Consumer Rights Wiki - User contributions [en]

DJI

2026-01-24T11:25:42Z

Yaros: Added fact about hardware fuses on DJI devices

{{StubNotice}}
{{CompanyCargo
|Description=Chinese tech company producing drones and camera accessories for use in drone flying and surveying.
|Founded=2006
|Industry=Cameras, Drones, Electronics
|Logo=DJ logo.svg
|ParentCompany=
|Type=Private
|Website=https://www.dji.com/
}}
[[wikipedia:DJI|'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
==Consumer impact summary==
Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.

In particular, DJI drones have the following limits and caveats on their operation:

*They require persistent online reauthentication with a DJI account. Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
*DJI drones send out [https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking unencrypted RemoteID/Aeroscope packets] that can be captured by anyone, to follow the [https://www.faa.gov/uas/getting_started/remote_id Remote ID] law in the USA. They contain, amongst other things, the drone's serial number, camera information, pilot location, and Return-to-Home location. A [https://github.com/MAVProxyUser/CIAJeepDoors patch] is available to mitigate this feature on certain drone models and firmware versions.
*DJI firmware comes with [https://gist.github.com/KonradIT/e7bf81793eda6bb1e5406fd351d33565 many GPL components] whose sources aren't disclosed, thus violating the GPL license. There is a limited [https://dji.com/opensource disclosure page for their enterprise platforms], but it is very outdated and doesn't cover the GPL software in newer (post Mavic 2) consumer drones (whose OS is based on Android).
*While many drones support the [https://developer.dji.com/mobile-sdk/ DJI Mobile SDK], drones released from late 2021/2022 onwards have not yet received support. This significantly inhibits the consumer's ability to use their drone how they desire as it prevents the use of third party applications that often provide improved functionality and additional features. [https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 DJI Support has stated] that the company intends to no longer make SDK support available for new consumer models (such as the Air 3+ family) and only for enterprise series drones. For mapping use cases, users can now only rely on [https://www.youtube.com/watch?v=QpIej0Ai3VE a tedious manual workaround] rather than use dedicated applications.
*DJI Drones can be permanently linked to users which turns them into e-waste if carelessly returned to online shops.
*DJI devices have hardware fuses that can be blown using software to [https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 prevent firmware downgrade] to earlier versions.
*DJI Action and Pocket cameras require activation with the DJI Mimo app after a few uses or would fail to function.
*The Android version of the DJI Mimo application requests full filesystem access to the user's device each time a connection to a DJl camera is initiated. If a user denies this permission, the application will refuse to connect to the camera. If a user grants permission for access to only a specific folder or selection of media, the app will connect. However, on every subsequent connection, the app will again prompt for full filesystem access with the message: "DJI Mimo would like to access mobile device's storage, so that you can use features, including editing and downloading photos and videos from camera. Otherwise, related services will be restricted. Go to settings to grant permissions". To prevent the app from gaining access to all files on the device, the user must repeatedly select the "Don't select more" option in the Android permission prompt. This option is positioned directly below the "Allow all" selection, which necessitates user attention during each connection to maintain a restricted level of access.
*The DJI Mini 2 SE is almost identical to the Mini 2, but despite having a 4K camera, it is limited to 2.7K by its firmware. Users have found ways to rollback the firmware, flash it to the Mini 2 firmware, and then shoot in 4K. In later firmware versions, DJI implemented anti-rollback features, hence making it impossible to do this.
*The DJI RS 3 Mini requires the DJI Ronin app, downloaded directly from the DJI website for Android users, in order for the product to function after five "skips" of non-activation.

==Products==
*[[DJI Osmo Action 5 Pro]]
*[[DJI Ronin RS4 Pro]]

==See also==

==References==
{{reflist}}{{Placeholder box|Link to relevant theme articles or companies with similar incidents.}}
[[Category:DJI]]

LaLiga forces Spanish ISPs to mass-block Cloudflare IPs during Soccer Games

2025-08-17T08:12:40Z

Yaros: Added main article content: incident description, references

{{IncidentCargo
|Company=LaLiga, Cloudflare
|StartDate=2024-12
|Status=Active
|ProductLine=Internet Access
|ArticleType=Service
|Type=Digital restrictions, IP Blocking
|Description=A Spanish court allowed LaLiga to mandate mass IP blocks, mostly Cloudflare, which serves millions of legitimate websites via shared IPs.
}}
==Background==
In December 2024, a court in Barcelona allowed LaLiga to request blocking of IP addresses used for illegal streaming of football matches, often hosted via Cloudflare’s infrastructure.

