{"id":21480,"date":"2024-02-29T01:00:00","date_gmt":"2024-02-28T22:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=21480"},"modified":"2024-02-29T11:30:30","modified_gmt":"2024-02-29T08:30:30","slug":"kaspersky-r%c9%99q%c9%99msal-usaq-oyuncaginda-t%c9%99hluk%c9%99sizlik-z%c9%99ifliyi-askar-edib","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=21480","title":{"rendered":"Kaspersky r\u0259q\u0259msal u\u015faq oyunca\u011f\u0131nda t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi a\u015fkar edib"},"content":{"rendered":"\n<p class=\"has-medium-font-size\"><strong>Kaspersky r\u0259q\u0259msal u\u015faq oyunca\u011f\u0131nda t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi a\u015fkar edib<\/strong>.<\/p>\n\n\n\n<p>Kaspersky t\u0259dqiqat\u00e7\u0131lar\u0131 u\u015faqlar \u00fc\u00e7\u00fcn interaktiv robotda potensial olaraq t\u0259cav\u00fczkarlara valideynl\u0259rin x\u0259b\u0259ri olmadan u\u015faqla \u00fcnsiyy\u0259t qurmaq \u00fc\u00e7\u00fcn oyuncaqdak\u0131 kameradan istifad\u0259 etm\u0259y\u0259 imkan ver\u0259 bil\u0259c\u0259k z\u0259iflikl\u0259r a\u015fkar edibl\u0259r. \u015eirk\u0259tin m\u00fct\u0259x\u0259ssisl\u0259ri bu bar\u0259d\u0259 istehsal\u00e7\u0131ya m\u0259lumat verib v\u0259 haz\u0131rda h\u0259min t\u0259hl\u00fck\u0259sizlik probleml\u0259rini aradan qald\u0131r\u0131l\u0131b. Kaspersky-nin ara\u015fd\u0131rmas\u0131n\u0131n \u0259sas n\u0259tic\u0259l\u0259ri \u201cMobile World Congress 2024\u201d t\u0259dbirind\u0259 t\u0259qdim olunub.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"650\" height=\"433\" src=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png\" alt=\"\" class=\"wp-image-11072\" style=\"width:339px;height:auto\" srcset=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png 650w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-300x200.png 300w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-360x240.png 360w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><\/figure><\/div>\n\n\n<p>Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri t\u0259r\u0259find\u0259n daxili strukturu t\u0259hlil edil\u0259n robot Android \u0259m\u0259liyyat sistemin\u0259 \u0259saslanan interaktiv cihazd\u0131r. O, b\u00f6y\u00fck r\u0259ngli ekran, mikrofon, video kamera il\u0259 t\u0259chiz olunub v\u0259 h\u0259r\u0259k\u0259t ed\u0259 bilir \u2013 s\u00f6z\u00fcn \u0259sl m\u0259nas\u0131nda &#8220;t\u0259k\u0259rli plan\u015fet&#8221;dir. Robotun funksional\u0131na u\u015faqlar \u00fc\u00e7\u00fcn oyun v\u0259 t\u0259hsil proqramlar\u0131, s\u0259sli k\u00f6m\u0259k\u00e7i, internet\u0259 \u00e7\u0131x\u0131\u015f &nbsp;v\u0259 smartfonlar\u0131ndak\u0131 proqramlar vasit\u0259sil\u0259 valideynl\u0259rl\u0259 \u00fcnsiyy\u0259t qurmaq imkanlar\u0131 daxildir.