{"id":539,"date":"2014-04-11T18:01:39","date_gmt":"2014-04-11T15:01:39","guid":{"rendered":"http:\/\/sahinsolmaz.com\/blog\/?p=539"},"modified":"2022-06-30T12:01:42","modified_gmt":"2022-06-30T09:01:42","slug":"openssl-heartbleed-bug-guvenlik-acigi-yeni-fark-edildi","status":"publish","type":"post","link":"https:\/\/sahinsolmaz.com\/blog\/openssl-heartbleed-bug-guvenlik-acigi-yeni-fark-edildi\/","title":{"rendered":"OpenSSL Heartbleed Bug G\u00dcVENL\u0130K A\u00c7I\u011eI YEN\u0130 FARK ED\u0130LD\u0130!"},"content":{"rendered":"
En \u00e7ok bilinen web \u015fifreleme protokollerinden OpenSSL<\/strong>‘de b\u00fcy\u00fck bir a\u00e7\u0131k<\/strong> tespit edildi.<\/div>\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n
\n

Heartbleed Bug<\/strong> ad\u0131 verilen g\u00fcvenlik a\u00e7\u0131\u011f\u0131 nedeniyle, kriptolu<\/strong> mesajlar iletilirken, mesaj\u0131n \u015fifresini \u00e7\u00f6zecek anahtara \u00fc\u00e7\u00fcnc\u00fc ki\u015filer de eri\u015febiliyor.<\/p>\n

G\u00dcVENL\u0130K A\u00c7I\u011eI YEN\u0130 FARK ED\u0130LD\u0130<\/h4>\n

Banka hesab\u0131 ya da e-mail adreslerine eri\u015fim gibi hassas g\u00fcvenlik \u00f6nlemleri i\u00e7in kullan\u0131lan OpenSSL<\/strong> yaz\u0131l\u0131m\u0131, \u015fifreler bir sunucudan di\u011ferine transfer edilirken mesajlar\u0131n kriptolanmas\u0131n\u0131 sa\u011fl\u0131yor. \u0130nternet kullan\u0131c\u0131lar\u0131 \u015fifreli i\u015flemlerini yaparken, bu yaz\u0131l\u0131m\u0131 da fark\u0131nda olmadan kullanm\u0131\u015f oluyor.<\/p>\n

Yakla\u015f\u0131k iki y\u0131ld\u0131r var oldu\u011fu tahmin edilen, ancak yeni fark edilen g\u00fcvenlik a\u00e7\u0131\u011f\u0131 nedeniyle internet \u015firketleri harekete ge\u00e7ti.<\/p>\n

Google’\u0131n g\u00fcvenlik departman\u0131ndan yap\u0131lan a\u00e7\u0131klamada, bilgisayar korsanlar\u0131n\u0131n OpenSSL kullan\u0131c\u0131lar\u0131na d\u00fczenleyece\u011fi siber sald\u0131r\u0131larla \u00f6nemli \u015fifre bilgilerini ele ge\u00e7irebilece\u011fi ifade edildi.<\/p>\n

Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n \u015fu ana kadar istismar edilip edilmedi\u011fi ise bilinmiyor. Google’\u0131n bulunan g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kamuoyuyla payla\u015fmadan \u00f6nce \u00f6nemli servis sa\u011flay\u0131c\u0131lara iletti\u011fi ve sorunun giderildi\u011fi san\u0131l\u0131yor.<\/p>\n

“HAYAT\u0130 \u015e\u0130FRELER\u0130N\u0130Z\u0130 DE\u011e\u0130\u015eT\u0130R\u0130N”<\/h4>\n

Ancak yine de b\u00fcy\u00fck internet \u015firketlerinden kullan\u0131c\u0131lara \u015fifrelerin de\u011fi\u015ftirilmesi y\u00f6n\u00fcnde \u00e7a\u011fr\u0131lar yap\u0131l\u0131yor.<\/p>\n

