{"id":5690,"date":"2025-11-08T19:17:11","date_gmt":"2025-11-08T19:17:11","guid":{"rendered":"https:\/\/demo.sheikhrehman.com\/x1\/yukl%c9%99m%c9%99-qurasdirmasini-s%c9%99hvsiz-baglayin\/"},"modified":"2025-11-08T19:17:11","modified_gmt":"2025-11-08T19:17:11","slug":"yukl%c9%99m%c9%99-qurasdirmasini-s%c9%99hvsiz-baglayin","status":"publish","type":"post","link":"https:\/\/demo.sheikhrehman.com\/x1\/yukl%c9%99m%c9%99-qurasdirmasini-s%c9%99hvsiz-baglayin\/","title":{"rendered":"Y\u00fckl\u0259m\u0259 qura\u015fd\u0131rmas\u0131n\u0131 s\u0259hvsiz ba\u011flay\u0131n"},"content":{"rendered":"

Qura\u015fd\u0131rma m\u0259nb\u0259yi v\u0259 format\u0131: Pin Up y\u00fckl\u0259m\u0259k harada t\u0259hl\u00fck\u0259sizdir v\u0259 hans\u0131 qura\u015fd\u0131rma variant\u0131n\u0131 se\u00e7m\u0259liy\u0259m (APK, PWA, AppGallery)?<\/strong>
 <\/h2>\n

T\u0259hl\u00fck\u0259siz qura\u015fd\u0131rma kanal\u0131 v\u0259 d\u00fczg\u00fcn format se\u00e7imi (APK https:\/\/pinup-az2.com\/<\/a> , PWA, AppGallery) s\u0259hv ehtimal\u0131n\u0131, \u0259m\u0259liyyat sabitliyini v\u0259 istifad\u0259\u00e7i \u00fc\u00e7\u00fcn risk s\u0259viyy\u0259sini m\u00fc\u0259yy\u0259n edir. T\u0259hl\u00fck\u0259siz y\u00fckl\u0259m\u0259 \u00fc\u00e7\u00fcn \u0259sas TLS 1.2 (IETF RFC 5246, 2008) v\u0259 TLS 1.3 (IETF RFC 8446, 2018) cari versiyalar\u0131 il\u0259 HTTPS-in istifad\u0259si v\u0259 NIST FIPS 180-184 t\u0259r\u0259find\u0259n standartla\u015fd\u0131r\u0131lm\u0131\u015f SHA-256 istifad\u0259 ed\u0259r\u0259k fayl b\u00fct\u00f6vl\u00fcy\u00fcn\u00fcn yoxlan\u0131lmas\u0131d\u0131r. MDB regionunda mobil h\u00fccumlar tez-tez saxta APK-l\u0259rd\u0259n istifad\u0259 edir; Kaspersky Security Bulletin-\u0259 (2022) g\u00f6r\u0259, qeyd\u0259 al\u0131nm\u0131\u015f mobil insidentl\u0259rin t\u0259xmin\u0259n 14%-i qeyri-r\u0259smi m\u0259nb\u0259l\u0259rd\u0259n \u0259ld\u0259 edil\u0259n paylamalarla ba\u011fl\u0131d\u0131r. Praktik hal: Android 10-da messencerd\u0259ki ke\u00e7idd\u0259n APK y\u00fckl\u0259m\u0259k “Fayl pozulub” x\u0259tas\u0131 il\u0259 n\u0259tic\u0259l\u0259ndi; R\u0259smi domend\u0259n yenid\u0259n y\u00fckl\u0259m\u0259, SHA-256-n\u0131n burax\u0131l\u0131\u015f s\u0259hif\u0259sind\u0259ki istinadla yoxlan\u0131lmas\u0131 v\u0259 sertifikat z\u0259ncirinin etibarl\u0131l\u0131\u011f\u0131n\u0131n t\u0259sdiql\u0259nm\u0259si MITM riskini aradan qald\u0131rd\u0131 v\u0259 qura\u015fd\u0131rman\u0131 s\u0259hvsiz ba\u015fa \u00e7atd\u0131rd\u0131. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n qura\u015fd\u0131rma, gizli d\u0259yi\u015fiklikl\u0259rin azald\u0131lmas\u0131 ehtimal\u0131 v\u0259 d\u00fczg\u00fcn yenil\u0259m\u0259 funksionall\u0131\u011f\u0131d\u0131r.<\/p>\n

Az\u0259rbaycanda APK, PWA v\u0259 AppGallery aras\u0131nda se\u00e7im cihazdan v\u0259 onun funksionall\u0131q, yenil\u0259m\u0259l\u0259r v\u0259 sistem siyas\u0259tl\u0259rin\u0259 dair t\u0259l\u0259bl\u0259rind\u0259n as\u0131l\u0131d\u0131r. GMS il\u0259 Android-d\u0259 yerli APK, Android APK \u0130mza Sxemi v2 (Android 7.0, Google Android Developers, 2016-da t\u0259qdim edilib) v\u0259 v3 (Android 9.0, Google Android Developers, 2018-d\u0259 geni\u015fl\u0259ndirilmi\u015f) \u0259sas\u0131nda sistem funksiyalar\u0131na tam giri\u015fi t\u0259min edir, bu da imza uy\u011funsuzlu\u011fu s\u0259b\u0259bind\u0259n u\u011fursuzluqlar\u0131 azald\u0131r. iOS-da PWA-lar xidm\u0259t i\u015f\u00e7il\u0259rinin iOS 11.3-d\u0259 (Apple WebKit, 2018) t\u0259tbiqi il\u0259 etibarl\u0131 oldu v\u0259 iOS 16.4 (Apple, 2023) il\u0259 Web Push t\u0259qdim edildi v\u0259 bildiri\u015f bo\u015flu\u011funu doldurdu; Statista (2023) g\u00f6r\u0259, iri e-ticar\u0259t xidm\u0259tl\u0259rinin t\u0259xmin\u0259n 9%-i PWA-lar\u0131 iOS \u00fc\u00e7\u00fcn \u0259sas \u00e7atd\u0131r\u0131lma kanal\u0131 kimi istifad\u0259 edir ki, bu da yana\u015fman\u0131n yetkinliyini g\u00f6st\u0259rir. GMS olmayan Huawei cihazlar\u0131nda AppGallery \u00fcst\u00fcnl\u00fck t\u0259\u015fkil edir: ma\u011faza avtomatik yenil\u0259m\u0259l\u0259r v\u0259 b\u00fct\u00f6vl\u00fck yoxlan\u0131\u015flar\u0131n\u0131 t\u0259min ed\u0259r\u0259k, \u0259l il\u0259 “Nam\u0259lum m\u0259nb\u0259l\u0259r” icaz\u0259l\u0259rin\u0259 ehtiyac\u0131 azald\u0131r. Huawei P40 (EMUI 12) n\u00fcmun\u0259sind\u0259 AppGallery vasit\u0259sil\u0259 qura\u015fd\u0131rma yax\u015f\u0131 i\u015fl\u0259di, APK-n\u0131n \u0259l il\u0259 qura\u015fd\u0131r\u0131lmas\u0131 is\u0259 icaz\u0259l\u0259rin aktivl\u0259\u015fdirilm\u0259sini v\u0259 daxili t\u0259hl\u00fck\u0259sizliyi m\u00fcv\u0259qq\u0259ti z\u0259ifl\u0259tm\u0259sini t\u0259l\u0259b etdi. N\u0259tic\u0259 u\u011fursuzluqlar\u0131n daha az ehtimal\u0131 v\u0259 \u015f\u0259ffaf yenil\u0259m\u0259 tarix\u00e7\u0259sidir.<\/p>\n

R\u0259smi vebsayt\u0131n v\u0259 t\u0259hl\u00fck\u0259siz g\u00fczg\u00fcn\u00fcn identifikasiyas\u0131 yoxlan\u0131la bil\u0259n atributlara \u0259saslan\u0131r: tan\u0131nm\u0131\u015f CA-dan etibarl\u0131 SSL sertifikat z\u0259nciri, d\u00fczg\u00fcn HTTPS\/TLS konfiqurasiyas\u0131 v\u0259 brendin domen zonas\u0131nda proqnozla\u015fd\u0131r\u0131la bil\u0259n y\u00f6nl\u0259ndirm\u0259 davran\u0131\u015f\u0131. Fi\u015finq, ISO\/IEC 27032:2012-d\u0259 m\u00fc\u0259yy\u0259n edildiyi kimi, t\u0259cav\u00fczkar\u0131n m\u0259lumatlar\u0131 o\u011furlamaq \u00fc\u00e7\u00fcn vebsayt\u0131 saxtala\u015fd\u0131rd\u0131\u011f\u0131 sosial m\u00fch\u0259ndislik texnikas\u0131d\u0131r. Anti-Fi\u015finq \u0130\u015f\u00e7i Qrupunun (APWG, 2022) m\u0259lumat\u0131na g\u00f6r\u0259, veb-platformalara edil\u0259n h\u00fccumlar\u0131n say\u0131 illik m\u00fcqayis\u0259d\u0259 61% artaraq domen v\u0259 sertifikatlar\u0131n yoxlan\u0131lmas\u0131n\u0131n vacibliyini t\u0259sdiql\u0259yir. Az\u0259rbaycan\u0131n mobil \u015f\u0259b\u0259k\u0259l\u0259rind\u0259 (Azercell, Bakcell, Nar) DNS qeyri-sabitliyi m\u00fcmk\u00fcnd\u00fcr: \u015f\u00fcbh\u0259li domenl\u0259rd\u0259 ox\u015far dizaynlar brend kimi maskalan\u0131r v\u0259 sertifikatlar \u00e7ox vaxt az tan\u0131nan CA-lar t\u0259r\u0259find\u0259n verilir v\u0259 q\u0131sa m\u00fcdd\u0259t\u0259 malikdir. Praktik bir n\u00fcmun\u0259: bir h\u0259ft\u0259 \u0259rzind\u0259 sertifikat\u0131 ba\u015fa \u00e7atan subdomen\u0259 ke\u00e7id v\u0259 markaya uy\u011fun g\u0259lm\u0259y\u0259n sahibi t\u0259\u015fkilat fi\u015finqin kifay\u0259t q\u0259d\u0259r g\u00f6st\u0259ricil\u0259ri idi; etibarl\u0131 z\u0259ncir v\u0259 HSTS il\u0259 \u0259sas domen\u0259 qay\u0131tmaq riski aradan qald\u0131rd\u0131 v\u0259 d\u00fczg\u00fcn y\u00fckl\u0259m\u0259ni b\u0259rpa etdi.<\/p>\n

APK imzas\u0131n\u0131n v\u0259 hash-in yoxlanmas\u0131 fayllar\u0131n d\u0259yi\u015fdirilm\u0259sinin v\u0259 b\u00fct\u00f6vl\u00fcy\u00fcn pozulmas\u0131n\u0131n qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn \u0259sas mexanizmdir. NIST FIPS 180-4 (2015) standart\u0131ndan SHA-256 ist\u0259nil\u0259n ikili modifikasiyan\u0131n a\u015fkarlanmas\u0131na imkan verir; m\u00fcvafiq prosedura yerli hash hesablanmas\u0131 v\u0259 r\u0259smi burax\u0131l\u0131\u015f s\u0259hif\u0259sind\u0259 istinad d\u0259y\u0259ri il\u0259 m\u00fcqayis\u0259, h\u0259m\u00e7inin qura\u015fd\u0131rma zaman\u0131 APK \u0130mza Sxemi v2\/v3 istifad\u0259 ed\u0259r\u0259k imzan\u0131n yoxlan\u0131lmas\u0131 daxildir. \u0130mza uy\u011funsuzlu\u011fu tez-tez t\u0259f\u0259rr\u00fcatl\u0131 kod olmadan “qura\u015fd\u0131rmamaq” kimi \u00f6z\u00fcn\u00fc g\u00f6st\u0259r\u0259n u\u011fursuzlu\u011fa s\u0259b\u0259b olur – bu, Android 7+ (Google Android Developers, 2016\/2018) \u00fcz\u0259rind\u0259 normal qura\u015fd\u0131r\u0131c\u0131 davran\u0131\u015f\u0131d\u0131r. 2019-cu ild\u0259 Google T\u0259hl\u00fck\u0259sizlik Bloqu imza pozuntular\u0131 v\u0259 \u015f\u00fcbh\u0259li paket modifikasiyalar\u0131 (Google T\u0259hl\u00fck\u0259sizlik Blogu, 2019) olan iyirmid\u0259n \u00e7ox proqram\u0131n kataloqdan silindiyini, imza v\u0259 hash yoxlamas\u0131n\u0131n z\u0259ruriliyini t\u0259sdiql\u0259diyini bildirdi. Case study: Android 9-da SHA-256 uy\u011funlu\u011fu v\u0259 etibarl\u0131 imza saxta antivirus x\u0259b\u0259rdarl\u0131qlar\u0131n\u0131 aradan qald\u0131rd\u0131; qura\u015fd\u0131rmadan sonra m\u00fchafiz\u0259 b\u0259rpa olundu v\u0259 i\u015fl\u0259m\u0259 problemsiz oldu.<\/p>\n

Fi\u015finq v\u0259 t\u0259hl\u00fck\u0259li y\u00f6nl\u0259ndirm\u0259 riskl\u0259ri ciddi SSL v\u0259 domen yoxlan\u0131\u015f\u0131, el\u0259c\u0259 d\u0259 etibars\u0131z kanallardan olan ke\u00e7idl\u0259ri r\u0259dd etm\u0259kl\u0259 minimuma endirilir. HSTS d\u0259st\u0259yi HTTP-y\u0259 endirm\u0259l\u0259rin qar\u015f\u0131s\u0131n\u0131 al\u0131r (IETF RFC 6797, 2012), lakin IDN homoqraflar\u0131 v\u0259 \u00e7\u0259r\u00e7iv\u0259 \u0259lav\u0259l\u0259ri il\u0259 h\u00fccumlar h\u0259l\u0259 d\u0259 ba\u015f verir; OWASP (Top 10, 2021\u20132023 yenil\u0259m\u0259l\u0259ri) h\u0259r ke\u00e7idd\u0259 \u00fcnvan \u00e7ubu\u011funu yoxlama\u011f\u0131 v\u0259 giri\u015f formalar\u0131n\u0131n ba\u015fqa domend\u0259n t\u0259qdim olundu\u011fu s\u0259hif\u0259l\u0259rd\u0259n qa\u00e7ma\u011f\u0131 t\u00f6vsiy\u0259 edir. Az\u0259rbaycanda CERT-AZ qumar xidm\u0259tl\u0259rinin saxta g\u00fczg\u00fc saytlar\u0131 il\u0259 kampaniyalar\u0131 qeyd\u0259 al\u0131b, burada y\u00f6nl\u0259ndirm\u0259l\u0259r orijinal domeni maskalayan iframel\u0259ri olan s\u0259hif\u0259l\u0259r\u0259 g\u0259tirib \u00e7\u0131xar\u0131b (CERT-AZ, 2021). Bir n\u00fcmun\u0259 ara\u015fd\u0131rmas\u0131nda bak\u0131l\u0131 bir istifad\u0259\u00e7i domenl\u0259r aras\u0131 iframe vasit\u0259sil\u0259 y\u00fckl\u0259nmi\u015f loginl\u0259 qar\u015f\u0131la\u015fd\u0131. Ke\u015fi\/kukil\u0259ri t\u0259mizl\u0259m\u0259k, ni\u015fan\u0131 ba\u011flamaq v\u0259 \u0259sas domen\u0259 ke\u00e7id PWA-n\u0131n d\u00fczg\u00fcn i\u015fl\u0259m\u0259sini b\u0259rpa etdi v\u0259 xidm\u0259t i\u015f\u00e7isinin saxtakarl\u0131\u011f\u0131n\u0131 aradan qald\u0131rd\u0131.<\/p>\n

