Investigating mis-implementation of SSL libraries in android applications

Tezin basılısı İstanbul Şehir Üniversitesi Kütüphanesi'ndedir.This thesis presents our analysis of applications that are popular at the market against SSL miss-implementation. 8.882 applications analyzed and as a result 2.354 applications have at least one miss use of SSL libraries which are Custom TrustManager, Custom HostnameVeriers and WebViewClient libraries. After analysis phase we have created a proof of concept application as an Xposed framework plugin to identify vulnerabilities. Ourconclusionisthat27percentofapplicationshaveavulnerabilityfromSSLconnection stand point. The main reasons for these vulnerabilities are developer errors and third party generators or libraries. Using third party libraries can cause security bugs which leads to informations leakage or exploitation.Declaration of Authorship ii Abstract iv Öz v Acknowledgments vii List of Figures x List of Tables xi Abbreviations xii 1 Introduction 1 2 SSL & SSL Applications in Android 3 3 Application Testing Methodology 5 3.1 Challenges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 3.2 Static Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 3.3 Inspection of results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 3.4 Dynamic Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3.4.1 CERT Transparent Proxy Capture Appliance (Tapioca) . . . . . . 10 3.4.2 Nogotofail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 3.5 Cross Reference Traversing . . . . . . . . . . . . . . . . . . . . . . . . . . 11 3.6 Analysis and Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 4 Proposed Solution 13 4.1 Xposed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 4.2 Trust But Verify . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 5 Development Best Practices for Security & Privacy 15 5.1 Certicate Pinning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 5.2 Certicate pinning in Android . . . . . . . . . . . . . . . . . . . . . . . . . 19 5.3 Alternative Methods for Certicate Validation . . . . . . . . . . . . . . . . 20 6 Related Work 22 7 Conclusions 2 A Cross Reference Traversing 26 Bibliography

A study on the impact of hedonic and utilitarian motives in online travel purchasing behaviour

internetteki gelişmelerle birlikte seyahat ürün ve hizmetlerinin internet ortamında satın alımasının yaygınlaşması, seyahat ürün ve hizmetlerinin satışını yapan turizm işletmeleri için tüketici davranışlarını anlamanın önemini arttırmıştır. Tüketici davranışlarını anlamak, turizm işletmelerinin ürün ve hizmetlerinin satışlarını arttırmaları konusunda etkili olmaktadır. Tüketici istek ve arzuları ile beraber tüketicileri satın almaya yönlendiren güdülerin bilinmesi tüketici davranışlarını anlamanın ön koşuludur. Tüketicilerin satın alma davranışlarını hangi güdülerden etkilenerek gerçekleştirdiklerini bilmek turizm sektöründe yer alan turizm işletmelerine rakipleri ile rekabet edebilme ve satışlarını artırma konularında yardımcı olmaktadır. Turizmde, tüketicilerin ürün ve hizmet tercihlerini anlayabilmek için ürün ve hizmetlerin hedonik ve faydacı boyutlarının incelenmesi oldukça önemlidir. Turizm ürünün yapısı gereği seyahat ürün ve hizmetlerinin satın alınmasında hedonik güdüler kadar faydacı güdüler de etkili olmaktadır. Hedonik ve faydacı güdüler, tüketicilerin satın alma davranışına etki eden önemli güdülerdendir. Tüketicilerin tercihlerini hedonik ve faydacı güdüler yönlendirmekte ve hedonik güdüler daha çok deneyimsel tüketime; haz ve eğlenceye odaklanırken faydacı güdüler ise para tasarrufu, zaman tasarrufu, kolaylık gibi fonksiyonel yararlara odaklanmaktadır. Bu tez çalışmasının temel amacı, seyahat ürün ve hizmet satın almada etkili olan hedonik ve faydacı güdüleri ve bu güdülerin alt boyutlarını açıklamaya çalışmaktır. Bu amaçla, bu çalışmada Türkiye’de online seyahat ürün ve hizmetleri satın alma davranışında hedonik ve faydacı güdülerin ne ölçüde etkili olduğu belirlenmeye çalışılmıştır. Tüketicilerin, internet ortamında seyahat ürün ve hizmetleri satın almalarında etkili olan hedonik ve fayadacı güdülerinin demografik özelliklere göre anlamlı bir farklılık gösterip göstermediği araştırılmış ve faydacı güdülerin medeni durum, yaş, eğitim ve gelire göre farklılık gösterdiği; hedonik güdülerin ise, cinsiyet, medeni durum, yaş ve eğitim gibi demografik özelliklere göre farklılık gösterdiği saptanmıştır.Together with developments in internet, the spread of purchasing of travel product and services has increased the importance of understanding consumer behavior for tourism businesses that makes the sale of travel products and services. Understanding consumer behavior is effective in increasing of sales of tourism busnesses’ products and services. Knowing the motives that directs consumer to purchase along with consumer demands and desires, is a prerequisite to understanding consumer behavior. The knowledge of motives of influencing consumer buying behavior helps about able to compete with their rivals and can increase sales of tourism businesses in tourism sector. Examination of hedonic and utilitarian motives’ dimension of products and services that is very important to understand consumers’products and services preferences in tourism. By nature of tourism product, hedonic motivates are as effective as utilitarian motives in purchasing travel products and services. Hedonic and utilitarian motives are important motivations affecting consumer’s buying behavior. Consumers’ preferences are being engineered according to their hedonic and utilitarian motives. While Hedonic motives are related on experiential consumption and pleasure and exciment, utilitarian motives are related saving money, time, convience as functional simplicity. Main purpose of this study is toward explaining hedonic and utilitarian motives effect purchasing travel product and services and subdimensions of this motives. In this study, ıt was tried to determine to be effective to the extent of hedonic and utilitarian motives in online travel products and services purchasing behavior. It was search that travel products and services purchase on the internet was affected hedonic and utilitarian motives would show a differentiate in significantly acconding to their demographic features or not and determined that hedonic motives had already been existed differentiated according to demograhic features such as marital status, age, education and income; hedonic motives has already been existed differentiated according to demografic features such as marital status, age, education and gender

