{"id":6571,"date":"2022-04-07T06:30:04","date_gmt":"2022-04-07T03:30:04","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=6571"},"modified":"2022-04-07T06:30:04","modified_gmt":"2022-04-07T03:30:04","slug":"45-petabytelik-bilgiyi-46-mba-sikistiran-zip-bombasi","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=6571","title":{"rendered":"4,5 Petabyte’l\u0131k Bilgiyi 46 MB’a S\u0131k\u0131\u015ft\u0131ran “Zip Bombas\u0131”"},"content":{"rendered":"

Bir programc\u0131 ve m\u00fchendis olan David Fifield, yeni bir t\u0131p \u201car\u015fiv bombas\u0131\u201d (zip bomb)\u00a0geli\u015ftirdi. Bir t\u00fcr\u00a0zararl\u0131 yaz\u0131l\u0131m olan bu yaz\u0131l\u0131m, yaln\u0131zca kilobyte\u2019lara s\u0131\u011facak kadar k\u00fc\u00e7\u00fck olmas\u0131na kar\u015f\u0131n ar\u015fiv evrak\u0131ndan \u00e7\u0131kar\u0131ld\u0131\u011f\u0131nda sabit diskinizi b\u00fcsb\u00fct\u00fcn dolduruyor.<\/p>\n

Kendi tekni\u011fini internet sitesinde a\u00e7\u0131klayan Fifield, tekni\u011finin \u201cyinelemeli\u201d ya da matru\u015fka bebekleri \u00fczere olmad\u0131\u011f\u0131n\u0131 s\u00f6yl\u00fcyor. Evraklar\u0131, bir ar\u015fivin\u00a0i\u00e7inde \u201c\u00fcst \u00fcste bindirmeyi\u201d ba\u015faran Fifiled, bu y\u00f6ntemle\u00a0normalde yap\u0131lamayacak kadar b\u00fcy\u00fck belgeleri s\u0131k\u0131\u015ft\u0131rmay\u0131 ba\u015fard\u0131. Kendisinin en etkileyici i\u015fiyse 4,5 petabyte\u2019l\u0131k datay\u0131 46 MB\u2019l\u0131k belgeye s\u0131k\u0131\u015ft\u0131rmas\u0131.<\/p>\n

<\/p>\n

2015 y\u0131l\u0131nda USENIX G\u00fcvenlik Sempozyumu\u2019nda yap\u0131lan sunuma g\u00f6re\u00a0ilk ar\u015fiv bombas\u0131 \u00f6rne\u011fi, 1996 y\u0131l\u0131nda g\u00f6r\u00fcld\u00fc. Bu taarruzun kurban\u0131 Fidonet\u2019ti ve taarruzun emeli da a\u011f\u0131 a\u00e7abilmek i\u00e7in y\u00f6neticilik almakt\u0131. 2001 y\u0131l\u0131na geldi\u011findeyse bu ak\u0131n, g\u00fcvenlik uzmanlar\u0131n\u0131n endi\u015feli d\u00fc\u015f\u00fc h\u00e2line gelmi\u015fti.<\/p>\n

Bundan k\u0131sa bir m\u00fchlet sonra\u00a0t\u00fcr\u00fcn\u00fcn en \u00fcnl\u00fc \u00f6rne\u011fi olan 42.zip ortaya \u00e7\u0131kt\u0131. \u015eu an h\u00e2l\u00e2 yarat\u0131c\u0131s\u0131 bilinmeyen bu ar\u015fiv bombas\u0131, 106 milyarda bir \u00fczere bir s\u0131k\u0131\u015ft\u0131rma oran\u0131yla efsane mertebesine ula\u015fm\u0131\u015ft\u0131. 42.zip hakk\u0131nda konu\u015fan Fifield, \u201c42.zip\u2019i ilham verici buluyorum. Yaln\u0131zca i\u00e7erisindeki evraklar\u0131n \u00e7oklu\u011fundan de\u011fil ayr\u0131yeten etraf\u0131ndaki zenginlikten. Bir folklor \u00fczere. Birebir fikir etraf\u0131nda kurulmu\u015f bir\u00e7ok \u00f6rnek vard\u0131r lakin bir sebepten \u00f6t\u00fcr\u00fc 42.zip, g\u00fcc\u00fc daima elinde bulundurdu\u201d<\/em> dedi. 42.zip hakk\u0131nda daha ayr\u0131nt\u0131l\u0131 bilgiye a\u015fa\u011f\u0131daki haberimizden ula\u015fabilirsiniz.<\/p>\n

