{"id":4654,"date":"2015-09-22T11:25:38","date_gmt":"2015-09-22T11:25:38","guid":{"rendered":"https:\/\/ihs.com.tr\/blog\/?p=4654"},"modified":"2015-09-22T11:25:38","modified_gmt":"2015-09-22T11:25:38","slug":"apple-kotu-amacli-yazilim-bulasan-uygulamarini-kaldirdi","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/apple-kotu-amacli-yazilim-bulasan-uygulamarini-kaldirdi\/","title":{"rendered":"Apple k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m bula\u015fan uygulamar\u0131n\u0131 kald\u0131rd\u0131"},"content":{"rendered":"

Apple<\/strong> b\u00fcy\u00fck \u00e7apl\u0131 bir g\u00fcvenlik ihlalinin tespit edilmesi \u00fczerine k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m bula\u015fm\u0131\u015f uygulamalar\u0131n\u0131 App Store\u2019dan kald\u0131rd\u0131. XcodeGhost<\/strong> adl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, uygulama geli\u015ftiricilerini iOS ve Mac yaz\u0131l\u0131mlar\u0131 olu\u015fturmak \u00fczere kullan\u0131lan yaz\u0131l\u0131m olan Xcode<\/strong>\u2019un de\u011fi\u015ftirilmi\u015f bir versiyonunu kullanmaya ikna ederek bir\u00e7ok uygulamaya bula\u015fm\u0131\u015ft\u0131.<\/span><\/p>\n

Apple bas\u0131n s\u00f6zc\u00fcs\u00fc Christine Monaghan<\/strong> 20 Eyl\u00fcl Pazar g\u00fcn\u00fc Reuters<\/a>\u2019a yollad\u0131\u011f\u0131 e-postada \u201cBu sahte yaz\u0131l\u0131mla olu\u015fturuldu\u011funu \u00f6\u011frendi\u011fimiz uygulamalar\u0131 App Store\u2019dan kald\u0131rd\u0131k. Geli\u015ftiricilerimizle g\u00f6r\u00fc\u015ferek uygulamalar\u0131n\u0131 yeniden olu\u015fturmalar\u0131 i\u00e7in Xcode\u2019un do\u011fru versiyonunu kullanmalar\u0131n\u0131 sa\u011fl\u0131yoruz,\u201d diyor.<\/span><\/p>\n

\"XCodeGhost<\/a><\/span><\/p>\n

Bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n bula\u015ft\u0131\u011f\u0131 di\u011fer \u00f6nemli uygulamalar aras\u0131nda \u00c7ince mesajla\u015fma uygulamas\u0131 WeChat<\/strong>, pop\u00fcler kartvizit taray\u0131c\u0131s\u0131 CamCard<\/strong> ve \u00c7inli Uber\u2019in rakibi Didi Chuxing<\/strong> de bulunuyor. 600 milyonun \u00fczerinde ayl\u0131k aktif kullan\u0131c\u0131s\u0131 olan WeChat 19 Eyl\u00fcl tarihli blog yaz\u0131s\u0131nda<\/a> k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n yaln\u0131zca uygulaman\u0131n 10 Eyl\u00fcl\u2019de piyasaya s\u00fcr\u00fclen bir \u00f6nceki versiyonunu etkiledi\u011fini, ondan iki g\u00fcn sonra \u00e7\u0131kan mevcut versiyonun temiz oldu\u011funu duyurdu.<\/span><\/p>\n

G\u00fcvenlik \u015firketi Palo Alto Networks<\/strong>, XcodeGhost \u00fczerinde yapt\u0131\u011f\u0131 inceleme sonucunda yaz\u0131l\u0131m\u0131n kimlik avc\u0131l\u0131\u011f\u0131 sorgulamalar\u0131na sahte cevaplar \u00fcretebildi\u011fini, URL\u2019ler a\u00e7abildi\u011fini ve clipboard verisini okuyup yazabildi\u011fini tespit etti. En az 39 uygulamay\u0131 etkileyen bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m Palo Alto Networks taraf\u0131ndan \u201c\u00e7ok zararl\u0131 ve tehlikeli<\/strong>\u201d olarak nitelendiriliyor.<\/span><\/p>\n

Hen\u00fcz herhangi bir veri h\u0131rs\u0131zl\u0131\u011f\u0131 oldu\u011fu y\u00f6n\u00fcnde bir bulgu yok ama XcodeGhost CIA\u2019in de kullanmay\u0131 d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fc bir y\u00f6ntem olan Apple kod incelemesinin devre d\u0131\u015f\u0131 b\u0131rak\u0131larak yasal geli\u015ftiricilerin k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar i\u00e7in bir vekt\u00f6r olarak nas\u0131l kullan\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6stermesi bak\u0131m\u0131ndan endi\u015fe verici bulunuyor. Palo Alto\u2019dan Ryan Olson<\/strong> Xcode\u2019un zararl\u0131 versiyonunun \u00c7in<\/strong>\u2019deki bir sunucudan geldi\u011fini ve App Store\u2019daki yasal ve bedava versiyondan daha h\u0131zl\u0131 indirildi\u011fi i\u00e7in tercih edilmi\u015f olabilece\u011fini s\u00f6yl\u00fcyor.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Apple b\u00fcy\u00fck \u00e7apl\u0131 bir g\u00fcvenlik ihlalinin tespit edilmesi \u00fczerine k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m bula\u015fm\u0131\u015f uygulamalar\u0131n\u0131 App Store\u2019dan kald\u0131rd\u0131. XcodeGhost adl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m,…<\/p>\n","protected":false},"author":3,"featured_media":4657,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4654","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-haberler"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=4654"}],"version-history":[{"count":4,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4654\/revisions"}],"predecessor-version":[{"id":4683,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4654\/revisions\/4683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/4657"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=4654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=4654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=4654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}