Qura\u015fd\u0131rma format\u0131 yenil\u0259m\u0259 davran\u0131\u015f\u0131n\u0131 v\u0259 \u0259m\u0259liyyat m\u00fcbadil\u0259l\u0259rini m\u00fc\u0259yy\u0259n edir. APK-lar \u0259l il\u0259 v\u0259 ya qura\u015fd\u0131r\u0131lm\u0131\u015f proqramdaxili yenil\u0259yici vasit\u0259sil\u0259 yenil\u0259nir; AppGallery yenilikl\u0259ri Huawei t\u0259r\u0259find\u0259 imza v\u0259 b\u00fct\u00f6vl\u00fck yoxlan\u0131\u015f\u0131 il\u0259 ma\u011faza mexanizmi vasit\u0259sil\u0259 idar\u0259 edir v\u0259 m\u00fcnaqi\u015f\u0259 ehtimal\u0131n\u0131 azald\u0131r. PWA-lar xidm\u0259t i\u015f\u00e7isi vasit\u0259sil\u0259 yenil\u0259nir: yeni versiyalar yenid\u0259n ba\u015flad\u0131qdan sonra aktivl\u0259\u015fdirilir v\u0259 ke\u015f siyas\u0259tin\u0259 Cache Storage API (W3C\/WHATWG, cari t\u00f6vsiy\u0259l\u0259r 2020\u20132024) t\u0259r\u0259find\u0259n n\u0259zar\u0259t edilir. Qumar s\u0259nayesind\u0259 orta yenil\u0259m\u0259 d\u00f6vr\u00fc 4-6 h\u0259ft\u0259dir (SensorTower, 2022), bu o dem\u0259kdir ki, vaxta\u015f\u0131r\u0131 qura\u015fd\u0131rma yoxlamas\u0131 laz\u0131md\u0131r. Praktik bir n\u00fcmun\u0259: iOS 15-d\u0259 k\u00f6hn\u0259lmi\u015f xidm\u0259t i\u015f\u00e7isi UI yenil\u0259m\u0259l\u0259rini bloklad\u0131; Safari-d\u0259 domen \u00fc\u00e7\u00fcn ke\u015fin t\u0259mizl\u0259nm\u0259si, q\u0131sayolun \u0259sas ekrana yenid\u0259n \u0259lav\u0259 edilm\u0259si v\u0259 brauzerin yenid\u0259n i\u015f\u0259 sal\u0131nmas\u0131 PWA-n\u0131 i\u015fl\u0259k v\u0259ziyy\u0259t\u0259 qaytararaq d\u0259st\u0259k biletl\u0259rinin say\u0131n\u0131 azald\u0131r.<\/p>\n

 R\u0259smi veb-sayt\u0131 v\u0259 t\u0259hl\u00fck\u0259siz g\u00fczg\u00fcn\u00fc fi\u015finqd\u0259n nec\u0259 ay\u0131rd etm\u0259k olar?<\/strong><\/h3>\n

Qanunilik meyarlar\u0131na tan\u0131nm\u0131\u015f CA-dan etibarl\u0131 SSL sertifikat\u0131, d\u00fczg\u00fcn etibar z\u0259nciri v\u0259 TLS 1.2\/1.3 d\u0259st\u0259yi, h\u0259m\u00e7inin proqnozla\u015fd\u0131r\u0131la bil\u0259n domen strukturu v\u0259 HSTS siyas\u0259ti daxildir. Fi\u015finq ISO\/IEC 27032:2012 t\u0259r\u0259find\u0259n m\u0259xfi m\u0259lumatlar\u0131n \u0259ld\u0259 edilm\u0259si \u00fc\u00e7\u00fcn resursun saxtala\u015fd\u0131r\u0131lmas\u0131 kimi m\u00fc\u0259yy\u0259n edilmi\u015fdir; APWG hesabat\u0131na (2022) g\u00f6r\u0259 insidentl\u0259rin 61% artmas\u0131 h\u0259r d\u0259f\u0259 APK y\u00fckl\u0259n\u0259nd\u0259 v\u0259 ya PWA qura\u015fd\u0131r\u0131ld\u0131qda domen ad\u0131n\u0131n v\u0259 sertifikat\u0131n yoxlanmas\u0131n\u0131n z\u0259ruriliyini t\u0259sdiql\u0259yir. WHOIS m\u0259lumatlar\u0131 bu yax\u0131nlarda qeyd\u0259 al\u0131nm\u0131\u015f klon domenl\u0259rini m\u00fc\u0259yy\u0259n etm\u0259y\u0259 k\u00f6m\u0259k edir v\u0259 t\u0259\u015fkilatla sertifikatdak\u0131 marka ad\u0131 aras\u0131nda uy\u011funsuzluq saxtakarl\u0131\u011f\u0131n \u0259lam\u0259tidir. Praktik bir v\u0259ziyy\u0259t: q\u0131sa SSL istifad\u0259 tarixi v\u0259 nam\u0259lum CA il\u0259 subdomainin a\u015fkarlanmas\u0131 – endirm\u0259nin dayand\u0131r\u0131lmas\u0131, \u0259sas domen\u0259 qay\u0131tmas\u0131 v\u0259 hash\u0131n yoxlanmas\u0131 – riskl\u0259ri aradan qald\u0131rd\u0131 v\u0259 d\u00fczg\u00fcn qura\u015fd\u0131rman\u0131 t\u0259min etdi.<\/p>\n

\u0130stiqam\u0259tl\u0259ndirm\u0259l\u0259rin v\u0259 statik m\u0259zmunun davran\u0131\u015f\u0131 yoxlaman\u0131n ikinci s\u0259viyy\u0259si kimi xidm\u0259t edir: r\u0259smi g\u00fczg\u00fcl\u0259r vahid brend domenini saxlay\u0131r v\u0259 domenl\u0259raras\u0131 iframe-l\u0259r vasit\u0259sil\u0259 deyil, \u0259sas domend\u0259n giri\u015f\/\u00f6d\u0259ni\u015f formalar\u0131na xidm\u0259t edir. OWASP t\u00f6vsiy\u0259l\u0259ri (\u018fn yax\u015f\u0131 10, 2021\u20132023) v\u0259 Chrome T\u0259hl\u00fck\u0259sizlik t\u0259cr\u00fcb\u0259l\u0259ri (2021\u20132024) h\u0259r y\u00f6nl\u0259ndirm\u0259 \u00fc\u00e7\u00fcn \u00fcnvan panelini yoxlama\u011f\u0131 v\u0259 ani mesajla\u015fma proqramlar\u0131ndan v\u0259 ya qeyri-r\u0259smi s\u00f6hb\u0259tl\u0259rd\u0259n ke\u00e7idl\u0259rd\u0259n qa\u00e7ma\u011f\u0131 t\u0259l\u0259b edir. Az\u0259rbaycanda operatorlar (Azercell, Bakcell, Nar) aras\u0131nda DNS qeyri-sabitliyi saxta IP \u00fcnvanlar\u0131n\u0131n qaytar\u0131lmas\u0131na s\u0259b\u0259b ola bil\u0259r, ona g\u00f6r\u0259 d\u0259 saytdan m\u00fchafiz\u0259nin dayand\u0131r\u0131lmas\u0131 v\u0259 ya geni\u015fl\u0259ndirm\u0259nin qura\u015fd\u0131r\u0131lmas\u0131 il\u0259 ba\u011fl\u0131 ist\u0259nil\u0259n sor\u011fu t\u0259hl\u00fck\u0259li resursun \u0259lam\u0259tidir. \u0130stifad\u0259\u00e7inin faydas\u0131 d\u0259yi\u015fdirilmi\u015f APK qura\u015fd\u0131rma ehtimal\u0131n\u0131n azald\u0131lmas\u0131 v\u0259 etimadnam\u0259l\u0259rin qorunmas\u0131d\u0131r ki, bu da s\u0259hvl\u0259r\u0259 v\u0259 insidentl\u0259r\u0259 qar\u015f\u0131 dayan\u0131ql\u0131\u011f\u0131 birba\u015fa art\u0131r\u0131r.<\/p>\n

 Az\u0259rbaycanda n\u0259 se\u00e7m\u0259k laz\u0131md\u0131r: APK, PWA v\u0259 ya Huawei \u00fc\u00e7\u00fcn AppGallery?<\/strong><\/h3>\n

Format\u0131n m\u00fcqayis\u0259si \u018fS-d\u0259n v\u0259 xidm\u0259tl\u0259rin m\u00f6vcudlu\u011fundan as\u0131l\u0131d\u0131r: GMS il\u0259 Android \u00fc\u00e7\u00fcn yerli APK APK Signature v2\/v3 (Google Android Developers, 2016\/2018) \u0259sas\u0131nda sistem funksiyalar\u0131 v\u0259 fon rejiml\u0259ri t\u0259min edir; GMS olmayan Huawei \u00fc\u00e7\u00fcn AppGallery prioritetdir, \u00e7\u00fcnki o, yenil\u0259m\u0259l\u0259ri avtomatla\u015fd\u0131r\u0131r v\u0259 b\u00fct\u00f6vl\u00fcy\u00fcn yoxlan\u0131lmas\u0131n\u0131 t\u0259min edir; iOS \u00fc\u00e7\u00fcn PWA iOS 11.3-d\u0259 (Apple WebKit, 2018) xidm\u0259t i\u015f\u00e7il\u0259ri \u00fc\u00e7\u00fcn praktik oldu v\u0259 Web Push iOS 16.4 (Apple, 2023)-d\u0259n etibar\u0259n m\u00f6vcuddur. \u018flav\u0259 s\u0259naye konteksti: PWA-n\u0131n iri e-ticar\u0259t ma\u011fazalar\u0131nda n\u00fcfuzu ~9%-\u0259 \u00e7atd\u0131 (Statista, 2023), iOS m\u00fchiti \u00fc\u00e7\u00fcn h\u0259llin yetkinliyini t\u0259sdiql\u0259yir. Bir n\u00fcmun\u0259 ara\u015fd\u0131rmas\u0131nda, Huawei Nova (EMUI 12) g\u00f6st\u0259rdi ki, ma\u011faza qura\u015fd\u0131rmas\u0131 yan y\u00fckl\u0259nmi\u015f APK il\u0259 m\u00fcqayis\u0259d\u0259 daha stabildir, bunun \u00fc\u00e7\u00fcn \u201cNam\u0259lum m\u0259nb\u0259l\u0259r\u201din aktivl\u0259\u015fdirilm\u0259si v\u0259 t\u0259hl\u00fck\u0259sizliyin m\u00fcv\u0259qq\u0259ti z\u0259ifl\u0259dilm\u0259si t\u0259l\u0259b olunur; N\u0259tic\u0259 daha az \u0259l add\u0131mlar\u0131 v\u0259 daha az u\u011fursuzluq ehtimal\u0131d\u0131r.<\/p>\n

\u018fm\u0259liyyat f\u0259rql\u0259ri \u015f\u0259b\u0259k\u0259 as\u0131l\u0131l\u0131qlar\u0131n\u0131 v\u0259 ke\u015f siyas\u0259tl\u0259rini \u0259ks etdirir: PWA-lar brauzer vasit\u0259sil\u0259 tez yerl\u0259\u015fdirilir v\u0259 statik aktivl\u0259rin CDN optimalla\u015fd\u0131r\u0131lmas\u0131ndan faydalan\u0131r, lakin ke\u015f statusuna h\u0259ssasd\u0131r; APK’lar yerli kitabxanalara v\u0259 oflayn funksiyalara giri\u015fi t\u0259min edir; AppGallery \u015f\u0259ffaf yenil\u0259m\u0259 tarix\u00e7\u0259sini v\u0259 avtomatik imza yoxlamas\u0131n\u0131 t\u0259min edir. Az\u0259rbaycan operatorlar\u0131n\u0131n qeyri-sabit mobil \u015f\u0259b\u0259k\u0259l\u0259rind\u0259 (Azercell\/Bakcell\/Nar) PWA-lar daha s\u00fcr\u0259tli a\u00e7a bil\u0259r, lakin vaxta\u015f\u0131r\u0131 ke\u015fin t\u0259mizl\u0259nm\u0259si avtorizasiya v\u0259 yenil\u0259m\u0259 x\u0259talar\u0131n\u0131 aradan qald\u0131r\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 d\u00fczg\u00fcn kanal se\u00e7imi say\u0259sind\u0259 s\u0259hv\u0259 meyilli qura\u015fd\u0131rma riskinin azald\u0131lmas\u0131d\u0131r: GMS cihazlar\u0131 \u00fc\u00e7\u00fcn yerli APK-lar, Huawei \u00fc\u00e7\u00fcn AppGallery ma\u011faza proqramlar\u0131 v\u0259 iOS v\u0259 m\u00fc\u0259ssis\u0259 siyas\u0259ti m\u0259hdudiyy\u0259tl\u0259ri olan cihazlar \u00fc\u00e7\u00fcn PWA-lar.<\/p>\n

 D\u0259yi\u015fm\u0259ni istisna etm\u0259k \u00fc\u00e7\u00fcn APK-n\u0131n imzas\u0131n\u0131 v\u0259 hash\u0131n\u0131 nec\u0259 yoxlamaq olar?<\/strong><\/h3>\n

