Consumer Rights Wiki

DJI: Difference between revisions

← Older edit
VisualWikitext
MrTuttle (talk | contribs)
confirmed
94 edits
m Change heading to lower case to be consistent with other articles
OrwellsJester (talk | contribs)
confirmed
22 edits
m Add citation for DJI rebind
 
(9 intermediate revisions by 8 users not shown)
Line 1: Line 1:
{{StubNotice}}
{{#seo:
{{Cleanup}}
|description=DJI forces app activation on cameras and drones, locks devices after 5 uses, broadcasts unencrypted pilot location, and faces US FCC bans.
}}
{{CompanyCargo
{{CompanyCargo
|Description=Chinese tech company producing drones and camera accessories for use in drone flying and surveying.
|Description=Forces app activation on cameras and drones; locks devices after 5 uses; broadcasts unencrypted pilot location; US-sanctioned & FCC-banned
|Founded=2006
|Founded=2006
|Industry=Cameras, Drones, Electronics
|Industry=Drones,Cameras,Electronics
|Logo=DJ logo.svg
|Logo=DJI logo.svg
|ParentCompany=
|ParentCompany=
|CompanyAlias=SZ DJI Technology Co. Ltd.,Da-Jiang Innovations
|Type=Private
|Type=Private
|Website=https://www.dji.com/
|Website=https://www.dji.com/
}}
}}
[[wikipedia:DJI|'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
'''DJI''' is a Chinese drone and camera manufacturer that requires mandatory app activation on its consumer products, locks cameras and gimbals into non-functional states after 5 activation skips, and restricts drone flight to 30 meters altitude and 50 meters distance when a user is not logged into a DJI account.<ref name="mavic3-manual">{{Cite web |url=https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf |title=DJI Mavic 3 User Manual v1.0 |website=DJI |access-date=2026-03-29}}</ref> The US Department of the Treasury added DJI to its Non-SDN Chinese Military-Industrial Complex Companies list in December 2021, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang.<ref name="treasury">{{Cite web |url=https://home.treasury.gov/news/press-releases/jy0538 |title=Treasury Identifies Eight Chinese Tech Firms as Part of The Chinese Military-Industrial Complex |date=2021-12-16 |website=U.S. Department of the Treasury |access-date=2026-03-29}}</ref> In December 2025, DJI was added to the FCC's Covered List, banning the import and sale of new DJI drone models in the United States.<ref name="fcc-order">{{Cite web |url=https://www.fcc.gov/document/fcc-updates-covered-list-add-certain-uas-and-uas-components-0 |title=FCC Updates Covered List to Add Certain UAS and UAS Components |website=Federal Communications Commission |access-date=2026-03-29}}</ref>


==Consumer impact summary==
==Consumer impact summary==
Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.


In particular, DJI drones have the following limits and caveats on their operation:
*DJI drones require persistent login to a DJI account. When signed out, flight is restricted to 30 m altitude and 50 m range.<ref name="mavic3-manual" />
*DJI cameras (Osmo Action 5 Pro, Osmo Pocket 3) require activation through a proprietary app; after 5 skips the device locks its core functions until activation is completed (see [[Forced app download]], [[Forced account]]).<ref name="dji-activation">{{Cite web |url=https://support.dji.com/help/content?customId=01700006759&spaceId=17&re=US&lang=en&documentType=&paperDocType=ARTICLE |title=Activating Your Handheld Products |website=DJI Support |access-date=2026-03-29}}</ref>
*The DJI Fly app became unavailable on the Google Play Store in 2021, forcing Android users to sideload APK files from DJI's website.<ref name="dronedj-fly-removal">{{Cite web |url=https://dronedj.com/2021/01/27/latest-dji-fly-android-app-only-available-from-djis-website-not-the-play-store/ |title=You need to download the DJI Fly app from DJI's website |date=2021-01-27 |website=DroneDJ |access-date=2026-03-29}}</ref>
*DJI drone telemetry (serial number, pilot GPS coordinates, return-to-home location) is broadcast unencrypted via the DroneID protocol. DJI admitted the signal was unencrypted by design.<ref name="verge-aeroscope">{{Cite web |last=Hollister |first=Sean |url=https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking |title=DJI insisted drone-tracking AeroScope signals were encrypted; now it admits they aren't |date=2022-04-28 |website=The Verge |access-date=2026-03-29}}</ref>
*DJI uses anti-rollback hardware fuses to prevent firmware downgrades, blocking users from restoring removed features.<ref name="mavicpilots-fuse">{{Cite web |url=https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 |title=Not be able to degrade firmware of DJI Mini2 from 01.06.0200 |website=MavicPilots |access-date=2026-03-29}}</ref>
*DJI dropped Mobile SDK support for consumer drones starting with MSDK V5 in 2022, blocking third-party app development for models like the Mavic 3 and Mini 3 Pro.<ref name="sdk-forum">{{Cite web |url=https://sdk-forum.dji.net/hc/en-us/articles/8818033368857-What-is-the-plan-for-the-consumer-level-aircraft |title=What is the plan for the consumer level aircraft |website=DJI Developer Forum |access-date=2026-03-29}}</ref>
*DJI's official end-of-life page lists over 111 discontinued products for which the company no longer provides repairs, parts, or firmware updates.<ref name="gizmochina-eol">{{Cite web |url=https://www.gizmochina.com/2025/12/08/check-the-list-111-dji-products-including-popular-drones-now-out-of-support/ |title=Check the list: 111 DJI products, including popular drones, now out of support |date=2025-12-08 |website=Gizmochina |access-date=2026-03-29}}</ref>


