Here's How Hackers Could Have Spied On Your DJI Drone Account

[Hover Aerial]

For those that use the DJI HUB, please read this article ( Here's How Hackers Could Have Spied On Your DJI Drone Account ) and watch the video (

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

).

 

[Ctrlx]

For those that use the DJI HUB, please read this article ( Here's How Hackers Could Have Spied On Your DJI Drone Account ) and watch the video (

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

).

Words of note here are "COULD HAVE"...as the vulnerability was corrected immediately.

"We notified DJI about this vulnerability in March 2018 and DJI responded responsibly. The vulnerability has since been patched. DJI classified this vulnerability as high risk but low probability, and indicated there is no evidence this vulnerability was ever exploited by anyone other than Check Point researchers."

Why Check Point researchers would release a video like this MONTHS after the fact is in poor judgment.

 

[gnirtS]

Thats what responsible disclosure is. You identifty a vulnerability, contact the vendor with details, give them a sensible amount of time to fix then go public after its fixed. In this case it looks like DJI and the researchers did things by the book.
As opposed to the last and bigger failure where DJI had its private keys with public viewing on GitHub and spend ages pretending it didnt.