- Joined
- May 15, 2016
- Messages
- 14,571
- Likes
- 2,645
- Points
- 1,730
DJI Go for Android collects personal information from owners, and then this data can be used by the Chinese government. Digital security experts from the United States and Europe have investigated and found a vulnerability in the application that controls flying drones of the Chinese company Da Jiang Innovations (DJI). According to researchers from the French firm Synacktiv and the American GRIMM, the DJI Go app for the Android operating system collects personal information from owners, and then this data can be used by the Chinese government.
Experts note that the problem is not only in the collection of information. It is indicated that DJI can update its application bypassing Google, which usually checks all changes before they reach the Play Store. Thus, DJI may violate Google's agreement for app developers, the researchers note. It is difficult for a user to determine changes made to the software. However, even if the application is not active, it is waiting for commands from a remote server, experts say.
Google is going to study reports provided by digital security experts. Experts from Synacktiv, in turn, note that they did not find similar features of updating the application in the Chinese App Store for devices running on Apple's iOS operating system.
Experts suggest that the method of updating an Android application, where the user is directed to the drone manufacturer's website, is most likely due to the fact that the Chinese government is blocking Google and its services in the country. Thus, application developers are literally forced to independently resolve the issue of their updates.
According to The New York Times, the investigation was commissioned by third parties. Security experts do not name their clients, but indicate that in the past they have collaborated with various aerospace companies, as well as other drone manufacturers that may be potential competitors to DJI.
__________________
Experts note that the problem is not only in the collection of information. It is indicated that DJI can update its application bypassing Google, which usually checks all changes before they reach the Play Store. Thus, DJI may violate Google's agreement for app developers, the researchers note. It is difficult for a user to determine changes made to the software. However, even if the application is not active, it is waiting for commands from a remote server, experts say.
Google is going to study reports provided by digital security experts. Experts from Synacktiv, in turn, note that they did not find similar features of updating the application in the Chinese App Store for devices running on Apple's iOS operating system.
Experts suggest that the method of updating an Android application, where the user is directed to the drone manufacturer's website, is most likely due to the fact that the Chinese government is blocking Google and its services in the country. Thus, application developers are literally forced to independently resolve the issue of their updates.
According to The New York Times, the investigation was commissioned by third parties. Security experts do not name their clients, but indicate that in the past they have collaborated with various aerospace companies, as well as other drone manufacturers that may be potential competitors to DJI.
__________________