Cloudflare serves millions of legitimate websites via shared IPs. Blocking these addresses has led to mass disruptions, including access loss to platforms like ChatGPT, GitHub, Discord, as well as critical government and medical services during match days.

==Incident==

*'''December 18, 2024''': The Commercial Court No. 6 of Barcelona issues a ruling<ref>{{Cite web |date=2024-12-18 |title=Centro General del Poder Judicial |url=https://www.poderjudicial.es/search/AN/openDocument/766326fb999ba14aa0a8778d75e36f0d/20250331 |url-status=live |website=CENDOJ |agency=Poder Judicial}}</ref> allowing LaLiga to request ISPs to block any IPs it deems are used for illegal streaming of its matches. This ruling also empowers LaLiga to update the list of blocked IPs weekly.
*'''February 9, 2025''': LaLiga initiates its first major blocking action, targeting Cloudflare IP ranges and promptly causing disruptions to legitimate services. One of the pirate platforms allegedly blocked is DuckVision, which had ~200,000 users.
*'''February 15, 2025''': In an official statement<ref>{{Cite news |date=2025-02-15 |title=Official statement |url=https://www.laliga.com/en-GB/news/official-statement-in-relation-to-the-blocking-of-ips-during-the-recent-ea-sports-laliga-matchdays-linked-to-illegal-cloudflare-practices |url-status=live |work=LaLiga |publisher=LaLiga}}</ref>, LaLiga denies any indiscriminate blocking. It accuses Cloudflare of knowingly facilitating criminal activities, including child pornography, and claims to have filed a police report.
*'''February 16, 2025''': Additional blocks are implemented targeting IPTV services DazcFutbolios and RBTV77<ref>{{Cite news |date=2025-02-17 |title=LALIGA blocks illegal streaming platforms DazcFutbolios and RBTV77 in Spain |url=https://www.laliga.com/en-GB/news/laliga-blocks-illegal-streaming-platforms-dazcfutbolios-and-rbtv77-in-spain |url-status=live |work=LALIGA blocks illegal streaming platforms DazcFutbolios and RBTV77 in Spain}}</ref>, which had substantial user bases in Spain.
*'''February 19, 2025''': Cloudflare, jointly with RootedCON, formally challenges the blocks in court, arguing they're disproportionate and harm millions of legitimate users.
*'''March 26–28, 2025''': The court dismisses appeals from Cloudflare and RootedCON<ref>{{Cite web |date=2025-03-26 |title=LaLiga and MovistarPlus will be able to continue blocking IP addresses indiscriminately, affecting millions of users and legitimate websites that have nothing to do with football. |url=https://x.com/jaumepons/status/1904906677335245294 |url-status=live |agency=RootedCON}}</ref>, stating no proof of harm was provided. The ruling reaffirms the legality of LaLiga’s actions under intellectual property law.
*'''April 15, 2025''': CEO of Vercel (a CDN provider) publicly criticizes<ref>{{Cite web |last=Rauch |first=Guillermo |date=2025-04-15 |title=Spain is censoring the internet |url=https://x.com/rauchg/status/1912218989872472489}}</ref> the blocks and notes that LaLiga had not contacted them directly. LaLiga then opens a communication channel, though Vercel reports continued blocking.