<\/p>\n\n\n\n<p>Robotdan istifad\u0259 etm\u0259zd\u0259n \u0259vv\u0259l onu b\u00f6y\u00fckl\u0259rin hesablar\u0131 il\u0259 \u0259laq\u0259l\u0259ndirm\u0259k laz\u0131md\u0131r. Bunun \u00fc\u00e7\u00fcn istifad\u0259\u00e7i \u00f6z mobil cihaz\u0131na x\u00fcsusi proqram qura\u015fd\u0131rmal\u0131d\u0131r. Onu ilk d\u0259f\u0259 i\u015f\u0259 sald\u0131\u011f\u0131n\u0131z zaman oyuncaq sizd\u0259n Wi-Fi \u015f\u0259b\u0259k\u0259si se\u00e7m\u0259yi, valideynin mobil cihaz\u0131 il\u0259 ba\u011flant\u0131 yaratma\u011f\u0131 v\u0259 u\u015fa\u011f\u0131n ad\u0131n\u0131 v\u0259 ya\u015f\u0131n\u0131 daxil etm\u0259yi ist\u0259yir.<\/p>\n\n\n\n<p><strong>Hans\u0131 bo\u015fluqlar a\u015fkar edil<\/strong><strong>ib<\/strong><strong>.<\/strong> Kibert\u0259hl\u00fck\u0259sizlik n\u00f6qteyi-n\u0259z\u0259rind\u0259n ilk ciddi q\u00fcsur u\u015faq haqq\u0131nda m\u0259lumat\u0131n HTTP protokolu vasit\u0259sil\u0259 a\u00e7\u0131q m\u0259tnl\u0259 \u00f6t\u00fcr\u00fclm\u0259si olub. Bel\u0259likl\u0259, n\u0259z\u0259ri olaraq, t\u0259cav\u00fczkarlar \u015f\u0259b\u0259k\u0259 trafikinin t\u0259hlili proqram\u0131ndan istifad\u0259 ed\u0259r\u0259k onu \u0259l\u0259 ke\u00e7ir\u0259 bil\u0259rl\u0259r. Amma HTTP protokolu robotun proqram t\u0259minat\u0131n\u0131 cari versiyaya yenil\u0259m\u0259zd\u0259n \u0259vv\u0259l istifad\u0259 edilib; yenil\u0259nm\u0259d\u0259n sonra HTTPS istifad\u0259si dayand\u0131r\u0131l\u0131b.<\/p>\n\n\n\n<p>M\u00fct\u0259x\u0259ssisl\u0259r b\u0259zi \u015f\u0259b\u0259k\u0259 sor\u011fular\u0131n\u0131 da ara\u015fd\u0131r\u0131b v\u0259 a\u015fkar edibl\u0259r ki, onlardan biri a\u015fa\u011f\u0131dak\u0131 autentifikasiya m\u0259lumatlar\u0131na \u0259saslanaraq API giri\u015f tokenini qaytar\u0131r: istifad\u0259\u00e7i ad\u0131, \u015fifr\u0259 v\u0259 a\u00e7ar. \u00dcst\u0259lik, bu, sor\u011fuda s\u0259rb\u0259st simvollar d\u0259stind\u0259n ibar\u0259t q\u0259sd\u0259n s\u0259hv \u015fifr\u0259 daxil edildiyi halda da ba\u015f verib.<\/p>\n\n\n\n<p>N\u00f6vb\u0259ti \u015f\u0259b\u0259k\u0259 sor\u011fusu unikal doqquz simvollu identifikatordan istifad\u0259 ed\u0259n x\u00fcsusi robot \u00fc\u00e7\u00fcn konfiqurasiya parametrl\u0259rini qaytar\u0131b. Lakin bu simvollar toplusu q\u0131sa v\u0259 proqnozla\u015fd\u0131r\u0131la bil\u0259n oldu\u011fundan, t\u0259cav\u00fczkarlar potensial olaraq onu tez bir zamanda g\u00f6t\u00fcr\u0259 v\u0259 n\u0259tic\u0259d\u0259 oyunca\u011f\u0131n sahibi haqq\u0131nda, o c\u00fcml\u0259d\u0259n IP \u00fcnvan\u0131, ya\u015fay\u0131\u015f \u00f6lk\u0259si, ad\u0131, cinsi v\u0259 ya\u015f\u0131 haqq\u0131nda m\u0259lumat\u0131, h\u0259m\u00e7inin ba\u015fqa bir sor\u011fu il\u0259 b\u00f6y\u00fckl\u0259rin e-po\u00e7t \u00fcnvan\u0131, telefon n\u00f6mr\u0259si v\u0259 mobil cihaz\u0131n\u0131 robotla \u0259laq\u0259l\u0259ndirm\u0259k \u00fc\u00e7\u00fcn kodu \u0259ld\u0259 ed\u0259 bil\u0259rdil\u0259r.