A Simple Proof for the Existence of Generalized Large Zsigmondy Primes

If $a>b$ and $n>1$ are positive integers and $a$ and $b$ are relatively prime, then a large Zsigmondy prime of $(a,b,n)$ is a prime $p$ such that $p \,|\, a^n-b^n$ but $p \,\nmid \, a^m-b^m$ for $1 \leq m \leq n - 1$ and either $p^2 \, | \, a^n - b^n$ or $p > n + 1$. This paper lists all the triples $(a, b, n)$ for which no large Zsigmondy prime exists.Comment: 13 page

Hüseyin Yorulmaz, Bir Neslin Ağabeyi Erdem Bayazıt

1976–1990 yılları arasında toplam 163 sayı yayımlanan aylık edebiyat ve düşünce dergisi Mavera, Erdem Bayazıt, Cahit Zarifoğlu, Rasim Özdenören, Alaaddin Özdenören, Akif İnan, Hasan Seyithanoğlu ve Nazif Gürdoğan öncülüğünde, İslamî hassasiyeti edebî bir zeminde ihya etme amacıyla çıkarılmış bir dergidir. Tanzimat’la başlayan Cumhuriyet Dönemi’nde ise etkisini hızla arttıran Batılılaşma çabalarına karşı “yerli düşünce’’yi ikame etme misyonunu yüklenen dergi, etrafında toplanan öncü şahsiyetlerin fikir ve sanat kudretlerini birleştirdikleri “edebî bir mahfil’’ olmuştur.Kitapta evvela Erdem Bayazıt’ın çocukluk yılları, Cahit Zarifoğlu’yla bu dönemlerde başlayan dostlukları, kimliğinin oluşmasında önemli bir zemin olan Maraş şehri, edebî şahsiyetinin olgunlaşmaya başladığı gençlik yılları tafsilatlı bir şekilde anlatılmıştı

Kako prookolišno i štedljivo ponašanje određuju namjeru kupnje organskih i rabljenih proizvoda: istraživanje u Turskoj

