3 ms·
There have been some audits including the full network capture with Wireshark https://www.precisionhawk.com/hubfs/Retest_DJI%20Cybersecurity%20Risk%20Assessmen
by haunter 4y ago
There have been some audits including the full network capture with Wireshark
https://www.precisionhawk.com/hubfs/Retest_DJI%20Cybersecurity%20Risk%20Assessment%20Final%20Report_03.31.2020%20Executive%20Summary%20(1).pdf https://www.precisionhawk.com/hubfs/Retest_DJI%20Cybersecuri...
https://www.auvsi.org/sites/default/files/DHS%20report.pdf https://www.auvsi.org/sites/default/files/DHS%20report.pdf
This is from the DOI, see from page 40 https://web.archive.org/web/20190916135227/https://www.doi.gov/sites/doi.gov/files/uploads/oas_flight_test_and_technical_evaluation_report_-_dji_uas_data_managment_assurance_evaluation_-_7-2-19_v2.0.pdf https://web.archive.org/web/20190916135227/https://www.doi.g...
>We did not detect any leakage of data to DJI servers with any of the apps.
However, all three apps make a Domain Name System(DNS) request to the computer hosting
the WiFi network to resolve the IP address of "www.dji.com" when they are first started.
This DNS request goes to the router or a DNS server, and does not actually communicate
with any DJI servers, but it does tell the app the IP address of DJI servers.
The DJI Pilot Beta app follows this DNS request up with a ping to one ofthe DJI servers, and
receives a ping response back. This ping is used by the app to check that the server is up and
can receive messages. The ping does not contain any data, but the server could get the IP
address of the tablet and the time the app was started (since that’s when the ping is sent)
- coin 4y agoNote that the CCP can command a device to phone home in the future. So "We did not detect any leakage of data to DJI servers" just means that the device is currently not sending data home.