DJI - Revision history

OrwellsJester: Add citation for DJI rebind

2026-04-20T01:26:52Z

Add citation for DJI rebind

76.78.61.104: Duplicate "Products" section removed.

2026-03-31T14:48:50Z

Duplicate "Products" section removed.

← Older revision		Revision as of 14:48, 31 March 2026
Line 30:		Line 30:
	The US Department of Commerce added DJI to its Entity List in December 2020, restricting the company's access to US-made technologies.<ref name="uhrp">{{Cite web \|url=https://uhrp.org/report/surveillance-tech-series-djis-links-to-human-rights-abuses-in-east-turkistan/ \|title=Surveillance Tech Series: DJI's Links to Human Rights Abuses in East Turkistan \|date=2024-03-05 \|website=Uyghur Human Rights Project \|access-date=2026-03-29}}</ref> The Treasury Department followed in December 2021 by adding DJI to the NS-CMIC list, citing DJI's provision of drones to the Xinjiang Public Security Bureau.<ref name="treasury" />		The US Department of Commerce added DJI to its Entity List in December 2020, restricting the company's access to US-made technologies.<ref name="uhrp">{{Cite web \|url=https://uhrp.org/report/surveillance-tech-series-djis-links-to-human-rights-abuses-in-east-turkistan/ \|title=Surveillance Tech Series: DJI's Links to Human Rights Abuses in East Turkistan \|date=2024-03-05 \|website=Uyghur Human Rights Project \|access-date=2026-03-29}}</ref> The Treasury Department followed in December 2021 by adding DJI to the NS-CMIC list, citing DJI's provision of drones to the Xinjiang Public Security Bureau.<ref name="treasury" />

	~~==Products==~~
	* [[DJI Osmo Action 5 Pro]]
	* [[DJI Osmo Pocket 3]]
	== Incidents ==		== Incidents ==
	This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].

Linka: /* Incidents */

2026-03-31T12:07:02Z

Incidents

← Older revision		Revision as of 12:07, 31 March 2026
Line 39:		Line 39:

	DJI drones enforce strict authentication requirements. The official DJI Mavic 3 user manual states that "flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight."<ref name="mavic3-manual" /> DJI cameras extend this pattern: the [[DJI Osmo Action 5 Pro]] and [[DJI Osmo Pocket 3]] require activation through a DJI app, with the device locking core functions after 5 skips of the activation prompt.<ref name="dji-activation" />		DJI drones enforce strict authentication requirements. The official DJI Mavic 3 user manual states that "flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight."<ref name="mavic3-manual" /> DJI cameras extend this pattern: the [[DJI Osmo Action 5 Pro]] and [[DJI Osmo Pocket 3]] require activation through a DJI app, with the device locking core functions after 5 skips of the activation prompt.<ref name="dji-activation" />


	=== DJI Fly app removal from Google Play ===		=== DJI Fly app removal from Google Play ===

Keith: Removed GPL-related claims (main source was a github blog post with 3 stars). added stub products section. removed ampersands.

2026-03-29T22:04:11Z

Removed GPL-related claims (main source was a github blog post with 3 stars). added stub products section. removed ampersands.

Show changes

Keith: removed the incident template box. also removed weird comment

2026-03-29T20:13:57Z

removed the incident template box. also removed weird comment

@@ Line 33: / Line 33: @@
 == Incidents ==
 This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
@@ Line 123: / Line 121: @@
 {{reflist}}
 [[Category:DJI]]

Louis: rewrote from stub. sourced all the unsourced bullet points, added us government restrictions section (entity list, treasury, fcc covered list), bishop v dji lawsuit, fixed dji fly app characterization, sourced the gpl violations and aeroscope stuff. was 1 citation, now 23.

2026-03-29T19:18:37Z

rewrote from stub. sourced all the unsourced bullet points, added us government restrictions section (entity list, treasury, fcc covered list), bishop v dji lawsuit, fixed dji fly app characterization, sourced the gpl violations and aeroscope stuff. was 1 citation, now 23.

