Well this is embarrassing...
DJI left it's AWS credentials, private SSL, firmware keys and more publicly accessible for years! Looks like plenty of personal information was passed through the system. No idea if any attackers have taken advantage of this info, but it seems even the US government knew DJI wasn't very secure as the US Army had banned their use earlier this year.
Read more here.
DJI left it's AWS credentials, private SSL, firmware keys and more publicly accessible for years! Looks like plenty of personal information was passed through the system. No idea if any attackers have taken advantage of this info, but it seems even the US government knew DJI wasn't very secure as the US Army had banned their use earlier this year.
Read more here.
