{"id":24365,"date":"2010-05-04T00:00:00","date_gmt":"2010-05-04T00:00:00","guid":{"rendered":"https:\/\/alienroad.com\/google-bilgi-bankasi\/do-know-evil\/"},"modified":"2010-05-04T00:00:00","modified_gmt":"2010-05-04T00:00:00","slug":"do-know-evil","status":"publish","type":"ar_kb","link":"https:\/\/alienroad.com\/google-bilgi-bankasi\/do-know-evil\/","title":{"rendered":"K\u00f6t\u00fcl\u00fc\u011f\u00fc tan\u0131"},"content":{"rendered":"<aside class=\"key-point\">Bu blog yaz\u0131s\u0131n\u0131 yay\u0131nlayal\u0131 uzun zaman oldu. Bilgilerin bir k\u0131sm\u0131 g\u00fcncelli\u011fini yitirmi\u015f olabilir (\u00f6rne\u011fin, baz\u0131 g\u00f6rseller eksik olabilir ve baz\u0131 ba\u011flant\u0131lar art\u0131k \u00e7al\u0131\u015fm\u0131yor olabilir).<\/aside>\n<p class=\"gargardate\">4 May\u0131s 2010, Sal\u0131<\/p>\n<p>\n  <i><br \/>\n    <a href=\"https:\/\/googleonlinesecurity.blogspot.com\/2010\/05\/do-know-evil-web-application\" class=\"external-link\">Google Online Security Blog<\/a> \u00fczerinde e\u015f zamanl\u0131 yay\u0131nlanm\u0131\u015ft\u0131r.<br \/>\n  <\/i>\n<\/p>\n<aside class=\"note\">\n  G\u00dcNCELLEME 13 Temmuz: Codelab uygulamas\u0131n\u0131n ad\u0131n\u0131 Gruyere olarak de\u011fi\u015ftirdik. Codelab&#8217;e art\u0131k<br \/>\n  <a href=\"https:\/\/google-gruyere.appspot.com\/\" class=\"external-link\">https:\/\/google-gruyere.appspot.com<\/a><br \/>\n  adresinden ula\u015fabilirsiniz.<br \/>\n<\/aside>\n<p>\n  Googler&#8217;lar\u0131n hizmetlerimizin kar\u015f\u0131 kar\u015f\u0131ya oldu\u011fu tehditleri ve bu tehditlere kar\u015f\u0131 nas\u0131l korunacaklar\u0131n\u0131 sa\u011flam bir \u015fekilde anlamalar\u0131n\u0131 istiyoruz. Bu hedeflere yeni m\u00fchendisler i\u00e7in g\u00fcvenlik e\u011fitimleri, g\u00fcvenlikle ilgili teknik sunumlar ve di\u011fer dok\u00fcmantasyon t\u00fcrleri dahil olmak \u00fczere \u00e7e\u015fitli yollarla ula\u015f\u0131yoruz. Ayr\u0131ca, kat\u0131l\u0131mc\u0131lara belirli programlama g\u00f6revlerinde rehberlik eden interaktif programlama e\u011fitimleri olan codelab&#8217;leri de kullan\u0131yoruz.\n<\/p>\n<p>\n  \u00d6zellikle bir codelab, geli\u015ftiricilere yayg\u0131n web uygulamas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 \u00f6\u011fretmektedir. &#8220;Bir hacker&#8217;\u0131 yakalamak i\u00e7in bir hacker gibi d\u00fc\u015f\u00fcnmek gerekir&#8221; anlay\u0131\u015f\u0131yla, bu codelab ayn\u0131 zamanda bir sald\u0131rgan\u0131n bu t\u00fcr a\u00e7\u0131klar\u0131 nas\u0131l istismar edebilece\u011fini de g\u00f6stermektedir.\n<\/p>\n<p>\n  Yaz\u0131l\u0131m geli\u015ftiricilerin kendi uygulamalar\u0131ndaki benzer kusurlar\u0131 daha iyi tan\u0131malar\u0131na, d\u00fczeltmelerine ve bunlardan ka\u00e7\u0131nmalar\u0131na yard\u0131mc\u0131 olmak i\u00e7in bug\u00fcn<br \/>\n  <a href=\"https:\/\/code.google.com\/edu\" class=\"external-link\">Google Code University<\/a> ve<br \/>\n  <a href=\"https:\/\/www.googlelabs.com\/\" class=\"external-link\">Google Labs<\/a><br \/>\n  ile koordineli olarak &#8220;Web Uygulamas\u0131 \u0130stismarlar\u0131 ve Savunmalar\u0131&#8221; ba\u015fl\u0131kl\u0131 bu codelab&#8217;i yay\u0131nl\u0131yoruz. Codelab, bir\u00e7ok g\u00fcvenlik a\u00e7\u0131\u011f\u0131 i\u00e7erecek \u015fekilde tasarlanm\u0131\u015f, k\u00fc\u00e7\u00fck ancak tam \u00f6zellikli bir mikroblog uygulamas\u0131 olan Gruyere etraf\u0131nda olu\u015fturulmu\u015ftur. Laboratuvar\u0131n kapsad\u0131\u011f\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131 aras\u0131nda siteler aras\u0131 betik \u00e7al\u0131\u015ft\u0131rma (XSS), siteler aras\u0131 istek sahtecili\u011fi (XSRF) ve siteler aras\u0131 betik dahil etme (XSSI) ile istemci durumu manip\u00fclasyonu, yol ge\u00e7i\u015fi (path traversal) ve AJAX ile yap\u0131land\u0131rma a\u00e7\u0131klar\u0131 yer almaktad\u0131r. Ayr\u0131ca basit hatalar\u0131n bilgi if\u015fas\u0131na, hizmet reddine ve uzaktan kod y\u00fcr\u00fctmeye nas\u0131l yol a\u00e7abilece\u011fini de g\u00f6stermektedir.