B\u00fct\u00f6vl\u00fck v\u0259 imzan\u0131n yoxlan\u0131lmas\u0131 proseduruna yerli SHA-256 hesablamas\u0131 (NIST FIPS 180-4, 2015) v\u0259 burax\u0131l\u0131\u015f qeydl\u0259rind\u0259n istinadla m\u00fcqayis\u0259, h\u0259m\u00e7inin qura\u015fd\u0131rma zaman\u0131 APK v2\/v3 imza sxeminin yoxlan\u0131lmas\u0131 (Google Android Developers, 2016\/2018) daxildir. \u0130mza uy\u011funsuzlu\u011fu, istifad\u0259\u00e7il\u0259rin tez-tez “x\u0259ta kodu yoxdur” kimi q\u0259bul etdiyi u\u011fursuzlu\u011fa s\u0259b\u0259b olur, lakin bu, Android 7+ sistemind\u0259 qura\u015fd\u0131r\u0131lm\u0131\u015f qura\u015fd\u0131r\u0131c\u0131 qorumas\u0131d\u0131r. Google T\u0259hl\u00fck\u0259sizlik Blogu (2019) qura\u015fd\u0131rmadan \u0259vv\u0259l m\u0259nb\u0259nin v\u0259 b\u00fct\u00f6vl\u00fcy\u00fcn yoxlanmas\u0131n\u0131n z\u0259ruriliyini t\u0259sdiql\u0259y\u0259n imza pozuntular\u0131 s\u0259b\u0259bind\u0259n t\u0259tbiql\u0259rin silinm\u0259si hallar\u0131n\u0131 t\u0259svir edir. Praktik bir v\u0259ziyy\u0259t: Android 9-da, SHA-256 yoxlamas\u0131 v\u0259 etibarl\u0131 imza saxta antivirus h\u0259y\u0259can siqnallar\u0131n\u0131 aradan qald\u0131rd\u0131; qura\u015fd\u0131rma u\u011furla ba\u015fa \u00e7atd\u0131, bundan sonra m\u00fchafiz\u0259 mexanizml\u0259ri i\u015f\u0259 m\u0259nfi t\u0259sir g\u00f6st\u0259rm\u0259d\u0259n b\u0259rpa edildi.<\/p>\n

Do\u011frulama al\u0259tl\u0259ri MITM h\u00fccumlar\u0131n\u0131n v\u0259 onlayn xidm\u0259tl\u0259rin kompromisl\u0259rinin qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn yerli olmal\u0131d\u0131r: OS sistem yard\u0131m proqramlar\u0131, brauzerd\u0259 domen sertifikat\u0131n\u0131n yoxlan\u0131lmas\u0131 v\u0259 etibar z\u0259ncirinin t\u0259hlili. TLS 1.3 (IETF RFC 8446, 2018) h\u00fccum s\u0259thini azald\u0131r, lakin istinad hash il\u0259 hash uy\u011funlu\u011fu fayl\u0131n d\u0259yi\u015fm\u0259zliyin\u0259 z\u0259man\u0259t verir. \u0130stinad hash\u0131 m\u00f6vcud deyils\u0259, t\u0259hl\u00fck\u0259siz strategiya hash r\u0259smi resursda d\u0259rc olunana q\u0259d\u0259r qura\u015fd\u0131rman\u0131 gecikdirm\u0259kdir. \u0130stifad\u0259\u00e7inin faydas\u0131 gizli d\u0259yi\u015fiklikl\u0259rin olmamas\u0131 v\u0259 x\u00fcsusil\u0259 aqressiv t\u0259hl\u00fck\u0259sizlik siyas\u0259tl\u0259ri v\u0259 ya m\u00fc\u0259ssis\u0259 idar\u0259\u00e7iliyi (MDM) olan cihazlarda sonrak\u0131 yenil\u0259m\u0259 x\u0259talar\u0131n\u0131n azalmas\u0131d\u0131r.<\/p>\n

 <\/p>\n

 <\/p>\n

 Cihaz v\u0259 \u018fS uy\u011funlu\u011fu: Pin Up Android\/iOS versiyamda qura\u015fd\u0131r\u0131lacaq v\u0259 Google olmadan Huawei-d\u0259 n\u0259 ed\u0259 bil\u0259r\u0259m?<\/strong><\/h2>\n

\u018fS texniki t\u0259l\u0259bl\u0259ri, CPU arxitekturas\u0131 v\u0259 sistem siyas\u0259ti u\u011furlu qura\u015fd\u0131rma v\u0259 sonrak\u0131 \u0259m\u0259liyyat ehtimal\u0131n\u0131 m\u00fc\u0259yy\u0259n edir. Android-d\u0259 minimum versiyalar v\u0259 arm64-v8a d\u0259st\u0259yi yerli kitabxanalar\u0131n m\u00f6vcudlu\u011funa t\u0259sir g\u00f6st\u0259rir; Android 8 (Oreo, 2017) brauzer\/fayl meneceri (Google Android Developers, 2017) \u00fc\u00e7\u00fcn ayr\u0131ca icaz\u0259 t\u0259l\u0259b ed\u0259n h\u0259r proqram \u00fc\u00e7\u00fcn “Nam\u0259lum M\u0259nb\u0259l\u0259r” icaz\u0259 mexanikas\u0131n\u0131 d\u0259yi\u015fdi. iOS-da App Store-dan k\u0259nar yerli qura\u015fd\u0131rma m\u00fcmk\u00fcn deyil, ona g\u00f6r\u0259 d\u0259 xidm\u0259t i\u015f\u00e7il\u0259ri il\u0259 Safari-d\u0259 PWA-lar (iOS 11.3, 2018) v\u0259 iOS 16.4-d\u0259n ba\u015flayaraq Web Push (Apple, 2023) istifad\u0259 olunur. GMS olmadan Huawei-d\u0259 AppGallery vasit\u0259sil\u0259 qura\u015fd\u0131rma HMS v\u0259 ma\u011faza imzas\u0131n\u0131n yoxlan\u0131lmas\u0131na \u0259saslan\u0131r, bu da \u0259l il\u0259 at\u0131lan add\u0131mlar\u0131n v\u0259 riskl\u0259rin say\u0131n\u0131 azald\u0131r. Counterpoint Research-\u0259 (2021) g\u00f6r\u0259, 2019-cu ild\u0259n b\u0259ri burax\u0131lan Huawei smartfonlar\u0131n\u0131n t\u0259xmin\u0259n 45%-i GMS-i d\u0259st\u0259kl\u0259mir v\u0259 bu, HMS\/AppGallery ssenaril\u0259rini biznes bax\u0131m\u0131ndan kritik edir. Praktik bir v\u0259ziyy\u0259t: Android 8-d\u0259 u\u011fursuzlu\u011fa imza konflikti s\u0259b\u0259b oldu; sistemi yenil\u0259m\u0259k v\u0259 qura\u015fd\u0131r\u0131c\u0131n\u0131n \u00f6nbelle\u011fini t\u0259mizl\u0259m\u0259k problemi h\u0259ll etdi.<\/p>\n

Android v\u0259 iOS versiyalar\u0131nda stabil \u0259m\u0259liyyat API s\u0259viyy\u0259l\u0259rini, arxitekturalar\u0131n\u0131 v\u0259 brauzer texnologiyalar\u0131n\u0131n t\u0259kam\u00fcl\u00fcn\u00fc n\u0259z\u0259r\u0259 alma\u011f\u0131 t\u0259l\u0259b edir. Android 8+ (API 26+) qura\u015fd\u0131rma prosesini v\u0259 icaz\u0259l\u0259rin idar\u0259 edilm\u0259sini stabill\u0259\u015fdirdi; memarl\u0131q uy\u011funsuzlu\u011fu (m\u0259s\u0259l\u0259n, armeabi-v7a cihaz\u0131nda yaln\u0131z arm64-v8a qurulu\u015funun qura\u015fd\u0131r\u0131lmas\u0131) z\u0259rif qura\u015fd\u0131r\u0131c\u0131n\u0131n u\u011fursuzlu\u011fu il\u0259 n\u0259tic\u0259l\u0259nir. iOS-da iOS 11.3 il\u0259 xidm\u0259t i\u015f\u00e7il\u0259ri oflayn ke\u015fl\u0259m\u0259ni v\u0259 idar\u0259 olunan PWA yenil\u0259m\u0259l\u0259rini aktivl\u0259\u015fdirdi v\u0259 iOS 16.4 a\u00e7\u0131q raz\u0131l\u0131qdan sonra aktivl\u0259\u015fdiril\u0259n Safari-d\u0259 vebsaytlar \u00fc\u00e7\u00fcn Web Push \u0259lav\u0259 etdi (Apple, 2023). Praktiki n\u00fcmun\u0259: iOS 12 il\u0259 iPhone XR-d\u0259 PWA m\u00f6vcuddur, lakin bildiri\u015fl\u0259r yoxdur; iOS 16.4 effektiv Web Push-a yenil\u0259m\u0259, kritik hadis\u0259 siqnallar\u0131n\u0131 b\u0259rpa etm\u0259k. \u0130stifad\u0259\u00e7inin faydas\u0131 m\u00fc\u015ft\u0259ri davran\u0131\u015f\u0131n\u0131n proqnozla\u015fd\u0131r\u0131la bilm\u0259si v\u0259 uy\u011funsuzluq s\u0259b\u0259bind\u0259n d\u0259rsd\u0259n yay\u0131nmalar\u0131n azalmas\u0131d\u0131r.<\/p>\n

Google xidm\u0259tl\u0259ri olmadan HMS il\u0259 Huawei cihazlar\u0131nda qura\u015fd\u0131rma AppGallery v\u0259 EMUI 12\/13 siyas\u0259tin\u0259 \u0259saslan\u0131r, burada daxili qoruma icaz\u0259l\u0259r t\u0259sdiql\u0259n\u0259n\u0259 q\u0259d\u0259r \u0259l il\u0259 y\u00fckl\u0259nmi\u015f APK-lar\u0131 bloklaya bil\u0259r. AppGallery bildiri\u015fl\u0259r v\u0259 inteqrasiyalar \u00fc\u00e7\u00fcn HMS Core-a g\u00fcv\u0259n\u0259r\u0259k imza yoxlamas\u0131 v\u0259 avtomatik yenil\u0259m\u0259l\u0259ri t\u0259min edir. Huawei \u0130llik Hesabat\u0131na (2022) g\u00f6r\u0259, HMS Core-un 580 milyondan \u00e7ox aktiv istifad\u0259\u00e7isi var ki, bu da ekosistemin yetkinliyini t\u0259sdiql\u0259yir. Android 8+-d\u0259 “Nam\u0259lum M\u0259nb\u0259l\u0259r” icaz\u0259si h\u0259r proqram \u00fc\u00e7\u00fcn verilir v\u0259 qura\u015fd\u0131r\u0131c\u0131n\u0131n i\u015f\u0259 sal\u0131nd\u0131\u011f\u0131 proqram (brauzer\/fayl t\u0259dqiqat\u00e7\u0131s\u0131) \u00fc\u00e7\u00fcn x\u00fcsusi olaraq aktivl\u0259\u015fdirilm\u0259lidir; yoxlaman\u0131n m\u00fcv\u0259qq\u0259ti yum\u015fald\u0131lmas\u0131, sonrak\u0131 qura\u015fd\u0131rma v\u0259 m\u00fchafiz\u0259nin b\u0259rpas\u0131 t\u0259hl\u00fck\u0259siz d\u00f6vr\u0259ni t\u0259\u015fkil edir. Huawei P40 n\u00fcmun\u0259sind\u0259 AppGallery-d\u0259n qura\u015fd\u0131rma problemsiz ke\u00e7di; APK-n\u0131n yandan y\u00fckl\u0259nm\u0259si ayar icaz\u0259l\u0259ri v\u0259 imza yoxlamas\u0131n\u0131 t\u0259l\u0259b edir, bundan sonra qoruma b\u0259rpa olunur.<\/p>\n

Play Protect, MDM v\u0259 antivirus proqram\u0131nda sistem bloklar\u0131 ayr\u0131ca t\u0259sir azaltma strategiyalar\u0131 t\u0259l\u0259b edir. Play Protect paketl\u0259ri t\u0259hlil edir v\u0259 nam\u0259lum APK-lar\u0131 bloklaya bil\u0259r; M\u0259cburi SHA-256 yoxlamas\u0131 (NIST FIPS 180-4, 2015) il\u0259 qura\u015fd\u0131rma zaman\u0131 yoxlaman\u0131n m\u00fcv\u0259qq\u0259ti olaraq s\u00f6nd\u00fcr\u00fclm\u0259si v\u0259 sonra m\u00fchafiz\u0259nin yenid\u0259n aktivl\u0259\u015fdirilm\u0259si etibarl\u0131 m\u0259nb\u0259 \u00fc\u00e7\u00fcn t\u0259hl\u00fck\u0259siz yana\u015fmad\u0131r. MDM (Mobil Cihaz \u0130dar\u0259etm\u0259si) \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f m\u0259nb\u0259l\u0259rind\u0259n qura\u015fd\u0131rman\u0131 v\u0259 m\u00fc\u0259yy\u0259n m\u0259lumatlara \u00e7\u0131x\u0131\u015f\u0131 qada\u011fan ed\u0259n m\u0259lumat t\u0259hl\u00fck\u0259sizliyi t\u0259cr\u00fcb\u0259l\u0259ri (m\u0259s\u0259l\u0259n, ISO\/IEC 27001) il\u0259 idar\u0259 olunan m\u0259rk\u0259zl\u0259\u015fdirilmi\u015f korporativ cihaz idar\u0259etm\u0259 sistemidir; bel\u0259 ssenaril\u0259rd\u0259 PWA\/Web versiyas\u0131 korporativ siyas\u0259tl\u0259ri pozmadan i\u015fl\u0259yir. Praktik bir v\u0259ziyy\u0259t: MDM il\u0259 istehsal edilmi\u015f Android cihaz\u0131nda APK qura\u015fd\u0131rma c\u0259hdi s\u0259ssizc\u0259 ba\u015fa \u00e7atd\u0131; Chrome vasit\u0259sil\u0259 PWA funksionall\u0131\u011fa giri\u015fi t\u0259min etdi v\u0259 domen kukil\u0259rinin t\u0259mizl\u0259nm\u0259si stabil sessiyalar\u0131 b\u0259rpa etdi.<\/p>\n

Yadda\u015f, saxlama v\u0259 g\u00fcc t\u0259l\u0259bl\u0259ri tez-tez s\u0259ssiz qura\u015fd\u0131rma u\u011fursuzluqlar\u0131n\u0131 izah edir. Stabil APK qura\u015fd\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn 200\u2013300 MB bo\u015f yer v\u0259 kifay\u0259t q\u0259d\u0259r RAM t\u00f6vsiy\u0259 olunur; Android Uy\u011funluq T\u0259rifi S\u0259n\u0259di (CDD, 2022) uy\u011funluq \u00fc\u00e7\u00fcn minimum 512 MB RAM m\u00fc\u0259yy\u0259n edir, lakin m\u00fcasir brauzerl\u0259r v\u0259 qura\u015fd\u0131r\u0131c\u0131lar \u00fc\u00e7\u00fcn praktiki t\u00f6vsiy\u0259 2 GB v\u0259 ya daha \u00e7oxdur. M\u00fcv\u0259qq\u0259ti fayllar v\u0259 qura\u015fd\u0131r\u0131c\u0131 ke\u015fi toqqu\u015fmaya s\u0259b\u0259b ola bil\u0259r; onlar\u0131 t\u0259mizl\u0259m\u0259k v\u0259 yenid\u0259n i\u015f\u0259 salmaq bir \u00e7ox s\u0259hvl\u0259ri h\u0259ll edir. Praktik bir n\u00fcmun\u0259: Android 8.1-d\u0259 500 MB bo\u015fald\u0131lmas\u0131 v\u0259 SHA-256 yoxlamas\u0131 il\u0259 yenid\u0259n y\u00fckl\u0259m\u0259 “Fayl pozulub” x\u0259tas\u0131n\u0131 h\u0259ll etdi, bundan sonra qura\u015fd\u0131rma u\u011furla ba\u015fa \u00e7atd\u0131. \u0130stifad\u0259\u00e7inin faydas\u0131, d\u0259st\u0259k il\u0259 \u0259laq\u0259 saxlamadan \u00fcmumi probleml\u0259rin proqnozla\u015fd\u0131r\u0131la bil\u0259n h\u0259llidir.<\/p>\n