<\/p>\n\n\n\n<p><strong>T\u0259cav\u00fczkarlardan g\u0259l\u0259n z\u0259ngl\u0259r<\/strong>. Video z\u0259ng seans\u0131n\u0131 qurark\u0259n laz\u0131mi t\u0259hl\u00fck\u0259sizlik yoxlamalar\u0131 m\u00f6vcud olmay\u0131b. T\u0259cav\u00fczkarlar valideynl\u0259rin hesab\u0131ndan veril\u0259n icaz\u0259 olmadan u\u015faqlara z\u0259ng etm\u0259k \u00fc\u00e7\u00fcn robotun kameras\u0131 v\u0259 mikrofonundan istifad\u0259 ed\u0259 bil\u0259rdil\u0259r. Bu v\u0259ziyy\u0259td\u0259, u\u015faq z\u0259ngi q\u0259bul ed\u0259rs\u0259, arzuolunmaz \u015f\u0259xsi b\u00f6y\u00fckl\u0259rin x\u0259b\u0259ri olmadan onunla \u00fcnsiyy\u0259t\u0259 ba\u015flaya bil\u0259r.<\/p>\n\n\n\n<p><strong>Uzaqdan n\u0259zar\u0259t.<\/strong> Alt\u0131 r\u0259q\u0259mli bird\u0259f\u0259lik \u015fifr\u0259ni b\u0259rpa etm\u0259k \u00fc\u00e7\u00fcn \u201cbrute-force\u201d-dan (\u015fifr\u0259l\u0259rin tam \u0259l\u0259 ke\u00e7irilm\u0259si) istifad\u0259 ed\u0259r\u0259k v\u0259 u\u011fursuz c\u0259hdl\u0259rin say\u0131nda he\u00e7 bir m\u0259hdudiyy\u0259t olmadan t\u0259cav\u00fczkar robotu valideynin hesab\u0131 \u0259v\u0259zin\u0259 \u00f6z hesab\u0131 il\u0259 uzaqdan \u0259laq\u0259l\u0259ndir\u0259 bil\u0259r. Bu halda, ba\u011flant\u0131n\u0131 qanuni \u015f\u0259kild\u0259 b\u0259rpa etm\u0259k \u00fc\u00e7\u00fcn istehsal\u00e7\u0131n\u0131n texniki d\u0259st\u0259yi il\u0259 \u0259laq\u0259 saxlamaq laz\u0131md\u0131r.<\/p>\n\n\n\n<p>Kaspersky istehsal\u00e7\u0131ya t\u0259hl\u00fck\u0259sizlik probleml\u0259ri bar\u0259d\u0259 m\u0259lumat verdikd\u0259n sonra onlar\u0131 aradan qald\u0131r\u0131l\u0131b.<\/p>\n\n\n\n<p>\u201cA\u011f\u0131ll\u0131 cihazlar alark\u0259n onlar\u0131n t\u0259kc\u0259 \u0259yl\u0259nc\u0259 v\u0259 t\u0259hsil funksiylar\u0131na deyil, h\u0259m d\u0259 t\u0259hl\u00fck\u0259sizlik s\u0259viyy\u0259sin\u0259 diqq\u0259t yetirm\u0259k laz\u0131md\u0131r. Bununla bel\u0259, qiym\u0259t\u0259 etibar etm\u0259m\u0259lisiniz &#8211; h\u0259tta \u0259n bahal\u0131 a\u011f\u0131ll\u0131 cihazlarda da t\u0259cav\u00fczkarlar t\u0259r\u0259find\u0259n istifad\u0259 edil\u0259 bil\u0259n z\u0259iflikl\u0259r ola bil\u0259r. Valideynl\u0259r\u0259 a\u011f\u0131ll\u0131 oyuncaqlar\u0131n icmallar\u0131n\u0131 diqq\u0259tl\u0259 \u00f6yr\u0259nm\u0259yi, proqram yenil\u0259m\u0259l\u0259ri il\u0259 ba\u011fl\u0131 x\u0259b\u0259rl\u0259ri izl\u0259m\u0259yi v\u0259 m\u00fcmk\u00fcns\u0259, \u00f6vlad\u0131 bel\u0259 qadcetl\u0259 \u0259laq\u0259 qurark\u0259n onu n\u0259zar\u0259td\u0259 saxlama\u011f\u0131 t\u00f6vsiy\u0259 edirik\u201d, &#8211; dey\u0259 Kaspersky ICS CERT-in ba\u015f elmi i\u015f\u00e7isi Nikolay Frolov bildirir.