Show changes

Sojourna at 22:41, 17 March 2026

2026-03-17T22:41:45Z

← Older revision		Revision as of 22:41, 17 March 2026
Line 5:		Line 5:
	\|Founded=2006		\|Founded=2006
	\|Industry=Cameras, Drones, Electronics		\|Industry=Cameras, Drones, Electronics
	\|Logo=DJ logo.svg		\|Logo=DJI logo.svg
	\|ParentCompany=		\|ParentCompany=
	\|Type=Private		\|Type=Private
	\|Website=https://www.dji.com/		\|Website=https://www.dji.com/
	}}		}}
	~~[[wikipedia:DJI\|~~'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
			'''{{Wplink\|DJI}}''' is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.

	==Consumer impact summary==		==Consumer impact summary==
Line 17:		Line 18:
	In particular, DJI drones have the following limits and caveats on their operation:		In particular, DJI drones have the following limits and caveats on their operation:

	*They require persistent online ~~reauthentication~~ with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".		*They require persistent online re-authentication with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
	*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".		*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
	*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.		*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
Line 31:		Line 32:

	==Incidents==		==Incidents==
	{{~~Placeholder box\|Add one~~-~~paragraph summaries of incidents below in sub~~-sections, which link to each incident's main article while linking to the main article and including a short summary. It is acceptable to create an incident summary before the main page for an incident has been created. To link to the page use the "Hatnote" or "Main" templates.		{{Ph-C-Inc}}

	~~If the~~ company ~~has numerous~~ incidents ~~then format them~~ in ~~a table (see~~ [[~~Amazon~~]] ~~for an example)~~. }}		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].

	~~This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].~~		===Data and camera feeds of vacuum robots publicly accessible (''2026'')===
	===Data and camera feeds of ~~vaccuum~~ robots publicly accessible (''2026~~-02~~'')===
	Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.

	When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>		When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>
	~~===Example incident two (''date'')===~~
	~~...~~
	==Products==		==Products==
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
Line 48:		Line 47:

	==See also==		==See also==

	*[[GoPro]]		*[[GoPro]]
	*[[Insta360]]		*[[Insta360]]

	==References==		==References==
	{{~~reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.~~}}		{{Reflist}}

	[[Category:DJI]]		[[Category:DJI]]
			[[Category:Companies]]
	[[Category:Devices requiring account for initial setup]]		[[Category:Devices requiring account for initial setup]]

178.218.167.215: Add link to Osmo Pocket 3 in /* Products */

2026-03-17T10:51:29Z

Add link to Osmo Pocket 3 in Products

← Older revision		Revision as of 10:51, 17 March 2026
Line 45:		Line 45:
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
	*[[DJI Ronin RS4 Pro]]		*[[DJI Ronin RS4 Pro]]
			*[[DJI Osmo Pocket 3]]

	==See also==		==See also==

Rudxain: link "Forced account" and "Forced app download"; add to corresponding device category

2026-03-16T09:52:20Z

link "Forced account" and "Forced app download"; add to corresponding device category

← Older revision		Revision as of 09:52, 16 March 2026
Line 13:		Line 13:

	==Consumer impact summary==		==Consumer impact summary==
	Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.		Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates (see [[Forced app download]]). This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.

	In particular, DJI drones have the following limits and caveats on their operation:		In particular, DJI drones have the following limits and caveats on their operation:

	*They require persistent online reauthentication with a DJI account. Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".		*They require persistent online reauthentication with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
	*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".		*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
	*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.		*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
Line 54:		Line 54:
	{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}		{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}
	[[Category:DJI]]		[[Category:DJI]]
			[[Category:Devices requiring account for initial setup]]

Bananabot: Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

2026-02-22T21:53:19Z

Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

← Older revision		Revision as of 21:53, 22 February 2026
Line 39:		Line 39:
	Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.

	When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://archive.ph/~~fyKWW~~ \|archive-date=2026~~-02-14~~ \|access-date=2026-02-14 \|website=The Verge}}</ref>		When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>
	===Example incident two (''date'')===		===Example incident two (''date'')===
	...		...