CPU arxitekturas\u0131 v\u0259 kitabxana t\u0259rkibi birba\u015fa yerli kod uy\u011funlu\u011funa t\u0259sir g\u00f6st\u0259rir. arm64-v8a \u00fc\u00e7\u00fcn optimalla\u015fd\u0131r\u0131lm\u0131\u015f konstruksiyalar h\u0259mi\u015f\u0259 armeabi-v7a il\u0259 uy\u011fun g\u0259lmir; paketd\u0259 laz\u0131mi ABI variantlar\u0131n\u0131n olmamas\u0131 u\u011fursuzluqla n\u0259tic\u0259l\u0259nir. 2019-cu ilin avqust ay\u0131ndan etibar\u0259n Google Play k\u00f6hn\u0259 cihazlarda konfliktl\u0259rin yaranma ehtimal\u0131n\u0131 art\u0131raraq 64 bitlik arxitekturalar\u0131 (Google Play Siyas\u0259ti, 2019) d\u0259st\u0259kl\u0259m\u0259k \u00fc\u00e7\u00fcn yeni t\u0259tbiql\u0259r\u0259 mandat qoyub. Memarl\u0131q matrisini ba\u015fa d\u00fc\u015fm\u0259k istifad\u0259\u00e7il\u0259r\u0259 “s\u0259ssiz u\u011fursuzluq”u \u015f\u0259rh etm\u0259y\u0259 v\u0259 uy\u011fun format\u0131 se\u00e7m\u0259y\u0259 k\u00f6m\u0259k edir: m\u00fcasir cihaz \u00fc\u00e7\u00fcn d\u00fczg\u00fcn ABI il\u0259 yerli APK v\u0259 ya t\u0259l\u0259b olunan kitabxanalara d\u0259st\u0259k olmadan k\u00f6hn\u0259 modell\u0259r \u00fc\u00e7\u00fcn PWA. Armeabi-v7a il\u0259 ba\u011fl\u0131 ara\u015fd\u0131rmada PWA-ya ke\u00e7id uy\u011funsuzlu\u011fu aradan qald\u0131rd\u0131 v\u0259 sabit i\u015fl\u0259m\u0259yi t\u0259min etdi.<\/p>\n

 Pin Up hans\u0131 Android v\u0259 iOS versiyalar\u0131nda etibarl\u0131 i\u015fl\u0259yir?<\/strong><\/h3>\n

\u018fS versiyas\u0131 v\u0259 d\u0259st\u0259kl\u0259n\u0259n texnologiyalar\u0131n birl\u0259\u015fm\u0259si qura\u015fd\u0131rma v\u0259 yenil\u0259m\u0259l\u0259rin sabitliyini m\u00fc\u0259yy\u0259n edir. Android 8+ sistemind\u0259 “Nam\u0259lum m\u0259nb\u0259l\u0259r” icaz\u0259l\u0259ri h\u0259r proqram \u00fc\u00e7\u00fcn verilir (Google Android Developers, 2017), sistem riskl\u0259rini azald\u0131r; arm64-v8a d\u0259st\u0259yi yerli modullar\u0131n i\u015fini t\u0259min edir. iOS 11.3-d\u0259 (Apple WebKit, 2018) xidm\u0259t i\u015f\u00e7il\u0259ri oflayn ke\u015f \u0259lav\u0259 etdi v\u0259 PWA yenil\u0259m\u0259l\u0259rini idar\u0259 etdi v\u0259 iOS 16.4 (Apple, 2023) bildiri\u015f bo\u015flu\u011funu ba\u011flayaraq Web Push t\u0259qdim etdi. Praktik bir n\u00fcmun\u0259: Android 13-d\u0259 APK qura\u015fd\u0131r\u0131lmas\u0131 d\u00fczg\u00fcn imzaland\u0131qda \u0259lav\u0259 add\u0131mlar olmadan ba\u015f verir; iOS 16.4-d\u0259 PWA-lar burax\u0131lm\u0131\u015f hadis\u0259l\u0259ri azaltmaqla a\u00e7\u0131q icaz\u0259d\u0259n sonra bildiri\u015fl\u0259r al\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n davran\u0131\u015f v\u0259 minimal \u0259l m\u00fcdaxil\u0259sidir.<\/p>\n

K\u00f6hn\u0259 versiyalarda davran\u0131\u015f tarixi m\u0259hdudiyy\u0259tl\u0259rin n\u0259z\u0259r\u0259 al\u0131nmas\u0131n\u0131 t\u0259l\u0259b edir. Android 7 v\u0259 daha a\u015fa\u011f\u0131 versiyalarda “Nam\u0259lum M\u0259nb\u0259l\u0259r” qlobal s\u0259viyy\u0259d\u0259 aktivl\u0259\u015fdirilib, \u00fcmumi riski art\u0131r\u0131r v\u0259 m\u00fcasir qur\u011fular armeabi-v7a-n\u0131 d\u0259st\u0259kl\u0259m\u0259y\u0259 bil\u0259r. 11.3-d\u0259n \u0259vv\u0259lki iOS versiyalar\u0131nda xidm\u0259t i\u015f\u00e7il\u0259ri \u00e7at\u0131\u015fm\u0131r, bu da oflayn ke\u015fi v\u0259 sabit PWA yenil\u0259m\u0259l\u0259rini \u0259l\u00e7atmaz edir, bu da giri\u015f x\u0259talar\u0131na v\u0259 k\u00f6hn\u0259lmi\u015f interfeys\u0259 s\u0259b\u0259b olur. \u0130stifad\u0259\u00e7inin \u00fcst\u00fcnl\u00fcy\u00fc cihaz \u00fc\u00e7\u00fcn d\u00fczg\u00fcn format\u0131n se\u00e7ilm\u0259sind\u0259dir: k\u00f6hn\u0259 qur\u011fular \u00fc\u00e7\u00fcn PWA\/Web versiyas\u0131, m\u00fcasir cihazlar \u00fc\u00e7\u00fcn is\u0259 yerli funksionall\u0131\u011f\u0131 v\u0259 sabit yenil\u0259m\u0259l\u0259ri olan APK\/AppGallery-\u0259 \u00fcst\u00fcnl\u00fck verilir.<\/p>\n

 Google xidm\u0259tl\u0259ri olmadan HMS-i Huawei-d\u0259 nec\u0259 qura\u015fd\u0131rmaq olar?<\/strong><\/h3>\n

AppGallery ma\u011faza kanal\u0131 v\u0259 EMUI siyas\u0259tl\u0259ri sistemin t\u0259hl\u00fck\u0259sizliyin\u0259 x\u0259l\u0259l g\u0259tirm\u0259d\u0259n proqnozla\u015fd\u0131r\u0131la bil\u0259n qura\u015fd\u0131rmalar\u0131 t\u0259min edir. AppGallery imza v\u0259 b\u00fct\u00f6vl\u00fck yoxlamas\u0131n\u0131 h\u0259yata ke\u00e7irir, HMS Core is\u0259 bildiri\u015fl\u0259r v\u0259 xidm\u0259t inteqrasiyas\u0131n\u0131 t\u0259min edir. HMS-in auditoriyas\u0131 2022-ci il\u0259 q\u0259d\u0259r 580 milyon aktiv istifad\u0259\u00e7ini \u00f6t\u00fcb (Huawei \u0130llik Hesabat\u0131, 2022) bu, ekosistemin miqyas\u0131n\u0131 t\u0259sdiql\u0259yir. M\u00fc\u0259yy\u0259n bir t\u0259tbiq \u00fc\u00e7\u00fcn “Nam\u0259lum M\u0259nb\u0259l\u0259r” t\u0259sdiql\u0259nm\u0259s\u0259, EMUI 12\/13 \u0259l il\u0259 APK y\u00fckl\u0259m\u0259l\u0259rini m\u00fcv\u0259qq\u0259ti olaraq r\u0259dd ed\u0259 bil\u0259r. Praktik v\u0259ziyy\u0259t: Huawei P40-da AppGallery d\u00fczg\u00fcn qura\u015fd\u0131rma v\u0259 avtomatik yenil\u0259m\u0259l\u0259ri t\u0259min etdi; APK-lar\u0131n yandan y\u00fckl\u0259nm\u0259si \u00fc\u00e7\u00fcn \u0259l il\u0259 icaz\u0259l\u0259r v\u0259 daxili t\u0259hl\u00fck\u0259sizliyin m\u00fcv\u0259qq\u0259ti z\u0259ifl\u0259m\u0259si t\u0259l\u0259b olunur, bundan sonra t\u0259hl\u00fck\u0259sizlik parametrl\u0259ri b\u0259rpa olunur.<\/p>\n

Huawei brauzerinin x\u00fcsusiyy\u0259tl\u0259ri v\u0259 Az\u0259rbaycandak\u0131 operatorlar\u0131n \u015f\u0259b\u0259k\u0259 \u015f\u0259rtl\u0259ri \u0259lav\u0259 nizam-intizam t\u0259l\u0259b edir. Daxili brauzer PWA-larla d\u00fczg\u00fcn i\u015fl\u0259yir, lakin Azercell\/Bakcell\/Nar-da DNS nasazl\u0131\u011f\u0131 yaranarsa, DNS-in d\u0259yi\u015fdirilm\u0259si (m\u0259s\u0259l\u0259n, Cloudflare-d\u0259n 1.1.1.1-\u0259) v\u0259 domen ke\u015finin t\u0259mizl\u0259nm\u0259si faydal\u0131 ola bil\u0259r. T\u0259hl\u00fck\u0259sizlik \u015f\u00fcbh\u0259li saxtakarl\u0131\u011fa g\u00f6r\u0259 APK y\u00fckl\u0259m\u0259l\u0259rini bloklay\u0131rsa, SHA-256 yoxlamas\u0131 v\u0259 sertifikat\u0131n do\u011frulanmas\u0131 yanl\u0131\u015f h\u0259y\u0259can siqnallar\u0131n\u0131 aradan qald\u0131r\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 t\u0259hl\u00fck\u0259sizliy\u0259 x\u0259l\u0259l g\u0259tirm\u0259d\u0259n \u0259l add\u0131mlar\u0131n\u0131, proqnozla\u015fd\u0131r\u0131la bil\u0259n yenil\u0259m\u0259l\u0259ri v\u0259 yerli \u015f\u0259b\u0259k\u0259 \u015f\u0259rtl\u0259rin\u0259 uy\u011funla\u015fman\u0131 minimuma endirm\u0259kdir.<\/p>\n

 Sistem APK-dan imtina ed\u0259rs\u0259 n\u0259 etm\u0259li: nam\u0259lum m\u0259nb\u0259l\u0259r, Play Protect, MDM?<\/strong><\/h3>\n

Sistem bloklar\u0131n\u0131n \u00e7\u0131xar\u0131lmas\u0131 icaz\u0259l\u0259rin d\u00fczg\u00fcn qurulmas\u0131na v\u0259 fayl\u0131n b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259min ed\u0259rk\u0259n \u00e7ekin m\u00fcv\u0259qq\u0259ti olaraq rahatlamas\u0131na \u0259saslan\u0131r. Android 8+-d\u0259 “Nam\u0259lum m\u0259nb\u0259l\u0259r” h\u0259r proqram \u00fc\u00e7\u00fcn t\u0259yin edilir, ona g\u00f6r\u0259 d\u0259 icaz\u0259 qura\u015fd\u0131rman\u0131 ba\u015flatan brauzer v\u0259 ya k\u0259\u015ffiyyat\u00e7\u0131 \u00fc\u00e7\u00fcn x\u00fcsusi olaraq aktiv edilm\u0259lidir (Google Android Developers, 2017). Play Protect “nam\u0259lum” APK-lar\u0131 bloklaya bil\u0259r; t\u0259hl\u00fck\u0259siz prosedur SHA-256-n\u0131n NIST FIPS 180-4 (2015) il\u0259 yoxlan\u0131lmas\u0131n\u0131, qura\u015fd\u0131r\u0131lmas\u0131n\u0131 v\u0259 sonra m\u00fchafiz\u0259nin b\u0259rpas\u0131n\u0131 \u0259hat\u0259 edir. Praktik bir v\u0259ziyy\u0259t: Android 10-da icaz\u0259siz imtina yerli hash yoxlamas\u0131ndan v\u0259 qura\u015fd\u0131rma yoxlamas\u0131n\u0131 m\u00fcv\u0259qq\u0259ti olaraq s\u00f6nd\u00fcrd\u00fckd\u0259n sonra h\u0259ll edildi; \u0259m\u0259liyyat\u0131 r\u0259van \u015f\u0259kild\u0259 b\u0259rpa etdi.<\/p>\n

Korporativ MDM siyas\u0259tl\u0259ri \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f proqramlar\u0131n\u0131n qura\u015fd\u0131r\u0131lmas\u0131n\u0131 qada\u011fan edir v\u0259 m\u0259lumat t\u0259hl\u00fck\u0259sizliyi t\u0259l\u0259bl\u0259rin\u0259 \u0259sas\u0259n m\u0259lumat giri\u015fini idar\u0259 edir (m\u0259s\u0259l\u0259n, ISO\/IEC 27001). \u018fg\u0259r i\u015f profili qura\u015fd\u0131rman\u0131 bloklay\u0131rsa, qaydalara uy\u011fun g\u0259l\u0259n v\u0259 funksionall\u0131\u011fa giri\u015fi t\u0259min ed\u0259n PWA\/veb versiyas\u0131 alternativdir. Praktik bir n\u00fcmun\u0259: idar\u0259 olunan korporativ cihazda s\u0259ssiz APK qura\u015fd\u0131rma u\u011fursuzlu\u011fu Chrome-da PWA vasit\u0259sil\u0259 sabit giri\u015fl\u0259 \u0259v\u0259z olundu; domen kukil\u0259rinin t\u0259mizl\u0259nm\u0259si v\u0259 xidm\u0259t i\u015f\u00e7isinin yenil\u0259m\u0259l\u0259rd\u0259n sonra b\u0259rpa edilmi\u015f loginl\u0259rin yenid\u0259n qeydiyyat\u0131. \u0130stifad\u0259\u00e7inin faydas\u0131 giri\u015fi itirm\u0259d\u0259n korporativ t\u0259l\u0259bl\u0259r\u0259 uy\u011funluqdur.<\/p>\n

