{"id":76851,"date":"2020-04-05T07:42:20","date_gmt":"2020-04-05T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android"},"modified":"2020-04-05T07:42:20","modified_gmt":"2020-04-05T05:42:20","slug":"rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","title":{"rendered":"Tagapoolde anal\u00fc\u00fcsi tulemused Androidi rakendustes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Helmholtz'i Informatsioonitehnoloogia Kesktalituse (CISPA), Ohio \u00dclikooli ja New Yorgi \u00dclikooli teadlased l\u00e4bi<\/a><\/noindex> uuring varjatud funktsionaalsusest Androidi platvormi rakendustes. Anal\u00fc\u00fcsiti 100 000 mobiilirakendust Google Play kataloogist, 20 000 alternatiivses kataloogis (Baidu) ja 30 000 erinevatesse nutitelefonidesse eelinstallitud rakendust, mis on valitud 1000 SamMobile'i tarkvarast. n\u00e4itas<\/a><\/noindex>, et 12706 (8.5%) rakendust sisaldavad kasutaja jaoks varjatud, kuid spetsiifiliste j\u00e4rjestuste abil aktiveeritavat funktsionaalsust, mida saab seostada tagauksega. <\/p>\n

Kokkuv\u00f5ttes sisaldas 7584 rakendust sisseehitatud salajasi p\u00e4\u00e4sukoodide v\u00f5tmeid, 501 \u2013 sisseehitatud meistrisalas\u00f5nu ja 6013 \u2013 peidetud k\u00e4ske. Probleemseid rakendusi on k\u00f5igis vaadatud tarkvara allikates \u2013 protsentuaalselt on tagaukse avastatud 6,86% (6860) Google Play turul uuritud programmidest, 5,32% (1064) alternatiivsetest kataloogidest ja 15,96% (4788) eelinstallitud rakenduste loendist. Tuletatud tagauksega saavad k\u00f5ik, kes tunnevad v\u00f5tmeid, aktiveerimissalas\u00f5nu ja k\u00e4skude v\u00e4ljakutsumise j\u00e4rjestusi, ligip\u00e4\u00e4su rakendusele ja k\u00f5igile sellega seotud andmetele. <\/p>\n

N\u00e4iteks on spordim\u00e4ngude voogedastusrakenduses, millel on 5 miljonit paigaldust, avastatud sisseehitatud v\u00f5ti administraatori liidesele sisenemiseks, mis v\u00f5imaldab muuta rakenduse seadeid ja p\u00e4\u00e4seda juurde t\u00e4iendavale funktsionaalsusele. Lukustusekraani rakenduses, millel on 5 miljonit paigaldust, leiti juurdep\u00e4\u00e4su v\u00f5ti, mis v\u00f5imaldab seadmest lukustamise jaoks kasutaja seadistatud parooli l\u00e4htestada. T\u00f5lkerakenduses, millel on 1 miljon paigaldust, on olemas v\u00f5ti, mis v\u00f5imaldab teha rakenduse sees oste ja uuendada programmi pro-versiooniks ilma tegeliku makseta.<\/p>\n

Kaugjuhtimise rakenduses, mida on installitud 10 miljonit korda, leiti meistripasword, mis v\u00f5imaldab eemaldada kasutaja seatud lukustuse, mist\u00f5ttu seadme kadumise korral. M\u00e4rkmike haldamise rakenduses leiti meistripasword, mis v\u00f5imaldab avada salajasi m\u00e4rkmeid. Paljudes rakendustes leiti ka silumisre\u017eiime, mis avavad juurdep\u00e4\u00e4su madalama taseme funktsioonidele, n\u00e4iteks ostlemise rakenduses k\u00e4ivitati teatavat kombinatsiooni sisestamisel proksiserver ja \u00f5ppeprogrammis oli v\u00f5imalik testide l\u00e4bimist m\u00f6\u00f6da minna.<\/p>\n

Lisaks tagauksetele tuvastati 4028 (2,7%) rakenduses mustade nimekirjade olemasolu, mis on m\u00f5eldud kasutaja sissetuleva teabe tsenseerimiseks. Kasutatavad mustad nimekirjad sisaldavad loendeid keelatud s\u00f5nadest, sealhulgas poliitiliste parteide ja poliitikute nimedest, t\u00fc\u00fcpilistest v\u00e4ljenditest, mida kasutatakse teatud elanikkonna gruppide hirmutamiseks ja diskrimineerimiseks. Mustad nimekirjad leiti 1,98% uuritud Google Play rakendustest, 4,46% alternatiivsetest kataloogidest ja 3,87% eelinstallitud rakendustest.<\/p>\n

Anal\u00fc\u00fcsi l\u00e4biviimisel kasutati teadlaste loodud t\u00f6\u00f6riistu InputScope, mille kood peaks peagi olema avaldati<\/a><\/noindex> GitHubis (varem on teadlased juba avaldanud staatilise anal\u00fcsaatori LeakScope<\/a><\/noindex>, mis tuvastab automaatselt teabe leke rakendustes).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0410\u043d\u0430\u043b\u0438\u0437 100 \u0442\u044b\u0441\u044f\u0447 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Google Play, 20 \u0442\u044b\u0441\u044f\u0447 \u0438\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 (Baidu) \u0438 30 \u0442\u044b\u0441\u044f\u0447 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 1000 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 SamMobile, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e 12706 (8.5%) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76851","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tagauksete anal\u00fc\u00fcsi tulemused Androidi rakendustes | ProHoster","description":"Helmholtz'i Informatsioonitehnoloogia Kesktalituse (CISPA), Ohio \u00dclikooli ja New Yorgi \u00dclikooli teadlased","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-05T05:42:20+00:00","article:modified_time":"2020-04-05T05:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:28:29","updated":"2022-10-07 21:01:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=76851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=76851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=76851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=76851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}