\n<\/p>\n<p>\n  &#8220;Yeterince g\u00f6z oldu\u011funda, t\u00fcm hatalar y\u00fczeyseldir&#8221; \u00f6zdeyi\u015fi, ancak bu g\u00f6zler neye bakacaklar\u0131n\u0131 biliyorlarsa do\u011frudur. Bu ama\u00e7la, Gruyere&#8217;deki g\u00fcvenlik a\u00e7\u0131klar\u0131, di\u011fer bir\u00e7ok uygulamadakiler gibi ger\u00e7ek hatalard\u0131r. Gruyere kaynak kodu, Creative Commons lisans\u0131 alt\u0131nda yay\u0131nlanm\u0131\u015ft\u0131r ve whitebox hacking egzersizlerinde veya g\u00fcvenlik, yaz\u0131l\u0131m m\u00fchendisli\u011fi ya da genel yaz\u0131l\u0131m geli\u015ftirme konular\u0131n\u0131 kapsayan bilgisayar bilimi derslerinde kullan\u0131m i\u00e7in mevcuttur.\n<\/p>\n<p>\n  Ba\u015flamak i\u00e7in<br \/>\n  <a href=\"https:\/\/google-gruyere.appspot.com\/\" class=\"external-link\">https:\/\/google-gruyere.appspot.com\/<\/a><br \/>\n  adresini ziyaret edin. Codelab&#8217;i kullanmaya y\u00f6nelik e\u011fitmen k\u0131lavuzuna art\u0131k<br \/>\n  <a href=\"https:\/\/code.google.com\/edu\/security\/index\" class=\"external-link\">Google Code University<\/a><br \/>\n  \u00fczerinden ula\u015fabilirsiniz.\n<\/p>\n<p class=\"byline-author\">Yazan: Bruce Leban, Yaz\u0131l\u0131m M\u00fchendisi<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bu blog yaz\u0131s\u0131n\u0131 yay\u0131nlayal\u0131 uzun zaman oldu. Bilgilerin bir k\u0131sm\u0131 g\u00fcncelli\u011fini yitirmi\u015f olabilir (\u00f6rne\u011fin, baz\u0131 g\u00f6rseller eksik olabilir ve baz\u0131 ba\u011flant\u0131lar art\u0131k \u00e7al\u0131\u015fm\u0131yor olabilir). 4 May\u0131s 2010, Sal\u0131 Google Online Security Blog \u00fczerinde e\u015f zamanl\u0131 yay\u0131nlanm\u0131\u015ft\u0131r. G\u00dcNCELLEME 13 Temmuz: Codelab uygulamas\u0131n\u0131n ad\u0131n\u0131 Gruyere olarak de\u011fi\u015ftirdik. Codelab&#8217;e art\u0131k https:\/\/google-gruyere.appspot.com adresinden ula\u015fabilirsiniz. Googler&#8217;lar\u0131n hizmetlerimizin kar\u015f\u0131 kar\u015f\u0131ya oldu\u011fu [&hellip;]<\/p>\n","protected":false},"menu_order":85267,"template":"","meta":{"footnotes":""},"ar_kb_kategori":[665],"ar_kb_etiket":[],"class_list":["post-24365","ar_kb","type-ar_kb","status-publish","has-post-thumbnail","hentry","ar_kb_kategori-blog"],"_links":{"self":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_kb\/24365","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_kb"}],"about":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/types\/ar_kb"}],"version-history":[{"count":0,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_kb\/24365\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/media\/26795"}],"wp:attachment":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/media?parent=24365"}],"wp:term":[{"taxonomy":"ar_kb_kategori","embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_kb_kategori?post=24365"},{"taxonomy":"ar_kb_etiket","embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_kb_etiket?post=24365"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}