 <\/p>\n

 <\/p>\n

 \u015e\u0259b\u0259k\u0259, G\u00fczg\u00fcl\u0259r v\u0259 T\u0259hl\u00fck\u0259sizlik: Veb sayt niy\u0259 a\u00e7\u0131lm\u0131r, VPN-\u0259 ehtiyac\u0131n\u0131z var v\u0259 g\u00fczg\u00fcn\u00fcn t\u0259hl\u00fck\u0259siz olub-olmad\u0131\u011f\u0131n\u0131 nec\u0259 yoxlamaq olar?<\/strong><\/h2>\n

\u015e\u0259b\u0259k\u0259 \u015f\u0259rtl\u0259ri (DNS, TLS, CDN) v\u0259 t\u0259hl\u00fck\u0259sizlik intizam\u0131 veb sayt\u0131n m\u00f6vcudlu\u011funu v\u0259 APK\/PWA-lar\u0131n u\u011furla endirilm\u0259sini m\u00fc\u0259yy\u0259n edir. Az\u0259rbaycanda DNS-in operatorlar (Azercell, Bakcell, Nar) aras\u0131nda qeyri-sabitliyi aradan qald\u0131rmas\u0131 hallar\u0131 ba\u015f verib ki, bu da “s\u0259hif\u0259 \u0259l\u00e7atan deyil” x\u0259talar\u0131na s\u0259b\u0259b olub. ICANN-\u0259 (2022) g\u00f6r\u0259, regionda giri\u015f insidentl\u0259rinin 15%-\u0259 q\u0259d\u0259ri yanl\u0131\u015f DNS qeydl\u0259rinin idar\u0259 edilm\u0259si v\u0259 ke\u015fl\u0259m\u0259 il\u0259 ba\u011fl\u0131d\u0131r v\u0259 cari brauzerl\u0259r 2020-ci ild\u0259n TLS 1.0\/1.1 d\u0259st\u0259yini dayand\u0131r\u0131b (Mozilla T\u0259hl\u00fck\u0259sizlik Komandas\u0131, 2020) TLS 1.2\/1.3 t\u0259l\u0259b edir. Praktiki hal: Bak\u0131da bir istifad\u0259\u00e7i Nar vasit\u0259sil\u0259 APK y\u00fckl\u0259m\u0259sind\u0259 u\u011fursuzluqla \u00fczl\u0259\u015fdi; DNS-in Cloudflare 1.1.1.1-\u0259 d\u0259yi\u015fdirilm\u0259si, SSL Labs (Qualys, 2023) vasit\u0259sil\u0259 TLS versiyas\u0131n\u0131n yoxlan\u0131lmas\u0131 v\u0259 yenid\u0259n y\u00fckl\u0259nm\u0259si fasil\u0259l\u0259ri h\u0259ll etdi. \u0130stifad\u0259\u00e7inin faydas\u0131: Cihaz\u0131 d\u0259yi\u015fdirm\u0259d\u0259n giri\u015fi b\u0259rpa etm\u0259k, \u015f\u0259b\u0259k\u0259 x\u0259talar\u0131 s\u0259b\u0259bind\u0259n “z\u0259d\u0259l\u0259nmi\u015f fayllar” riskini azaltmaq.<\/p>\n

DNS\/TLS diaqnostikas\u0131 v\u0259 endirm\u0259 s\u00fcr\u0259tl\u0259ndirilm\u0259si h\u0259lledici v\u0259 \u015fifr\u0259l\u0259nmi\u015f kanal konfiqurasiyas\u0131n\u0131n yoxlan\u0131lmas\u0131n\u0131 t\u0259l\u0259b edir. TLS 1.2 (IETF RFC 5246, 2008) v\u0259 TLS 1.3 (IETF RFC 8446, 2018) \u00f6t\u00fcrm\u0259 m\u0259xfiliyini v\u0259 b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259min edir; k\u00f6hn\u0259 versiyalar \u0259ks\u0259r brauzerl\u0259rd\u0259 qeyri-aktivdir v\u0259 onlar\u0131n endirilm\u0259si q\u0259buledilm\u0259zdir. CDN-l\u0259r \u00e7atd\u0131r\u0131lma s\u00fcr\u0259tini art\u0131r\u0131r, lakin s\u0131xl\u0131q zaman\u0131 fasil\u0259l\u0259r t\u0259qdim edir; Akamai-nin \u0130nternetin V\u0259ziyy\u0259tin\u0259 (2022) g\u00f6r\u0259, gec\u0259 saatlar\u0131 CDN s\u0131xl\u0131\u011f\u0131 ehtimal\u0131n\u0131 30-40% azald\u0131r. Praktik n\u00fcmun\u0259: Azercell istifad\u0259\u00e7isi y\u00fckl\u0259m\u0259 s\u00fcr\u0259tind\u0259 70% azalma ya\u015fad\u0131; endirm\u0259nin gec\u0259 saatlar\u0131na t\u0259xir\u0259 sal\u0131nmas\u0131 v\u0259 f\u0259rqli CDN yeri olan r\u0259smi g\u00fczg\u00fcd\u0259n istifad\u0259 etm\u0259kl\u0259 y\u00fckl\u0259m\u0259 tamamland\u0131. \u0130stifad\u0259\u00e7i \u00fcst\u00fcnl\u00fckl\u0259rin\u0259 proqnozla\u015fd\u0131r\u0131la bil\u0259n s\u00fcr\u0259tl\u0259r, daha az t\u0259krar c\u0259hdl\u0259r v\u0259 d\u00fczg\u00fcn qura\u015fd\u0131rma daxildir.<\/p>\n

Giri\u015fd\u0259 VPN-in rolu ikiqatd\u0131r: o, yerli blokdan ke\u00e7m\u0259y\u0259 k\u00f6m\u0259k edir, lakin uzaq qov\u015faqlar vasit\u0259sil\u0259 mar\u015frutla\u015fd\u0131rma s\u0259b\u0259bind\u0259n gecikm\u0259ni art\u0131r\u0131r. Cisco t\u0259dqiqat\u0131 (2021) VPN-d\u0259n istifad\u0259 ed\u0259rk\u0259n gecikm\u0259 m\u00fcdd\u0259tinin orta hesabla 20-30 ms art\u0131m\u0131n\u0131 qeyd edir, Sandvine (2021) is\u0259 uzaq serverl\u0259ri se\u00e7\u0259rk\u0259n \u00f6t\u00fcrm\u0259 qabiliyy\u0259tinin 15-25% azald\u0131\u011f\u0131n\u0131 t\u0259xmin edir. Az\u0259rbaycan \u00fc\u00e7\u00fcn yax\u0131n yerl\u0259r (T\u00fcrkiy\u0259, G\u00fcrc\u00fcstan) optimald\u0131r v\u0259 gecikm\u0259ni minimuma endirir. Praktik bir v\u0259ziyy\u0259t: istifad\u0259\u00e7i AB\u015e-da server il\u0259 VPN-i aktivl\u0259\u015fdirdi v\u0259 APK-ni endir\u0259rk\u0259n fasil\u0259 ya\u015fad\u0131; T\u00fcrkiy\u0259d\u0259 bir server\u0259 ke\u00e7id gecikm\u0259ni azaltd\u0131 v\u0259 y\u00fckl\u0259m\u0259 s\u0259hvsiz tamamland\u0131. \u0130stifad\u0259\u00e7inin faydas\u0131 m\u0259qbul s\u00fcr\u0259td\u0259 resurs m\u00f6vcudlu\u011fudur.<\/p>\n

G\u00fczg\u00fc yoxlamas\u0131 v\u0259 fi\u015finqd\u0259n m\u00fchafiz\u0259 ciddi meyarlara \u0259saslan\u0131r: tan\u0131nm\u0131\u015f CA-dan etibarl\u0131 SSL sertifikat\u0131 (DigiCert, GlobalSign), uy\u011fun brend domeni v\u0259 domenl\u0259r aras\u0131 giri\u015f\/\u00f6d\u0259ni\u015f formalar\u0131n\u0131n olmamas\u0131. APWG (2022) fi\u015finq h\u00fccumlar\u0131n\u0131n 61% artd\u0131\u011f\u0131n\u0131 bildirdi v\u0259 CERT-AZ (2021) saxta qumar g\u00fczg\u00fcl\u0259ri il\u0259 kampaniyalar qeyd etdi, burada y\u00f6nl\u0259ndirm\u0259l\u0259r iframe-li s\u0259hif\u0259l\u0259r\u0259 g\u0259tirib \u00e7\u0131xard\u0131. WHOIS yoxlamas\u0131 “g\u0259nc” domenl\u0259ri m\u00fc\u0259yy\u0259n etm\u0259y\u0259 k\u00f6m\u0259k edir; q\u0131sa sertifikat\u0131n istifad\u0259 m\u00fcdd\u0259ti v\u0259 nam\u0259lum CA saxtakarl\u0131\u011f\u0131n \u0259lav\u0259 g\u00f6st\u0259ricil\u0259ridir. Praktik bir v\u0259ziyy\u0259t: bir messencerd\u0259n bir ke\u00e7id bir ay \u0259vv\u0259l qeydiyyatdan ke\u00e7mi\u015f bir domen\u0259 s\u0259b\u0259b oldu; sertifikat\u0131n yoxlan\u0131lmas\u0131 v\u0259 marka atributlar\u0131n\u0131n olmamas\u0131 fi\u015finqi t\u0259sdiql\u0259di, r\u0259smi domen\u0259 ke\u00e7id is\u0259 d\u00fczg\u00fcn qura\u015fd\u0131rman\u0131 b\u0259rpa etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 m\u0259lumatlar\u0131n pozulmas\u0131 v\u0259 d\u0259yi\u015fdirilmi\u015f APK-n\u0131n qura\u015fd\u0131r\u0131lmas\u0131 riskini minimuma endirm\u0259kdir.<\/p>\n

 DNS\/TLS probleml\u0259rini nec\u0259 diaqnoz etm\u0259k v\u0259 APK y\u00fckl\u0259m\u0259l\u0259rini s\u00fcr\u0259tl\u0259ndirm\u0259k olar?<\/strong><\/h3>\n

Praktiki diaqnostik add\u0131mlara vasit\u0259sil\u0259 DNS h\u0259llini yoxlamaq daxildirnslookup\/s\u0259nv\u0259 brauzer al\u0259tl\u0259rind\u0259 v\u0259 ya SSL Labs vasit\u0259sil\u0259 TLS \u0259laq\u0259 versiyas\u0131n\u0131n t\u0259hlili (Qualys, 2023). Cari konfiqurasiyalar etibarl\u0131 sertifikat z\u0259nciri il\u0259 TLS 1.2\/1.3 (IETF RFC 5246\/8446) istifad\u0259 etm\u0259lidir; \u0259laq\u0259 bu t\u0259l\u0259bl\u0259r\u0259 cavab verirs\u0259, fasil\u0259l\u0259rin \u0259sas s\u0259b\u0259bl\u0259ri CDN y\u00fckl\u0259nm\u0259si v\u0259 ya yerli \u00f6nbellek olaraq qal\u0131r. Akamai (2022) g\u00f6r\u0259, y\u00fckl\u0259m\u0259l\u0259rin gec\u0259 saatlar\u0131na ke\u00e7irilm\u0259si h\u0259dd\u0259n art\u0131q y\u00fckl\u0259m\u0259 ehtimal\u0131n\u0131 30-40% azald\u0131r. Praktiki halda, Bakcell abun\u0259\u00e7isi \u00fc\u00e7\u00fcn DNS ke\u015finin t\u0259mizl\u0259nm\u0259si, Cloudflare DNS-\u0259 ke\u00e7id v\u0259 TLS-nin yenid\u0259n yoxlanmas\u0131 r\u0259smi domen\u0259 giri\u015f x\u0259talar\u0131n\u0131 h\u0259ll etdi v\u0259 APK y\u00fckl\u0259m\u0259si fasil\u0259siz tamamland\u0131. \u0130stifad\u0259\u00e7inin faydas\u0131 \u015f\u0259b\u0259k\u0259 probleml\u0259rinin aradan qald\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn s\u0259rf olunan vaxt\u0131n azald\u0131lmas\u0131 v\u0259 “pozulmu\u015f” y\u00fckl\u0259m\u0259l\u0259r riskinin azalmas\u0131d\u0131r.<\/p>\n

Optimal CDN yeri olan r\u0259smi g\u00fczg\u00fc se\u00e7m\u0259k v\u0259 y\u00fckl\u0259m\u0259l\u0259ri planla\u015fd\u0131rmaqla y\u00fckl\u0259m\u0259 s\u00fcr\u0259ti s\u00fcr\u0259tl\u0259ndirilir. TLS 1.0\/1.1 deaktiv edilmi\u015f brauzerl\u0259r (Mozilla T\u0259hl\u00fck\u0259sizlik Komandas\u0131, 2020) m\u00fcasir \u015fifr\u0259l\u0259m\u0259 t\u0259l\u0259b edir; sertifikat uy\u011fun g\u0259lmirs\u0259, z\u0259ncir yoxlan\u0131lmal\u0131 v\u0259 xaric edilm\u0259lidir. \u00dc\u00e7\u00fcnc\u00fc t\u0259r\u0259fin “s\u00fcr\u0259tl\u0259ndiricil\u0259rind\u0259n” istifad\u0259 etm\u0259m\u0259k v\u0259 t\u0259hl\u00fck\u0259sizlik geni\u015fl\u0259ndirm\u0259l\u0259rini s\u00f6nd\u00fcrm\u0259m\u0259k praktiki intizam\u0131 OWASP t\u00f6vsiy\u0259l\u0259rin\u0259 uy\u011fundur (Top 10, 2021\u20132023). \u0130stifad\u0259\u00e7i \u00fcst\u00fcnl\u00fckl\u0259rin\u0259 ard\u0131c\u0131l s\u00fcr\u0259t v\u0259 t\u0259hl\u00fck\u0259sizlik riskl\u0259ri yaradan m\u00fcdaxil\u0259l\u0259rin olmamas\u0131 daxildir.<\/p>\n

 VPN y\u00fckl\u0259m\u0259l\u0259r\u0259 v\u0259 giri\u015fl\u0259r\u0259 k\u00f6m\u0259k edir v\u0259 ya mane olur?<\/strong><\/h3>\n

