ft\u0131rma’ ak\u0131nlar\u0131n\u0131n i\u00e7inde bulundu\u011fu ‘kritik’ kategorisi g\u00fcncellendi. G\u00fcncellemeyle birlikte verilecek \u00f6d\u00fcl 5.000 dolara kadar<\/strong> y\u00fckselmi\u015fti. Slack, son 90 g\u00fcn i\u00e7inde a\u00e7\u0131k ke\u015ffeden kullan\u0131c\u0131lara 36.375 dolar<\/strong> \u00f6deme yapt\u0131.<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

G\u00fcn\u00fcm\u00fcz\u00fcn en tan\u0131nan i\u015f odakl\u0131 ba\u011flant\u0131 platformlar\u0131ndan birisi olan Slack’de, ge\u00e7ti\u011fimiz g\u00fcn k\u0131ymetli bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n ke\u015ffedildi\u011fi …<\/p>\n","protected":false},"author":1,"featured_media":29512,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[1080,1251,1533,888,2390],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/29511"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29511"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/29511\/revisions"}],"predecessor-version":[{"id":29513,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/29511\/revisions\/29513"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/29512"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}