Two documents which have come to light recently throw severe doubts on both DJI’s ability and willingness to install security measures in its products. In the first, Kevin Finisterre, a researcher, found that DJI left the private key for its dot-com’s HTTPS certificate exposed on GitHub for up to four years. In the second, a White Paper by Department 13 entitled ‘Anatomy of DJI Drone Identification Implementation’, it emerges that some of DJI’s approaches have clear security issues with no apparent remediation. Continue reading