Yax\u0131n co\u011frafi qov\u015faqlar\u0131n v\u0259 m\u00fcasir protokollar\u0131n se\u00e7ilm\u0259si il\u0259 bypass v\u0259 s\u00fcr\u0259tin bloklanmas\u0131 aras\u0131nda tarazl\u0131q \u0259ld\u0259 edilir. Cisco (2021) VPN il\u0259 gecikm\u0259 m\u00fcdd\u0259tind\u0259 20-30 ms art\u0131m qeyd\u0259 al\u0131r, Sandvine (2021) is\u0259 s\u00fcr\u0259tin 15-25% azald\u0131\u011f\u0131n\u0131 bildirir. Azalmalara qon\u015fu regionlarda (T\u00fcrkiy\u0259, G\u00fcrc\u00fcstan) qov\u015faqlar\u0131n se\u00e7ilm\u0259si v\u0259 OpenVPN\/WireGuard protokollar\u0131ndan (2016-c\u0131 ild\u0259 yarad\u0131lm\u0131\u015f, 2020-ci ild\u0259 Linux n\u00fcv\u0259sin\u0259 inteqrasiya olunmu\u015f) istifad\u0259 etm\u0259kl\u0259 nail olunur. Praktik hal: Almaniyada serverd\u0259n istifad\u0259 ed\u0259rk\u0259n istifad\u0259\u00e7i fasil\u0259 il\u0259 \u00fczl\u0259\u015fdi; T\u00fcrkiy\u0259y\u0259 ke\u00e7id, y\u00fckl\u0259m\u0259nin s\u0259hvsiz tamamlanmas\u0131na imkan verdi. \u0130stifad\u0259\u00e7i m\u0259qbul gecikm\u0259 v\u0259 saxlan\u0131lan sessiya sabitliyi il\u0259 giri\u015fd\u0259n faydalan\u0131r.<\/p>\n

VPN riskl\u0259ri k\u00f6hn\u0259lmi\u015f protokollarla (PPTP, 2012-ci ild\u0259n etibars\u0131z hesab olunur) v\u0259 pulsuz xidm\u0259tl\u0259rd\u0259 s\u00fcr\u0259t m\u0259hdudiyy\u0259tl\u0259ri il\u0259 \u0259laq\u0259l\u0259ndirilir. Strategiya \u015f\u0259ffaf siyas\u0259tl\u0259r\u0259, m\u00fcasir \u015fifr\u0259l\u0259m\u0259 d\u0259st\u0259yin\u0259 v\u0259 yax\u0131n co\u011frafi m\u00f6vqey\u0259 malik provayderl\u0259ri se\u00e7m\u0259kdir. APK qura\u015fd\u0131rmalar\u0131 v\u0259 PWA-lar \u00fc\u00e7\u00fcn bu, fasil\u0259l\u0259ri azald\u0131r, fasil\u0259l\u0259ri minimuma endirir v\u0259 z\u0259d\u0259l\u0259nmi\u015f endirm\u0259 ehtimal\u0131n\u0131 azald\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 sistem m\u00fcnaqi\u015f\u0259l\u0259ri olmadan proqnozla\u015fd\u0131r\u0131la bil\u0259n \u0259m\u0259liyyatd\u0131r.<\/p>\n

 T\u0259hl\u00fck\u0259siz g\u00fczg\u00fcn\u00fc t\u0259sad\u00fcfi domend\u0259n nec\u0259 ay\u0131rd etm\u0259k olar?<\/strong><\/h3>\n

Qanunilik \u0259lam\u0259tl\u0259rin\u0259 tan\u0131nm\u0131\u015f CA-dan etibarl\u0131 sertifikat, uy\u011fun brend domen ad\u0131 v\u0259 sabit WHOIS qeydiyyat tarix\u00e7\u0259si olan HTTPS daxildir. APWG (2022) fi\u015finq h\u00fccumlar\u0131nda 61% art\u0131m qeyd\u0259 al\u0131b, APK-l\u0259ri endirm\u0259zd\u0259n \u0259vv\u0259l domen yoxlanmas\u0131n\u0131 m\u0259cburi edib. CERT-AZ (2021) yeni qeydiyyatdan ke\u00e7mi\u015f domenl\u0259ri \u0259hat\u0259 ed\u0259n, qumar xidm\u0259tl\u0259ri kimi maskalanan, q\u0131sa SSL son istifad\u0259 tarixl\u0259rind\u0259n v\u0259 yem kimi nam\u0259lum CA-dan istifad\u0259 ed\u0259n kampaniyalar\u0131 qeyd etdi. Praktik bir v\u0259ziyy\u0259t: bir ay \u0259vv\u0259l \u015f\u00fcbh\u0259li sertifikatla qeydiyyatdan ke\u00e7mi\u015f bir domen – y\u00fckl\u0259m\u0259d\u0259n imtina, \u0259sas domen\u0259 ke\u00e7id v\u0259 SHA-256 sertifikat\u0131n\u0131 istinadla yoxlamaq d\u00fczg\u00fcn qura\u015fd\u0131rman\u0131 t\u0259min etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 g\u00fcz\u0259\u015ft riskinin azald\u0131lmas\u0131 v\u0259 proqnozla\u015fd\u0131r\u0131la bil\u0259n t\u0259hl\u00fck\u0259sizlikdir.<\/p>\n

Davran\u0131\u015f g\u00f6st\u0259ricil\u0259ri texniki g\u00f6st\u0259ricil\u0259ri tamamlay\u0131r: r\u0259smi g\u00fczg\u00fcl\u0259r geni\u015fl\u0259ndirm\u0259 t\u0259l\u0259b etmir, antivirus proqram\u0131n\u0131 s\u00f6nd\u00fcr\u00fcr v\u0259 ya “s\u00fcr\u0259tl\u0259ndiricil\u0259r” t\u0259klif etmir. OWASP (Top 10, 2021\u20132023) \u00fcnvan \u00e7ubu\u011funu yoxlama\u011f\u0131, \u0259lf\u0259cinl\u0259rd\u0259n istifad\u0259 etm\u0259yi v\u0259 t\u0259sdiql\u0259nm\u0259mi\u015f s\u00f6hb\u0259tl\u0259rd\u0259n ke\u00e7idl\u0259rd\u0259n qa\u00e7ma\u011f\u0131 t\u00f6vsiy\u0259 edir. \u018fg\u0259r giri\u015f s\u0259hif\u0259si iframe vasit\u0259sil\u0259 ba\u015fqa domend\u0259n t\u0259qdim edilirs\u0259, bu, g\u00fcz\u0259\u015ftin g\u00f6st\u0259ricisidir. \u0130stifad\u0259\u00e7inin faydas\u0131 etimadnam\u0259l\u0259rin qorunmas\u0131 v\u0259 PWA-lar\u0131n sabitliyi \u00fc\u00e7\u00fcn vacib olan xidm\u0259t i\u015f\u00e7isinin saxtakarl\u0131\u011f\u0131n\u0131n qar\u015f\u0131s\u0131n\u0131n al\u0131nmas\u0131d\u0131r.<\/p>\n

 <\/p>\n

 <\/p>\n

 Qura\u015fd\u0131rma x\u0259talar\u0131 v\u0259 probleml\u0259rin aradan qald\u0131r\u0131lmas\u0131: APK-lar niy\u0259 \u201cqura\u015fd\u0131r\u0131lm\u0131r\u201d v\u0259 \u00fcmumi probleml\u0259ri nec\u0259 h\u0259ll etm\u0259k olar<\/strong><\/h2>\n

Android-d\u0259 \u00fcmumi qura\u015fd\u0131rma x\u0259talar\u0131na “Fayl xarab olub”, “Yadda\u015fda bitib” v\u0259 “T\u0259tbiq kod olmadan qura\u015fd\u0131r\u0131lmayacaq” daxildir, bunlara \u00e7ox vaxt \u015f\u0259b\u0259k\u0259 probleml\u0259ri, OS\/arxitektura versiyas\u0131 uy\u011funsuzlu\u011fu v\u0259 icaz\u0259 m\u00fcnaqi\u015f\u0259l\u0259ri s\u0259b\u0259b olur. Google Android Developers (2022) m\u0259lumatlar\u0131na g\u00f6r\u0259, qura\u015fd\u0131rma u\u011fursuzluqlar\u0131n\u0131n 30%-\u0259 q\u0259d\u0259ri z\u0259d\u0259l\u0259nmi\u015f fayllar v\u0259 ya uy\u011funsuzluqlar, dig\u0259r 20%-i is\u0259 a\u015fa\u011f\u0131 yadda\u015f v\u0259 t\u0259hl\u00fck\u0259sizlik m\u00fcnaqi\u015f\u0259l\u0259ri il\u0259 ba\u011fl\u0131d\u0131r. Az\u0259rbaycanda qeyri-sabit mobil \u015f\u0259b\u0259k\u0259l\u0259r problemi daha da g\u00fccl\u0259ndir\u0259 bil\u0259r ki, bu da qism\u0259n y\u00fckl\u0259m\u0259l\u0259r\u0259 v\u0259 he\u015f uy\u011funsuzluqlar\u0131na s\u0259b\u0259b ola bil\u0259r. Praktik bir v\u0259ziyy\u0259t: Android 11-d\u0259 k\u00f6hn\u0259 APK qura\u015fd\u0131rmaq imza m\u00fcnaqi\u015f\u0259sin\u0259 s\u0259b\u0259b oldu; \u0259n son versiyaya t\u0259kmill\u0259\u015fdirm\u0259k v\u0259 SHA-256 imzas\u0131n\u0131 yoxlamaq problemi h\u0259ll etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n qura\u015fd\u0131rma v\u0259 azald\u0131lm\u0131\u015f t\u0259krar d\u0259st\u0259k sor\u011fular\u0131d\u0131r.<\/p>\n

“Bozulmu\u015f Fayl” v\u0259 a\u015fa\u011f\u0131 yadda\u015f x\u0259talar\u0131 ard\u0131c\u0131l prosedura \u0259m\u0259l etm\u0259kl\u0259 h\u0259ll edilir: r\u0259smi domend\u0259n yenid\u0259n y\u00fckl\u0259yin, SHA-256 yoxlamas\u0131n\u0131 h\u0259yata ke\u00e7irin (NIST FIPS 180-4, 2015), 200-300 MB bo\u015fald\u0131n, qura\u015fd\u0131r\u0131c\u0131n\u0131n ke\u015fini t\u0259mizl\u0259yin v\u0259 yenid\u0259n ba\u015flad\u0131n. Kod olmayan “s\u0259ssiz blok” tez-tez qeyri-kafi RAM\/saxlama v\u0259 ya m\u00fcv\u0259qq\u0259ti fayl toqqu\u015fmas\u0131 il\u0259 \u0259laq\u0259l\u0259ndirilir. Praktik bir n\u00fcmun\u0259: Android 8.1-d\u0259 500 MB bo\u015fald\u0131lmas\u0131, ke\u015fin t\u0259mizl\u0259nm\u0259si v\u0259 yenid\u0259n y\u00fckl\u0259nm\u0259si “Bozuk Fayl” x\u0259tas\u0131n\u0131 h\u0259ll etdi v\u0259 qura\u015fd\u0131rma u\u011furla ba\u015fa \u00e7atd\u0131. APK v2\/v3 imza do\u011frulamas\u0131 (Google Android Developers, 2016\/2018) paket m\u00fcnaqi\u015f\u0259l\u0259rini aradan qald\u0131r\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 m\u00fcr\u0259kk\u0259b parametrl\u0259rl\u0259 qar\u0131\u015fmadan prosesin b\u0259rpas\u0131 v\u0259 t\u0259krarlanan s\u0259hvl\u0259rin azald\u0131lmas\u0131d\u0131r.<\/p>\n

PWA-n\u0131 yenil\u0259m\u0259m\u0259k v\u0259 ya daxil olmamaq \u0259n \u00e7ox xidm\u0259t i\u015f\u00e7isinin v\u0259ziyy\u0259ti v\u0259 kuki siyas\u0259ti il\u0259 ba\u011fl\u0131d\u0131r. Xidm\u0259t i\u015f\u00e7il\u0259ri, ke\u015f v\u0259 yenil\u0259m\u0259l\u0259ri idar\u0259 ed\u0259n skript iOS-da 11.3 versiyas\u0131nda (Apple WebKit, 2018) peyda oldu; ke\u015fin idar\u0259 edilm\u0259si Cache Storage API (W3C, 2020) vasit\u0259sil\u0259 h\u0259yata ke\u00e7irilir v\u0259 Web Push iOS 16.4 (Apple, 2023)-d\u0259n b\u0259ri m\u00f6vcuddur. Ke\u015f xarab olarsa, PWA yenil\u0259n\u0259 v\u0259 sessiyalar\u0131 itir\u0259 bil\u0259r; domen \u00fc\u00e7\u00fcn ke\u015f\/kukil\u0259rin t\u0259mizl\u0259nm\u0259si xidm\u0259t i\u015f\u00e7isini yenid\u0259n qeydiyyata al\u0131r. Praktik hal: iOS 15-d\u0259 istifad\u0259\u00e7i daxil ola bilm\u0259di; Safari-d\u0259 sayt m\u0259lumatlar\u0131n\u0131n t\u0259mizl\u0259nm\u0259si v\u0259 q\u0131sayolun b\u0259rpa edilmi\u015f sabitliyinin yenid\u0259n \u0259lav\u0259 edilm\u0259si. \u0130stifad\u0259\u00e7inin faydas\u0131, yenid\u0259n qura\u015fd\u0131rmadan funksionall\u0131\u011f\u0131 b\u0259rpa etm\u0259kdir.<\/p>\n

Yan y\u00fckl\u0259rin qura\u015fd\u0131r\u0131lmas\u0131 zaman\u0131 antivirus\/firewall bloklanmas\u0131 m\u0259nb\u0259nin yoxlan\u0131lmas\u0131 zaman\u0131 m\u00fchafiz\u0259nin m\u00fcv\u0259qq\u0259ti z\u0259ifl\u0259dilm\u0259sini t\u0259l\u0259b edir. AV-Test (2021) Google Play-d\u0259n k\u0259nar qanuni APK-lar \u00fc\u00e7\u00fcn 12%-\u0259 q\u0259d\u0259r yanl\u0131\u015f pozitivl\u0259ri qeyd edir ki, bu da q\u0259fil r\u0259ddl\u0259ri izah edir. \u018fn t\u0259hl\u00fck\u0259siz h\u0259r\u0259k\u0259t yolu SHA-256 yoxlamas\u0131n\u0131 (NIST FIPS 180-4, 2015) yerin\u0259 yetirm\u0259k, r\u0259smi domend\u0259n qura\u015fd\u0131rmaq, sonra m\u00fchafiz\u0259ni b\u0259rpa etm\u0259k v\u0259 laz\u0131m g\u0259l\u0259rs\u0259, fayl\/kataloq istisnas\u0131 \u0259lav\u0259 etm\u0259kdir. Praktik bir v\u0259ziyy\u0259t: Android 10-da antivirus qura\u015fd\u0131rman\u0131 bloklad\u0131; yoxlaman\u0131n v\u0259 hash yoxlamas\u0131n\u0131n m\u00fcv\u0259qq\u0259ti olaraq s\u00f6nd\u00fcr\u00fclm\u0259si prosesi ba\u015fa \u00e7atd\u0131rma\u011fa imkan verdi, bundan sonra \u0259m\u0259liyyata t\u0259sir etm\u0259d\u0259n qoruma b\u0259rpa edildi. \u0130stifad\u0259\u00e7inin faydas\u0131 yalan pozitivl\u0259rin v\u0259 risk\u0259 n\u0259zar\u0259tin azalmas\u0131d\u0131r.<\/p>\n

 “Fayl z\u0259d\u0259l\u0259nib”, “Yadda\u015f kifay\u0259t deyil”, “T\u0259tbiq kod olmadan qura\u015fd\u0131r\u0131la bilm\u0259z” \u2014 n\u0259 etm\u0259liy\u0259m?<\/strong><\/h3>\n

