User Tools

Site Tools


faq:dataleakage

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
faq:dataleakage [2017/08/14 02:04]
czokie [IOS JSPatch]
faq:dataleakage [2017/08/27 03:39] (current)
czokie ↷ Links adapted because of a move operation
Line 1: Line 1:
 ====== DJI Data Leakage ====== ====== DJI Data Leakage ======
  
-This page will contain examples of where information "leaks" in ways that is unexpected to DJI consumers. Note also another page that will contain information on the [[tos|terms of service]] that are accepted as part of using the DJI ecosystem.+This page will contain examples of where information "leaks" in ways that is unexpected to DJI consumers. Note also another page that will contain information on the [[.tos:start|terms of service]] that are accepted as part of using the DJI ecosystem.
  
  
Line 18: Line 18:
 ==== The Response ==== ==== The Response ====
  
-DJI representatives initially claimed "//this has never been used in production//". DJI acknowledge this functionality is not permitted by google policy, and [[https://www.rcgroups.com/forums/showpost.php?p=38060360|they would not use this in a public setting]].+DJI representatives initially claimed that hot patching "//has never been used in production//". DJI acknowledge this functionality is not permitted, and [[https://www.rcgroups.com/forums/showpost.php?p=38060360|they would not use this in a public setting]].
  
 Regardless of the denial by DJI, you don't put a back door in your code for no good reason. Regardless of the denial by DJI, you don't put a back door in your code for no good reason.
  
-DJI have subsequently advised: //"[[https://www.rcgroups.com/forums/showpost.php?p=38061281|The Tinker issue is being addressed. We have never used it as a company. It should be removed with the next revision]].//"+DJI have subsequently advised that the issue: //"[[https://www.rcgroups.com/forums/showpost.php?p=38061281|The is being addressed. We have never used it as a company. It should be removed with the next revision]].//"
  
 These findings do paint a sinister story. The capability to dynamically change the software on your device to do anything you likeis like opening up Aladdin's cave. Apps could be dynamically modified to allow access to anything that the DJI go app has permission to access. That would include all access to all vision, all telemetry, and all flight logs. At its worst, this could include a command to "bring down" a drone being used for military purposes. This is the whole pandora's box, and explains why the US Army have ordered the removal of all DJI software from Army devices. These findings do paint a sinister story. The capability to dynamically change the software on your device to do anything you likeis like opening up Aladdin's cave. Apps could be dynamically modified to allow access to anything that the DJI go app has permission to access. That would include all access to all vision, all telemetry, and all flight logs. At its worst, this could include a command to "bring down" a drone being used for military purposes. This is the whole pandora's box, and explains why the US Army have ordered the removal of all DJI software from Army devices.
- 
  
 ===== DJI Forum - Disclosure of DJI sales history ===== ===== DJI Forum - Disclosure of DJI sales history =====
faq/dataleakage.1502676274.txt.gz · Last modified: 2017/08/14 02:04 by czokie