Bu evraklar\u0131 bu kadar efektif yapan \u015fey, s\u0131k\u0131\u015ft\u0131rmay\u0131 verimli h\u00e2le getiren \u015feylerden faydalanmas\u0131 ve bunu bir silaha d\u00f6n\u00fc\u015ft\u00fcrerek CPU d\u00f6ng\u00fcs\u00fcne, RAM\u2019e ve disk alanlar\u0131na sald\u0131rmas\u0131. Lakin bu belgelerin da bir do\u011fal s\u0131n\u0131rlamas\u0131 bulunuyor. Bir\u00e7ok ar\u015fiv belgesi i\u00e7in\u00a0a\u00e7ma s\u00fcrecinin azamiye ula\u015ft\u0131\u011f\u0131 s\u0131k\u0131\u015ft\u0131rma oran\u0131 1032\u2019de bir oluyor. Bu da ar\u015fiv bombalar\u0131n\u0131n ger\u00e7ek potansiyeline yinelenerek ula\u015f\u0131labilece\u011fi manas\u0131na geliyor.<\/p>\n

<\/p>\n

Fifield\u2019\u0131n \u00e7al\u0131\u015fmas\u0131n\u0131 enteresan yapan \u015fey ise 1032\u2019de bir s\u0131k\u0131\u015ft\u0131rma oran\u0131n\u0131, s\u0131k\u0131\u015ft\u0131rma s\u00fcrecinde belgeleri birbirinin \u00fcst\u00fcne bindirerek a\u015fmas\u0131. Bu da\u00a0tek bir katmanda daha fazla s\u0131k\u0131\u015fm\u0131\u015f evraklar olu\u015ftururken\u00a0yineleme de gerektirmiyor. Fifield\u2019\u0131n 45 MB\u2019l\u0131k belgesini etkileyici yapan \u015fey, s\u0131k\u0131\u015ft\u0131rma s\u00fcrecinde \u00e7ok da yayg\u0131n olmayan lakin daha verimli olan Zip64 uzant\u0131s\u0131n\u0131n kullan\u0131lmas\u0131. B\u00f6ylece a\u00e7\u0131ld\u0131\u011f\u0131nda 42.zip ile e\u015fit boyuta sahip oluyor fakat bu s\u00fcre\u00e7te rastgele bir yineleme gerekmiyor.<\/p>\n

Bu belgelerin tehlikeli olup olmad\u0131\u011f\u0131 konusuna gelirsek bir anda bilgisayar\u0131n\u0131z\u0131n haf\u0131zas\u0131n\u0131 b\u00fcsb\u00fct\u00fcn dolduraca\u011f\u0131 hakikat ola\u011fan ki lakin \u00e7a\u011fda\u015f vir\u00fcs programlar\u0131, ar\u015fiv bombalar\u0131n\u0131 tespit edebiliyor.<\/p>\n

\u00d6n\u00fcm\u00fczdeki ay USENIX Workshop on Offensive Technologies\u2019te kendi bulgular\u0131n\u0131 payla\u015facak olan Fifield\u2019\u0131n kendi sitesinde yay\u0131nlad\u0131\u011f\u0131 ar\u015fiv bombas\u0131 makalesine de buradan ula\u015fabilirsiniz. \u00a0\u00a0<\/p>\n

<\/div>\n
\n
<\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Bir programc\u0131 ve m\u00fchendis olan David Fifield, yeni bir t\u0131p \u201car\u015fiv bombas\u0131\u201d (zip bomb)\u00a0geli\u015ftirdi. Bir t\u00fcr\u00a0zararl\u0131 yaz\u0131l\u0131m olan bu yaz\u0131l\u0131m …<\/p>\n","protected":false},"author":1,"featured_media":6572,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[653],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/6571"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6571"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/6571\/revisions"}],"predecessor-version":[{"id":6573,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/6571\/revisions\/6573"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/6572"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6571"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6571"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}