Kodla\u015fd\u0131rma olmadan probleml\u0259rin h\u0259lli b\u00fct\u00f6vl\u00fck v\u0259 resursun yoxlan\u0131lmas\u0131 il\u0259 ba\u015flay\u0131r: r\u0259smi m\u0259nb\u0259d\u0259n yenid\u0259n y\u00fckl\u0259m\u0259, SHA-256 yoxlamas\u0131n\u0131 yerin\u0259 yetirm\u0259k (NIST FIPS 180-4, 2015), yadda\u015f\u0131 bo\u015faltmaq v\u0259 qura\u015fd\u0131r\u0131c\u0131 ke\u015fini t\u0259mizl\u0259m\u0259k. \u018fS\/arxitektura versiyas\u0131n\u0131n uy\u011funsuzlu\u011fu (m\u0259s\u0259l\u0259n, arm64-v8a-n\u0131 armeabi-v7a-da qura\u015fd\u0131rmaq c\u0259hdi) qura\u015fd\u0131r\u0131c\u0131n\u0131n u\u011fursuzlu\u011funa s\u0259b\u0259b olur; \u018fS-nin yenil\u0259nm\u0259si v\u0259 ya uy\u011fun qurulu\u015fun se\u00e7ilm\u0259si problemi h\u0259ll edir. Praktik bir v\u0259ziyy\u0259t: Android 9-da yadda\u015f\u0131n bo\u015fald\u0131lmas\u0131 v\u0259 yenid\u0259n y\u00fckl\u0259m\u0259 “Fayl z\u0259d\u0259l\u0259nib” x\u0259tas\u0131n\u0131 h\u0259ll etdi v\u0259 qura\u015fd\u0131rma u\u011furlu oldu. \u0130stifad\u0259\u00e7inin faydas\u0131, x\u00fcsusi d\u0259st\u0259y\u0259 ehtiyac olmadan \u00fcmumi probleml\u0259rin proqnozla\u015fd\u0131r\u0131la bil\u0259n h\u0259llidir.<\/p>\n

\u018flav\u0259 s\u0259b\u0259bl\u0259r\u0259 m\u00fcv\u0259qq\u0259ti fayl toqqu\u015fmalar\u0131 v\u0259 \u015f\u0259b\u0259k\u0259 ke\u015finin u\u011fursuzluqlar\u0131 daxildir; reboot v\u0259 yenid\u0259n qura\u015fd\u0131rma tez-tez prosesi b\u0259rpa edir. S\u0259hv davam ed\u0259rs\u0259, Android versiyas\u0131 t\u0259l\u0259bl\u0259rini (minimum Android 8) v\u0259 ABI uy\u011funlu\u011funu yoxlamaq faydal\u0131d\u0131r. Bu strategiya Android T\u0259rtibat\u00e7\u0131lar\u0131n\u0131n t\u00f6vsiy\u0259l\u0259rin\u0259 (2017\u20132022) \u0259saslan\u0131r: etibarl\u0131 imza, kifay\u0259t q\u0259d\u0259r resurslar, m\u00fcasir TLS kanal\u0131 v\u0259 t\u0259sdiql\u0259nmi\u015f m\u0259nb\u0259. \u0130stifad\u0259\u00e7inin faydas\u0131 vaxta q\u0259na\u0259t v\u0259 minimal t\u0259krar c\u0259hdl\u0259rdir.<\/p>\n

 PWA yenil\u0259nmir v\u0259 ya daxil deyil: ke\u015f\/kukil\u0259rin t\u0259mizl\u0259nm\u0259si k\u00f6m\u0259k edirmi?<\/strong><\/h3>\n

PWA sabitliyi xidm\u0259t i\u015f\u00e7isind\u0259n, ke\u015f siyas\u0259tind\u0259n v\u0259 sessiya kuki v\u0259ziyy\u0259tind\u0259n as\u0131l\u0131d\u0131r. Xidm\u0259t i\u015f\u00e7il\u0259ri oflayn ke\u015f v\u0259 yenil\u0259m\u0259l\u0259ri idar\u0259 edir (Apple WebKit, iOS 11.3, 2018), Cache Storage API (W3C, 2020) is\u0259 m\u0259zmun v\u0259 uy\u011funluq \u00fcz\u0259rind\u0259 inc\u0259 n\u0259zar\u0259t etm\u0259y\u0259 imkan verir. Ke\u015fin pozulmas\u0131 interfeys yenil\u0259m\u0259l\u0259ri v\u0259 avtorizasiya il\u0259 ba\u011fl\u0131 probleml\u0259r\u0259 s\u0259b\u0259b ola bil\u0259r; sayt m\u0259lumatlar\u0131n\u0131 t\u0259mizl\u0259m\u0259k v\u0259 ekran\u0131n q\u0131sa yolunu yenid\u0259n qeydiyyatdan ke\u00e7irm\u0259k problemi h\u0259ll edir. iOS 16.4-d\u0259n b\u0259ri Web Push (Apple, 2023) t\u0259tbiq edilib, a\u00e7\u0131q raz\u0131l\u0131qdan sonra aktivl\u0259\u015fdirilib, bildiri\u015f funksiyas\u0131n\u0131 geni\u015fl\u0259ndirir. Praktik bir v\u0259ziyy\u0259t: iOS 15-d\u0259 Safari ke\u015fini t\u0259mizl\u0259dikd\u0259n sonra giri\u015f b\u0259rpa edildi v\u0259 PWA d\u00fczg\u00fcn \u015f\u0259kild\u0259 yenil\u0259ndi. \u0130stifad\u0259\u00e7inin faydas\u0131, yenid\u0259n qura\u015fd\u0131rmadan v\u0259 ya d\u0259st\u0259k il\u0259 \u0259laq\u0259 saxlamadan funksionall\u0131\u011f\u0131 b\u0259rpa etm\u0259kdir.<\/p>\n

Praktiki add\u0131mlara a\u015fa\u011f\u0131dak\u0131lar daxildir: brauzer parametrl\u0259ri \u2192 tarix\/sayt m\u0259lumatlar\u0131 \u2192 domen \u00fc\u00e7\u00fcn m\u0259lumatlar\u0131n t\u0259mizl\u0259nm\u0259si; brauzeri yenid\u0259n ba\u015flad\u0131n v\u0259 PWA-n\u0131 yenid\u0259n aktivl\u0259\u015fdirin. Bu t\u00f6vsiy\u0259l\u0259r k\u00f6hn\u0259lmi\u015f tokenl\u0259ri v\u0259 ke\u015f artefaktlar\u0131n\u0131 t\u0259mizl\u0259m\u0259k konfliktl\u0259ri minimuma endirdiyi OWASP sessiyas\u0131n\u0131n idar\u0259 edilm\u0259si \u00fczr\u0259 \u0259n yax\u015f\u0131 t\u0259cr\u00fcb\u0259l\u0259r\u0259 (Top 10, 2021\u20132023) uy\u011fun g\u0259lir. \u0130stifad\u0259\u00e7inin faydas\u0131 sistem siyas\u0259tl\u0259rin\u0259 m\u00fcdaxil\u0259 etm\u0259d\u0259n ard\u0131c\u0131l sessiyalar v\u0259 d\u00fczg\u00fcn yenil\u0259m\u0259l\u0259rdir.<\/p>\n

 Antivirus\/Firewall Bloklama Qura\u015fd\u0131rmas\u0131: T\u0259hl\u00fck\u0259siz Nec\u0259 Davam Etm\u0259k olar?<\/strong><\/h3>\n

Yanl\u0131\u015f antivirus x\u0259b\u0259rdarl\u0131qlar\u0131ndan sonra t\u0259hl\u00fck\u0259siz qura\u015fd\u0131rma add\u0131m-add\u0131m yoxlama v\u0259 qorunman\u0131n m\u00fcv\u0259qq\u0259ti z\u0259ifl\u0259m\u0259sini t\u0259l\u0259b edir. AV-Test (2021) Google Play-d\u0259n k\u0259nar qanuni APK-lar \u00fc\u00e7\u00fcn ~12% yanl\u0131\u015f m\u00fcsb\u0259t nisb\u0259t bildirir, ona g\u00f6r\u0259 d\u0259 SHA-256 yoxlan\u0131\u015f\u0131 (NIST FIPS 180-4, 2015), m\u0259nb\u0259nin yoxlan\u0131lmas\u0131 v\u0259 t\u0259hl\u00fck\u0259siz kanal \u00fcz\u0259rind\u0259n qura\u015fd\u0131rma (TLS 1.2\/1.3) m\u0259cburi add\u0131mlard\u0131r. Qura\u015fd\u0131r\u0131ld\u0131qdan sonra qorunma b\u0259rpa olunur v\u0259 z\u0259ruri hallarda kataloq istisnas\u0131 \u0259lav\u0259 olunur. Praktik bir v\u0259ziyy\u0259t: Android 10-da antivirus qura\u015fd\u0131rman\u0131 bloklad\u0131; yoxlaman\u0131n v\u0259 hash yoxlamas\u0131n\u0131n m\u00fcv\u0259qq\u0259ti olaraq s\u00f6nd\u00fcr\u00fclm\u0259si prosesin t\u0259hl\u00fck\u0259sizliy\u0259 x\u0259l\u0259l g\u0259tirm\u0259d\u0259n tamamlanmas\u0131na imkan verdi. \u0130stifad\u0259\u00e7inin faydas\u0131 yalan neqativl\u0259rin azald\u0131lmas\u0131 v\u0259 risk n\u0259zar\u0259tinin saxlanmas\u0131d\u0131r.<\/p>\n

T\u0259hl\u00fck\u0259sizliy\u0259 \u015f\u00fcbh\u0259 yaranarsa, t\u0259hl\u00fck\u0259sizlik duvar\u0131 y\u00fckl\u0259m\u0259l\u0259ri bloklaya bil\u0259r; sertifikat v\u0259 domen z\u0259ncirinin yoxlan\u0131lmas\u0131 m\u00fcnaqi\u015f\u0259l\u0259ri h\u0259ll edir. OWASP t\u00f6vsiy\u0259l\u0259ri (Top 10, 2021\u20132023) kritik qorumalar\u0131n h\u0259mi\u015f\u0259lik qeyri-aktiv edilm\u0259sin\u0259 icaz\u0259 vermir; z\u0259ifl\u0259tm\u0259y\u0259 yaln\u0131z fayl v\u0259 m\u0259nb\u0259nin qanuni oldu\u011fu t\u0259sdiq edildikd\u0259 icaz\u0259 verilir. Praktik hal: \u015f\u0259b\u0259k\u0259 filtri s\u0259viyy\u0259sind\u0259 m\u00fcv\u0259qq\u0259ti istisnalar APK-n\u0131n r\u0259smi domend\u0259n endirilm\u0259sin\u0259 v\u0259 hash\u0131n yoxlanmas\u0131na imkan verdi, bundan sonra g\u0259l\u0259c\u0259k istismara m\u0259nfi t\u0259sir g\u00f6st\u0259rm\u0259d\u0259n qoruma b\u0259rpa edildi. \u0130stifad\u0259\u00e7inin faydas\u0131 \u0259l\u00e7atanl\u0131\u011fa x\u0259l\u0259l g\u0259tirm\u0259d\u0259n t\u0259hl\u00fck\u0259sizlikdir.<\/p>\n

 <\/p>\n

 <\/p>\n

 Yenil\u0259m\u0259l\u0259r, D\u0259st\u0259k v\u0259 Qaydalar: Qura\u015fd\u0131rma versiyas\u0131n\u0131 haradan tapmaq, d\u0259st\u0259k d\u0259st\u0259yi il\u0259 nec\u0259 \u0259laq\u0259 saxlamaq v\u0259 h\u0259r hans\u0131 regional m\u0259hdudiyy\u0259tl\u0259r varm\u0131?<\/strong><\/h2>\n

M\u00fc\u015ft\u0259rinin h\u0259yat d\u00f6vr\u00fcn\u00fcn idar\u0259 edilm\u0259sin\u0259 m\u00fcnt\u0259z\u0259m yenil\u0259m\u0259l\u0259r, d\u0259st\u0259k il\u0259 d\u00fczg\u00fcn \u00fcnsiyy\u0259t v\u0259 yerli giri\u015f m\u0259hdudiyy\u0259tl\u0259rinin n\u0259z\u0259r\u0259 al\u0131nmas\u0131 daxildir. Google Android Developers (2022) g\u00f6r\u0259, yenil\u0259m\u0259l\u0259r m\u0259lum uy\u011funluq probleml\u0259rinin \u0259ks\u0259riyy\u0259tini h\u0259ll edir; SensorTower (2022) s\u0259nayed\u0259 mobil proqramlar \u00fc\u00e7\u00fcn orta yenil\u0259m\u0259 d\u00f6vr\u00fcn\u00fc 4-6 h\u0259ft\u0259 qiym\u0259tl\u0259ndirir ki, bu da versiyan\u0131n v\u0259 burax\u0131l\u0131\u015f tarixinin vaxta\u015f\u0131r\u0131 yoxlan\u0131lmas\u0131n\u0131 t\u0259l\u0259b edir. Az\u0259rbaycanda \u015f\u0259b\u0259k\u0259 filtrl\u0259ri v\u0259 f\u0259rdi domenl\u0259rin bloklanmas\u0131 m\u00fcmk\u00fcnd\u00fcr, ona g\u00f6r\u0259 d\u0259 g\u00fczg\u00fcl\u0259rin v\u0259 versiyalar\u0131n yenil\u0259nm\u0259si x\u00fcsusil\u0259 vacibdir: k\u00f6hn\u0259lmi\u015f ke\u00e7idl\u0259r imza konfliktl\u0259rin\u0259 v\u0259 qura\u015fd\u0131rma x\u0259talar\u0131na s\u0259b\u0259b ola bil\u0259r. Praktik hal: Android 11-d\u0259 k\u00f6hn\u0259 APK qura\u015fd\u0131rmaq imza m\u00fcnaqi\u015f\u0259si il\u0259 n\u0259tic\u0259l\u0259ndi; r\u0259smi veb sayt\u0131ndan \u0259n son versiyaya y\u00fcks\u0259ldilm\u0259si x\u0259tan\u0131 h\u0259ll etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n uy\u011funluq v\u0259 daha az t\u0259krar c\u0259hddir.<\/p>\n