*'''May 2025 onward''': Media coverage intensifies<ref>{{Cite news |last=del Castillo |first=Carlos |date=2025-05-12 |title=LaLiga intensifies mass blocking of legal websites due to Barça-Madrid: "Are we that helpless?" |url=https://www.eldiario.es/tecnologia/laliga-intensifica-bloqueos-masivos-webs-legales-barca-madrid-desamparados_1_12291363.html |url-status=live}}</ref>, highlighting the disruptions to services like X, Steam, and GitHub raising concerns over fundamental rights and business continuity

===LaLiga's Response===

*Insists the blocking is targeted, not indiscriminate, and based only on IPs confirmed to host illegal activity.<ref>{{Cite news |date=2025-02-15 |title=LaLiga denies a "massive and indiscriminate" blocking of IP addresses and accuses Cloudfare. |url=https://cadenaser.com/nacional/2025/02/15/laliga-niega-un-bloqueo-masivo-e-indiscriminado-de-ips-y-carga-contra-cloudfare-cadena-ser/?utm_source=chatgpt.com |url-status=live}}</ref>
*Accuses Cloudflare of profiting from criminal content protection and using legitimate clients as “digital shields,” justifying the blocking as protective of intellectual property.<ref>{{Cite news |date=2025-02-15 |title=LaLiga accuses Cloudflare of "collaborating with piracy by using websites as a digital shield." |url=https://www.eleconomista.es/actualidad/noticias/13222728/02/25/laliga-acusa-a-a-cloudflare-por-colaborar-con-la-pirateria-usando-webs-como-escudo-digital.html |url-status=live}}</ref>

==Lawsuit==

===Claims===
Cloudflare and RootedCON argue the blocking is '''disproportionate''', lacked prior notice, and caused '''collateral damage''' to legitimate users, infringing on rights to information and service continuity.<ref>{{Cite news |last=Clover |first=Julian |date=2025-02-19 |title=Cloudflare takes legal action over LaLiga’s “disproportionate blocking efforts” |url=https://www.broadbandtvnews.com/2025/02/19/cloudflare-takes-legal-action-over-laligas-disproportionate-blocking-efforts/?utm_source=chatgpt.com |url-status=live}}</ref>

===Rebuttal===
LaLiga and the court maintain the order was legally obtained and executed with evidence of illicit content, citing compliance with intellectual property law and absence of demonstrated harm.<ref>{{Cite news |last=Maxwell |first=Andy |date=2025-03-28 |title=Judge Confirms LaLiga’s Right to Block Cloudflare in Pursuit of IPTV Pirates |url=https://torrentfreak.com/judge-confirms-laligas |url-status=live |work=TorrentFreak}}</ref>

===Outcome===
Appeals were dismissed and the court upheld LaLiga’s authority to proceed with the blocks. Cloudflare is considering further action, potentially at the constitutional or EU level.<ref>{{Cite news |last=Castro |first=Chiara |date=2025-06-20 |title=Cloudflare wants to fix Spain’s blocking of illegal football streams ahead of next LaLiga season |url=https://www.techradar.com/vpn/vpn-privacy-security/cloudflare-wants-to-fix-spains-blocking-of-illegal-football-streams-ahead-of-next-laliga-season?utm_source=chatgpt.com |url-status=live |work=techradar}}</ref>

==Consumer response==

===Services Affected===

*Numerous consumers and businesses reported service disruptions across platforms including X (formerly Twitter), Steam, GitHub, Google Fonts, coordinating apps, and institutional services.

===Public Sentiment===

*People expressed frustration and described the situation as overblocking of “half the Western internet.” Complaints on forums suggest prolonged disruptions and reliance on VPNs as a workaround.

==References==
{{reflist}}

LaLiga forces Spanish ISPs to mass-block Cloudflare IPs during Soccer Games

2025-08-16T22:13:46Z

Yaros: Created page with "{{IncidentCargo |Company=LaLiga, Cloudflare |StartDate=2024-12 |Status=Active |ProductLine=Internet Access |ArticleType=Service |Type=Digital restrictions, IP Blocking |Description=A Spanish court allowed LaLiga to mandate mass IP blocks, mostly Cloudflare, which serves millions of legitimate websites via shared IPs. }} {{Ph-I-Int}} ==Background== {{Ph-I-B}} ==[Incident]== {{Ph-I-I}} ===[Company]'s response=== {{Ph-I-ComR}} ==Lawsuit== {{Ph-I-L}} ==C..."