Yahoo’nun blog platformu Tumblr, kullan\u0131c\u0131lar\u0131na\u00a0“Ba\u015fta bankac\u0131l\u0131k ve veri depolama sitelerinde olmak \u00fczere t\u00fcm hayati \u015fifrelerinizi de\u011fi\u015ftirin”<\/strong><\/em>\u00a0mesaj\u0131n\u0131 g\u00f6nderdi.<\/p>\n

BBC’nin sorular\u0131n\u0131 yan\u0131tlayan siber g\u00fcvenlik \u015firketi NCC Group da bulunan a\u00e7\u0131\u011f\u0131\u00a0“tehlikeli”<\/strong><\/em>olarak niteledi. \u015eirketin Y\u00f6netici ortaklar\u0131ndan Ollie Whitehouse, “Vasat d\u00fczeyde kod yazma bilgisi olan herhangi bir ki\u015fi siber sald\u0131r\u0131lar d\u00fczenleyerek \u00e7ok hassas bilgilere eri\u015febilir” dedi.<\/p>\n

“\u015e\u0130FRELER \u0130\u00c7\u0130N PAN\u0130\u011eE GEREK YOK”<\/h4>\n

D\u00fcnyadaki t\u00fcm internet kullan\u0131c\u0131lar\u0131n\u0131n \u015fifreleri y\u00fcz\u00fcnden pani\u011fe kap\u0131lmas\u0131n\u0131n yersiz olaca\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnenler de var.<\/p>\n

Cambridge<\/strong> \u00dcniversitesi Bilgisayar Laboratuvar\u0131’ndan yap\u0131lan a\u00e7\u0131klamada,\u00a0“Herkesin yapt\u0131\u011f\u0131 i\u015fi b\u0131rak\u0131p t\u00fcm \u015fifrelerini de\u011fi\u015ftirmesini istemek a\u015f\u0131r\u0131 bir tepki olur”\u00a0<\/strong><\/em>denildi ve \u015fu an i\u00e7in sadece d\u00fc\u015f\u00fck d\u00fczeyde bir risk bulundu\u011fu vurguland\u0131.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

En \u00e7ok bilinen web \u015fifreleme protokollerinden OpenSSL‘de b\u00fcy\u00fck bir a\u00e7\u0131k tespit edildi. Heartbleed Bug ad\u0131 verilen g\u00fcvenlik a\u00e7\u0131\u011f\u0131 nedeniyle, kriptolu mesajlar iletilirken, mesaj\u0131n \u015fifresini \u00e7\u00f6zecek anahtara \u00fc\u00e7\u00fcnc\u00fc ki\u015filer de eri\u015febiliyor. G\u00dcVENL\u0130K A\u00c7I\u011eI YEN\u0130 FARK ED\u0130LD\u0130 Banka hesab\u0131 ya da e-mail adreslerine eri\u015fim gibi hassas g\u00fcvenlik \u00f6nlemleri i\u00e7in kullan\u0131lan OpenSSL yaz\u0131l\u0131m\u0131, \u015fifreler bir sunucudan di\u011ferine transfer […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"enabled":false},"version":2}},"categories":[257,256,691,255],"tags":[566,565,564,260,259,258],"class_list":["post-539","post","type-post","status-publish","format-standard","hentry","category-acik","category-bug","category-cyber-security","category-guvenlik","tag-acik","tag-bug","tag-guvenlik","tag-guvenlik-acigi","tag-heartbleed-bug","tag-openssl"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4sbm9-8H","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/posts\/539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/comments?post=539"}],"version-history":[{"count":1,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/posts\/539\/revisions"}],"predecessor-version":[{"id":2013,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/posts\/539\/revisions\/2013"}],"wp:attachment":[{"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/media?parent=539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/categories?post=539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sahinsolmaz.com\/blog\/wp-json\/wp\/v2\/tags?post=539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}