\n<\/p>\n
Ak\u0131ll\u0131 telefonlar\u0131n gizlilik ihlalleri uzun s\u00fcredir tart\u0131\u015f\u0131l\u0131yor, ancak g\u00f6r\u00fcn\u00fc\u015fe g\u00f6re as\u0131l endi\u015felenmemiz gereken cihazlar evimizdeki ak\u0131ll\u0131 s\u00fcp\u00fcrgeler olabilir.<\/p>\n
Bilgisayar programc\u0131s\u0131 ve elektronik merakl\u0131s\u0131 Harishankar Narayanan, ki\u015fisel blogu Small World\u2019de payla\u015ft\u0131\u011f\u0131 yaz\u0131s\u0131nda, 300 dolarl\u0131k ak\u0131ll\u0131 s\u00fcp\u00fcrgesinin evinden gizlice veri g\u00f6nderdi\u011fini ortaya \u00e7\u0131kard\u0131.<\/p>\n
Narayanan, yakla\u015f\u0131k bir y\u0131ld\u0131r kulland\u0131\u011f\u0131 iLife A11 model s\u00fcp\u00fcrgenin \u201c\u015f\u00fcpheli davran\u0131\u015flar\u0131n\u0131\u201d fark edince cihaz\u0131n a\u011f trafi\u011fini incelemeye karar verdi.<\/p>\n
\u201cB\u0130RAZ PARANOYA \u0130Y\u0130D\u0130R\u201d<\/strong><\/p>\n \u201cBiraz paranoya iyidir\u201d diyen Narayanan, \u201cBu y\u00fczden her ak\u0131ll\u0131 cihazda yapt\u0131\u011f\u0131m gibi a\u011f trafi\u011fini izledim. Dakikalar i\u00e7inde d\u00fcnyan\u0131n \u00f6b\u00fcr ucundaki sunuculara s\u00fcrekli veri g\u00f6nderildi\u011fini fark ettim\u201d ifadelerini kulland\u0131.<\/p>\n S\u00fcp\u00fcrgenin, kendisinden onay al\u0131nmadan kullan\u0131m kay\u0131tlar\u0131 ve sens\u00f6r verilerini \u00fcretici firmaya iletti\u011fini belirten m\u00fchendis, \u201cBunun \u00fczerine ilk hamlemi yapt\u0131m: Veri g\u00f6ndermesini durdurdum\u201d dedi.<\/p>\n Narayanan, cihaz\u0131n yaln\u0131zca g\u00fcncelleme trafi\u011fini a\u00e7\u0131k b\u0131rakt\u0131, ancak birka\u00e7 g\u00fcn sonra s\u00fcp\u00fcrge \u00e7al\u0131\u015fmay\u0131 tamamen kesti. Servise g\u00f6nderdi\u011finde cihaz\u0131n \u201corada sorunsuz \u00e7al\u0131\u015ft\u0131\u011f\u0131\u201d s\u00f6ylendi, ancak her seferinde eve d\u00f6nd\u00fckten birka\u00e7 g\u00fcn sonra yeniden bozuldu. Garanti s\u00fcresi doldu\u011funda servis yard\u0131m\u0131 da sona erdi.<\/p>\n M\u00fchendis \u201c300 dolarl\u0131k ak\u0131ll\u0131 s\u00fcp\u00fcrgem bir anda metal y\u0131\u011f\u0131n\u0131na d\u00f6n\u00fc\u015ft\u00fc\u201d diye yazd\u0131.<\/p>\n C\u0130HAZI S\u00d6K\u00dcP \u0130NCELED\u0130<\/strong><\/p>\n Merak\u0131 iyice artan m\u00fchendis, cihaz\u0131 s\u00f6k\u00fcp incelemeye ba\u015flad\u0131. Devre kartlar\u0131n\u0131 yeniden bast\u0131, sens\u00f6rleri test etti ve sonunda \u015foke edici bir bulguya ula\u015ft\u0131: S\u00fcp\u00fcrgede Android Debug Bridge (ADB) sistemi tamamen a\u00e7\u0131k durumdayd\u0131. Bu, cihaz\u0131n herhangi bir g\u00fcvenlik korumas\u0131 olmadan d\u0131\u015far\u0131dan eri\u015filebilir oldu\u011fu anlam\u0131na geliyordu.<\/p>\n \u201cDakikalar i\u00e7inde tam y\u00f6netici eri\u015fimi elde ettim. Ne bir hack, ne bir a\u00e7\u0131k. Sadece tak ve \u00e7al\u0131\u015ft\u0131r\u201d diyen Narayanan, s\u00fcp\u00fcrgenin yaz\u0131l\u0131m\u0131na ba\u011flanmay\u0131 ba\u015fard\u0131.<\/p>\n