<\/p>\n\n\n\n<p>Ara\u015fd\u0131rman\u0131n nec\u0259 ke\u00e7irilm\u0259si v\u0259 onun n\u0259tic\u0259l\u0259ri haqq\u0131nda buradan \u0259trafl\u0131 \u00f6yr\u0259n\u0259 bil\u0259rsiniz:\u00a0<a href=\"https:\/\/securelist.ru\/smart-robot-security-research\/109035\/\" target=\"_blank\" rel=\"noopener\" title=\"\">securelist.ru\/smart-robot-security-research\/109035\/<\/a>.<\/p>\n\n\n\n<p>Kaspersky a\u011f\u0131ll\u0131 cihazlar, o c\u00fcml\u0259d\u0259n a\u011f\u0131ll\u0131 oyuncaqlar\u0131n sahibl\u0259rin\u0259 t\u00f6vsiy\u0259 edir:<\/p>\n\n\n\n<ul>\n<li>b\u00fct\u00fcn qo\u015fulmu\u015f cihazlar\u0131n funksionall\u0131q v\u0259 proqram t\u0259minat\u0131n\u0131 m\u00fct\u0259madi olaraq yenil\u0259yin, \u00e7\u00fcnki yenil\u0259m\u0259l\u0259r tez-tez m\u0259lum z\u0259iflikl\u0259ri aradan qald\u0131ran m\u00fch\u00fcm t\u0259hl\u00fck\u0259sizlik yamaqlar\u0131n\u0131 ehtiva edir;<\/li>\n\n\n\n<li>sat\u0131n almazdan \u0259vv\u0259l cihaz v\u0259 t\u0259rtibat\u00e7\u0131 haqq\u0131nda m\u0259lumatlar\u0131 \u00f6yr\u0259nin: \u00f6z\u00fcn\u00fc etibarl\u0131 istehsal\u00e7\u0131 kimi s\u00fcbuta yetirmi\u015f bazar oyun\u00e7ular\u0131na etibar etm\u0259k daha yax\u015f\u0131d\u0131r;<\/li>\n\n\n\n<li>a\u011f\u0131ll\u0131 cihaz\u0131 idar\u0259 etm\u0259k \u00fc\u00e7\u00fcn mobil proqramlara veril\u0259n icaz\u0259l\u0259r\u0259 bax\u0131n v\u0259 onlar\u0131 m\u0259hdudla\u015fd\u0131r\u0131n;<\/li>\n\n\n\n<li><a href=\"https:\/\/www.kaspersky.ru\/premium\" target=\"_blank\" rel=\"noopener\" title=\"\">etibarl\u0131 t\u0259hl\u00fck\u0259sizlik h\u0259ll\u0259rind\u0259n<\/a> istifad\u0259 ed\u0259r\u0259k a\u011f\u0131ll\u0131 qadcetl\u0259rin idar\u0259 olundu\u011fu mobil cihazlar\u0131n t\u0259hl\u00fck\u0259sizliyini t\u0259min edin.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky r\u0259q\u0259msal u\u015faq oyunca\u011f\u0131nda t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi a\u015fkar edib. Kaspersky t\u0259dqiqat\u00e7\u0131lar\u0131 u\u015faqlar \u00fc\u00e7\u00fcn interaktiv robotda potensial olaraq t\u0259cav\u00fczkarlara valideynl\u0259rin x\u0259b\u0259ri olmadan u\u015faqla \u00fcnsiyy\u0259t qurmaq \u00fc\u00e7\u00fcn oyuncaqdak\u0131 kameradan istifad\u0259 etm\u0259y\u0259 imkan ver\u0259 bil\u0259c\u0259k z\u0259iflikl\u0259r a\u015fkar edibl\u0259r. \u015eirk\u0259tin&#8230;<\/p>\n","protected":false},"author":2,"featured_media":11072,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/21480"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=21480"}],"version-history":[{"count":1,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/21480\/revisions"}],"predecessor-version":[{"id":21481,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/21480\/revisions\/21481"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/11072"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}