Cari versiya v\u0259 d\u0259yi\u015fiklik jurnal\u0131 qurulu\u015f n\u00f6mr\u0259si, burax\u0131l\u0131\u015f tarixi v\u0259 d\u0259yi\u015fiklik qeydin\u0259 \u0259sas\u0259n yoxlan\u0131l\u0131r. Bu m\u0259lumatlar r\u0259smi burax\u0131l\u0131\u015f s\u0259hif\u0259l\u0259rind\u0259 d\u0259rc olunur v\u0259 x\u00fcsusi qura\u015fd\u0131rma x\u0259tas\u0131n\u0131n d\u00fcz\u0259ldildiyini v\u0259 ya yeni OS versiyas\u0131 v\u0259 ya arxitektura d\u0259st\u0259yinin \u0259lav\u0259 edilib-edilm\u0259diyini qiym\u0259tl\u0259ndirm\u0259y\u0259 imkan verir. Tarix\u0259n, Android 7.0 il\u0259 Google m\u0259cburi APK imza yoxlamas\u0131n\u0131 (Google Android Developers, 2016) h\u0259yata ke\u00e7ir\u0259r\u0259k, imza uy\u011funsuzluqlar\u0131n\u0131 v\u0259 k\u00f6hn\u0259lmi\u015f konstruksiyalar\u0131 r\u0259ddl\u0259rin \u00fcmumi s\u0259b\u0259bi etdi. Praktik n\u00fcmun\u0259: Android 9-da istifad\u0259\u00e7i 1.2.3 versiyas\u0131n\u0131 qura\u015fd\u0131rma\u011fa c\u0259hd etdi, halbuki haz\u0131rk\u0131 versiya 1.3.0 idi; sistem paketi r\u0259dd etdi v\u0259 \u0259n son versiyaya yenil\u0259m\u0259 problemi h\u0259ll etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 azald\u0131lm\u0131\u015f riskl\u0259r v\u0259 “s\u0259ssiz” imtinalard\u0131r.<\/p>\n

Effektiv d\u0259st\u0259k sor\u011fusu t\u0259qdim olunan m\u0259lumat\u0131n taml\u0131\u011f\u0131na v\u0259 d\u00fczg\u00fcnl\u00fcy\u00fcn\u0259 \u0259saslan\u0131r: cihaz modeli, \u018fS versiyas\u0131, add\u0131mlar\u0131n ard\u0131c\u0131ll\u0131\u011f\u0131, d\u0259qiq s\u0259hv m\u0259tni, c\u0259hd vaxt\u0131, ekran g\u00f6r\u00fcnt\u00fcl\u0259ri v\u0259 \u0259g\u0259r varsa, jurnallar. Zendesk (2021) g\u00f6st\u0259rdi ki, ekran g\u00f6r\u00fcnt\u00fcl\u0259ri v\u0259 qeydl\u0259r h\u0259lletm\u0259 vaxt\u0131n\u0131 ~40% azald\u0131r. Dilin (rus\/Az\u0259rbaycan) v\u0259 saat qur\u015fa\u011f\u0131n\u0131n d\u0259qiql\u0259\u015fdirilm\u0259si SLA-n\u0131 d\u0259qiq qiym\u0259tl\u0259ndirm\u0259y\u0259 v\u0259 \u00fcnsiyy\u0259t prosesini strukturla\u015fd\u0131rma\u011fa k\u00f6m\u0259k edir. Praktik hal: Bak\u0131dan olan istifad\u0259\u00e7i “Fayl pozulub” skrin\u015fotunu v\u0259 qura\u015fd\u0131rma jurnal\u0131n\u0131 \u0259lav\u0259 etdi; m\u00fct\u0259x\u0259ssisl\u0259r antivirus proqram\u0131 il\u0259 ziddiyy\u0259ti m\u00fc\u0259yy\u0259n etdil\u0259r v\u0259 h\u0259ll yolu t\u0259klif etdil\u0259r, bundan sonra qorunma b\u0259rpa edildi v\u0259 \u0259m\u0259liyyat stabil oldu. \u0130stifad\u0259\u00e7i s\u00fcr\u0259tli h\u0259ll v\u0259 \u015f\u0259ffaf prosesd\u0259n faydalan\u0131r.<\/p>\n

Az\u0259rbaycanda yerli giri\u015f m\u0259hdudiyy\u0259tl\u0259ri qumar xidm\u0259tl\u0259rinin domenl\u0259rinin m\u00fcv\u0259qq\u0259ti bloklanmas\u0131 il\u0259 ba\u011fl\u0131d\u0131r; Freedom House (2022) f\u0259rdi veb-saytlar\u0131n \u0259l\u00e7atan olmamas\u0131 hallar\u0131n\u0131 s\u0259n\u0259dl\u0259\u015fdirib. Bel\u0259 v\u0259ziyy\u0259tl\u0259rd\u0259 etibarl\u0131 SSL v\u0259 ya yax\u0131nl\u0131qdak\u0131 VPN qov\u015faqlar\u0131 (T\u00fcrkiy\u0259, G\u00fcrc\u00fcstan) olan r\u0259smi g\u00fczg\u00fc saytlar\u0131ndan istifad\u0259 m\u0259qbul gecikm\u0259 il\u0259 giri\u015fi b\u0259rpa edir (Cisco, 2021; Sandvine, 2021). Praktiki hal: Nar abun\u0259\u00e7isinin \u0259sas domeni a\u00e7\u0131lm\u0131rd\u0131; etibarl\u0131 sertifikat z\u0259nciri il\u0259 r\u0259smi g\u00fczg\u00fc sayt\u0131na ke\u00e7id s\u0259hvsiz APK y\u00fckl\u0259m\u0259sini t\u0259min etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n giri\u015f v\u0259 yerli m\u0259hdudiyy\u0259tl\u0259r alt\u0131nda d\u00fczg\u00fcn qura\u015fd\u0131rmad\u0131r.<\/p>\n

 Cari versiyan\u0131, d\u0259yi\u015fiklik jurnal\u0131n\u0131 v\u0259 uy\u011funlu\u011fu nec\u0259 yoxlamaq olar?<\/strong><\/h3>\n

Versiya v\u0259 d\u0259yi\u015fiklikl\u0259r jurnal\u0131n\u0131n yoxlan\u0131lmas\u0131 r\u0259smi burax\u0131l\u0131\u015f s\u0259hif\u0259sind\u0259n ba\u015flay\u0131r: t\u0259rtibat n\u00f6mr\u0259si, burax\u0131l\u0131\u015f tarixi v\u0259 d\u0259yi\u015fiklik jurnal\u0131 d\u00fcz\u0259ldilmi\u015f s\u0259hvl\u0259ri v\u0259 \u018fS\/arxitektura uy\u011funlu\u011funu t\u0259svir edir. Google Android 7.0 (Google Android Developers, 2016) il\u0259 m\u0259cburi imza yoxlamas\u0131n\u0131 t\u0259qdim etdi v\u0259 k\u00f6hn\u0259lmi\u015f v\u0259 ya d\u0259yi\u015fdirilmi\u015f konstruksiyalar\u0131 u\u011fursuzlu\u011fa s\u0259b\u0259b etdi. Praktik n\u00fcmun\u0259: Android 8-d\u0259 Android 9 t\u0259l\u0259b ed\u0259n APK qura\u015fd\u0131rmaq c\u0259hdi u\u011fursuzluqla n\u0259tic\u0259l\u0259ndi; \u018fS-nin yenil\u0259nm\u0259si v\u0259 ya uy\u011fun versiyan\u0131n se\u00e7ilm\u0259si m\u00fcnaqi\u015f\u0259ni h\u0259ll etdi. \u0130stifad\u0259\u00e7inin faydas\u0131, gizli problem olmadan proqnozla\u015fd\u0131r\u0131la bil\u0259n qura\u015fd\u0131rmad\u0131r.<\/p>\n

D\u0259yi\u015fiklik jurnal\u0131n\u0131n rolu s\u0259hvinizin d\u00fcz\u0259ldildiyini v\u0259 hans\u0131 as\u0131l\u0131l\u0131qlar\u0131n yenil\u0259ndiyini t\u0259sdiql\u0259m\u0259kdir. M\u0259s\u0259l\u0259n, 1.3.0 burax\u0131l\u0131\u015f\u0131na “Android 9-da qura\u015fd\u0131rma x\u0259tas\u0131” \u00fc\u00e7\u00fcn d\u00fcz\u0259li\u015f daxil ola bil\u0259r v\u0259 bu, yenil\u0259m\u0259ni h\u0259min versiya \u00fc\u00e7\u00fcn m\u0259cburi edir. H\u0259r 4-6 h\u0259ft\u0259d\u0259n bir m\u00fcnt\u0259z\u0259m yoxlama strategiyas\u0131 (SensorTower, 2022) uy\u011funsuzluqlar\u0131n y\u0131\u011f\u0131lmas\u0131n\u0131 azald\u0131r. \u0130stifad\u0259\u00e7inin faydas\u0131 daha az yenid\u0259n qura\u015fd\u0131rma v\u0259 ard\u0131c\u0131l yenil\u0259m\u0259l\u0259rdir.<\/p>\n

 D\u0259st\u0259yi nec\u0259 d\u00fczg\u00fcn yazmaq v\u0259 n\u0259yi daxil etm\u0259k laz\u0131md\u0131r?<\/strong><\/h3>\n

D\u0259st\u0259k biletinin strukturuna daxildir: cihaz modeli, OS versiyas\u0131, qura\u015fd\u0131rma ard\u0131c\u0131ll\u0131\u011f\u0131, d\u0259qiq s\u0259hv m\u0259tni, c\u0259hd vaxt\u0131, ekran g\u00f6r\u00fcnt\u00fcl\u0259ri v\u0259 qeydl\u0259r. Zendesk (2021) g\u00f6st\u0259rdi ki, skrin\u015fotlar\u0131n\/loglar\u0131n t\u0259qdim edilm\u0259si h\u0259lli ~40% s\u00fcr\u0259tl\u0259ndirir. Dil v\u0259 saat qur\u015fa\u011f\u0131n\u0131n d\u0259qiql\u0259\u015fdirilm\u0259si SLA v\u0259 kommunikasiya plan\u0131n\u0131n d\u0259qiq qiym\u0259tl\u0259ndirilm\u0259sin\u0259 imkan verir. Praktiki hal: Bak\u0131dan olan istifad\u0259\u00e7i qeydl\u0259ri v\u0259 “Fayl pozulub” ifad\u0259si il\u0259 skrin\u015fot \u0259lav\u0259 etdi. M\u00fct\u0259x\u0259ssisl\u0259r antivirus blokunu a\u015fkar etdil\u0259r v\u0259 t\u0259hl\u00fck\u0259siz prosedur t\u0259klif etdil\u0259r: hash yoxlamas\u0131, qura\u015fd\u0131rma v\u0259 geri qaytarma qorunmas\u0131. \u0130stifad\u0259\u00e7i h\u0259lli \u00fc\u00e7\u00fcn azald\u0131lm\u0131\u015f vaxtdan v\u0259 daha az ir\u0259li-geri s\u00f6hb\u0259td\u0259n faydalan\u0131r.<\/p>\n

\u015e\u0259b\u0259k\u0259 m\u00fchitini qeyd etm\u0259k d\u0259 faydal\u0131d\u0131r: operator (Azercell\/Bakcell\/Nar), VPN istifad\u0259si v\u0259 g\u00fcn\u00fcn vaxt\u0131, \u00e7\u00fcnki CDN s\u0131xl\u0131\u011f\u0131 v\u0259 yerli filtrl\u0259r giri\u015f\u0259 t\u0259sir ed\u0259 bil\u0259r. Bu m\u0259lumatlar diaqnostikan\u0131 s\u00fcr\u0259tl\u0259ndirir v\u0259 t\u0259krar d\u0259st\u0259k sor\u011fular\u0131n\u0131 minimuma endirir. \u0130stifad\u0259\u00e7i \u00fcst\u00fcnl\u00fckl\u0259rin\u0259 \u015f\u0259ffafl\u0131q, s\u00fcr\u0259tli giri\u015fin b\u0259rpas\u0131 v\u0259 d\u00fczg\u00fcn qura\u015fd\u0131rma daxildir.<\/p>\n

 Az\u0259rbaycanda yerli giri\u015f m\u0259hdudiyy\u0259tl\u0259ri varm\u0131 v\u0259 onlar nec\u0259 n\u0259z\u0259r\u0259 al\u0131nmal\u0131d\u0131r?<\/strong><\/h3>\n

Regional kontekst qumar xidm\u0259ti domenl\u0259rinin m\u00fcv\u0259qq\u0259ti bloklanmas\u0131n\u0131 v\u0259 filtrasiyas\u0131n\u0131 \u0259hat\u0259 edir; Freedom House (2022) bel\u0259 hallar\u0131 s\u0259n\u0259dl\u0259\u015fdirir. Bu \u015f\u0259raitd\u0259 etibarl\u0131 SSL il\u0259 r\u0259smi g\u00fczg\u00fc saytlar\u0131n\u0131 yoxlamaq v\u0259 yax\u0131nl\u0131qdak\u0131 VPN qov\u015faqlar\u0131ndan istifad\u0259 etm\u0259k (T\u00fcrkiy\u0259, G\u00fcrc\u00fcstan) m\u0259qbul gecikm\u0259 il\u0259 giri\u015fi qoruma\u011fa k\u00f6m\u0259k edir (Cisco, 2021; Sandvine, 2021). Praktik hal: \u0259sas domen Nar vasit\u0259sil\u0259 a\u00e7\u0131lmay\u0131b, lakin etibarl\u0131 sertifikat z\u0259ncirin\u0259 malik r\u0259smi g\u00fczg\u00fc sayt\u0131 APK-ni endirm\u0259y\u0259 icaz\u0259 verib; SHA-256 yoxlamas\u0131 onun b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259sdiql\u0259di v\u0259 qura\u015fd\u0131rma s\u0259hvsiz davam etdi. \u0130stifad\u0259\u00e7inin faydas\u0131 proqnozla\u015fd\u0131r\u0131la bil\u0259n giri\u015f v\u0259 t\u0259hl\u00fck\u0259sizlikdir.<\/p>\n

G\u00fczg\u00fcl\u0259rin v\u0259 VPN-l\u0259rin rolu \u0259l\u00e7atanl\u0131\u011f\u0131 t\u0259min etm\u0259kdir, lakin fi\u015finq n\u00fcsx\u0259l\u0259rinin qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn nizam-intizaml\u0131 domen v\u0259 sertifikat\u0131n yoxlan\u0131lmas\u0131 vacibdir (APWG, 2022). Strategiya \u0259vv\u0259lc\u0259 r\u0259smi g\u00fczg\u00fc domenind\u0259n, sonra laz\u0131m olduqda VPN-d\u0259n istifad\u0259 etm\u0259kdir; TLS\/SSL diaqnostik al\u0259tl\u0259ri (SSL Labs, Qualys, 2023) konfiqurasiyan\u0131 tez yoxlama\u011fa k\u00f6m\u0259k edir. \u0130stifad\u0259\u00e7inin faydas\u0131 d\u00fczg\u00fcn qura\u015fd\u0131rma v\u0259 yerli filtrl\u0259m\u0259 \u015f\u0259raitind\u0259 \u0259m\u0259liyyat riskl\u0259rinin azald\u0131lmas\u0131d\u0131r.<\/p>\n

 <\/p>\n

\n

\u0427\u0438\u0442\u0430\u0439\u0442\u0435 \u0442\u0430\u043a\u0436\u0435:<\/h3>\n