The study focuses on sustainable consumption, which has recently gained popularity. The study seeks to ascertain the effects of pro-environmental behaviour and saving behaviour, both of which are constructs of sustainable consumption behaviour, on the organic and second-hand product purchase intention. Convenience sampling method was used in the collection of data, in which any consumer could participate, and the data were collected with a prepared online questionnaire. According to the findings of the study conducted on 595 Turkish consumers, pro-environmental behaviour and saving behaviour have positive effects on second-hand product purchase intentions, while pro-environmental behaviour has a positive effect on organic product purchase intention and saving behaviour has a negative effect on it. These findings make significant contributions to the literature and practice of sustainable consumption.Istraživanje je usmjereno na održivu potrošnju, koja je nedavno postala vrlo popularna u Turskoj. Rad nastoji utvrditi učinke ponašanja usmjerenog na očuvanje okoliša i ponašanja štednje, a oba su konstrukti ponašanja održive potrošnje, na namjeru kupnje organskih i rabljenih proizvoda. U prikupljanju podataka upotrijebljena je metoda prigodnog uzorkovanja, u kojoj je svaki potrošač mogao sudjelovati u istraživanju, a podaci su prikupljeni pripremljenim online-upitnikom. Prema nalazima istraživanja koje je provedeno na 595 turskih potrošača, prookolišno ponašanje i štedljivo ponašanje imaju pozitivne učinke na namjeru kupnje rabljenih proizvoda, dok prookolišno ponašanje pozitivno utječe na namjeru kupnje organskih proizvoda, a štedljivo ponašanje na tu namjeru ima negativan učinak. Ovi nalazi daju značajan doprinos literaturi i praksi održive potrošnje

Abidin Bey ile cennette birkaç gün

Taha Toros Arşivi, Dosya No: 178-Abidin Din

Disaster education in primary school: a qualitative research based on teachers’ opinions

This study aims to reveal the opinions of classroom teachers on disaster education in primary school. The study was conducted within the scope of phenomenology, one of the qualitative research methods, with 22 classroom teachers working in different regions of Turkey in 2020-2021 academic year. The study data was collected with the semi-structured interview method, and the collected data was analysed through content analysis. As a result of the study, it was determined that classroom teachers have knowledge and awareness about the concept of disaster, that disaster education is an urgent necessity for Turkey, and that disaster education is indispensable for preparing for disasters. In addition, it was stated that disaster education should be given through doing-living experiences and that these should be applied and made permanent. It has been determined that technology-supported disaster education provided using different teaching methods-techniques should not be limited to classrooms and be benefited from other environments. As a result, it was demonstrated that it is necessary to benefit from the power of education on the way to "Turkey Ready for Disasters" and "Education Year for Disasters" and that disaster education in primary school should be operative, permanent, concrete, doing-living, outdoor and technology supported

Day of The Week Effect in Conventional and Islamic Stock Indexes

In this study, existence of day of the week (DOW) effect is examined pre/post subprime crisis periods and in terms of conventional/Islamic of indexes. Canada, Indonesia, Japan, UK and USA markets are examined for a period of 2003-2014. The findings of the study showed significant DOW effect for all indexes, however such effect is not persistent. When DOW effect examined in terms of conventional and Islamic indexes of each market, there is not persistent conformity on the DOW effect for both indexes of the same markets

Investigation of transformational and transactional leadership styles of school principals, and evaluation of them in terms of educational administration

The aim of this study is to investigate the transformational and transactional leadership styles of school principals, and to evaluate them in terms of educational administration. Descriptive survey model was used in the research. The data of the research were obtained from a total of 1,117 teachers working in public and private schools subjected to ministry of national education in Avcılar district of Istanbul province in 2014. In this study, data were obtained from the "personal information form" developed by the researcher and from the "leadership styles scale". Data entry that was obtained from the respondents was made by statistical package for the social sciences (SPSS) version 17.0, and research data was resolved with "average", "standard deviation", “t-test” and “one-way analysis of variance”. According to research result; teachers had a high level of positive opinions with regard to transformational and transactional leadership characteristics of school principals. Teachers' perceptions about transformational and transactional leadership characteristics of school principals did not vary significantly according to gender, state of education and professional seniority

M. Fatih Andı, Güneşe Tutulan Ayna

Modern Türk edebiyatı üzerine yaptığı araştırma ve incelemelerle tanınan M. Fatih Andı, bu minvalde yürüttüğü çalışmalarına 2010 yılında çıkardığı Güneşe Tutulan Ayna isimli eseriyle bir yenisini daha ekledi. Söz konusu eser yazarın daha önce muhtelif yerlerde yayımlanmış çalışmalarını ihtiva etmektedir. Şiir incelemelerine hasredilmiş bu çalışma, zengin bir şiir koleksiyonunu özgün bir yorumlayış ve derinlikli bir perspektifle karşımıza çıkarmaktadır. Şiirlerin aynasından his ve idrâk dünyasına vuran akisleri çok yönlü tahlillerle harmanlayan yazar, okuyucusunu “aynanın ötesine yolculuk” yapmaya davet etmektedir