*They require persistent online reauthentication with a DJI account. Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
==Background==
*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
 
*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
DJI (Da-Jiang Innovations) was founded in 2006 by Frank Wang (Wang Tao) in Shenzhen, China.<ref name="wikipedia-dji">{{Cite web |url=https://en.wikipedia.org/wiki/DJI |title=DJI |website=Wikipedia |access-date=2026-03-29}}</ref> Market analyses estimate the company controls between 70% and 90% of the global consumer drone market.<ref name="wikipedia-dji" /> DJI is privately held; its products include consumer and enterprise drones, handheld cameras (Osmo Action, Osmo Pocket), gimbal stabilizers (Ronin series), and robot vacuums (Romo).
*DJI drones send out [https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking unencrypted RemoteID/Aeroscope packets] that can be captured by anyone, to follow the [https://www.faa.gov/uas/getting_started/remote_id Remote ID] law in the USA. They contain, amongst other things, the drone's serial number, camera information, pilot location, and Return-to-Home location. A [https://github.com/MAVProxyUser/CIAJeepDoors patch] is available to mitigate this feature on certain drone models and firmware versions.
 
*DJI firmware comes with [https://gist.github.com/KonradIT/e7bf81793eda6bb1e5406fd351d33565 many GPL components] whose sources aren't disclosed, thus violating the GPL license. There is a limited [https://dji.com/opensource disclosure page for their enterprise platforms], but it is very outdated and doesn't cover the GPL software in newer (post Mavic 2) consumer drones (whose OS is based on Android).
The US Department of Commerce added DJI to its Entity List in December 2020, restricting the company's access to US-made technologies.<ref name="uhrp">{{Cite web |url=https://uhrp.org/report/surveillance-tech-series-djis-links-to-human-rights-abuses-in-east-turkistan/ |title=Surveillance Tech Series: DJI's Links to Human Rights Abuses in East Turkistan |date=2024-03-05 |website=Uyghur Human Rights Project |access-date=2026-03-29}}</ref> The Treasury Department followed in December 2021 by adding DJI to the NS-CMIC list, citing DJI's provision of drones to the Xinjiang Public Security Bureau.<ref name="treasury" />
*While many drones support the [https://developer.dji.com/mobile-sdk/ DJI Mobile SDK], drones released from late 2021/2022 onwards have not yet received support. This significantly inhibits the consumer's ability to use their drone how they desire as it prevents the use of third party applications that often provide improved functionality and additional features. [https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 DJI Support has stated] that the company intends to no longer make SDK support available for new consumer models (such as the Air 3+ family) and only for enterprise series drones. For mapping use cases, users can now only rely on [https://www.youtube.com/watch?v=QpIej0Ai3VE a tedious manual workaround] rather than use dedicated applications.
*DJI Drones can be permanently linked to users which turns them into e-waste if carelessly returned to online shops.
*DJI devices have hardware fuses that can be blown using software to [https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 prevent firmware downgrade] to earlier versions.
*DJI Action and Pocket cameras require activation with the DJI Mimo app after a few uses or would fail to function.
*The Android version of the DJI Mimo application requests full filesystem access to the user's device each time a connection to a DJl camera is initiated. If a user denies this permission, the application will refuse to connect to the camera. If a user grants permission for access to only a specific folder or selection of media, the app will connect. However, on every subsequent connection, the app will again prompt for full filesystem access with the message: "DJI Mimo would like to access mobile device's storage, so that you can use features, including editing and downloading photos and videos from camera. Otherwise, related services will be restricted. Go to settings to grant permissions". To prevent the app from gaining access to all files on the device, the user must repeatedly select the "Don't select more" option in the Android permission prompt. This option is positioned directly below the "Allow all" selection, which necessitates user attention during each connection to maintain a restricted level of access.
*The DJI Mini 2 SE is almost identical to the Mini 2, but despite having a 4K camera, it is limited to 2.7K by its firmware. Users have found ways to rollback the firmware, flash it to the Mini 2 firmware, and then shoot in 4K. In later firmware versions, DJI implemented anti-rollback features, hence making it impossible to do this.
*The DJI RS 3 Mini requires the DJI Ronin app, downloaded directly from the DJI website for Android users, in order for the product to function after five "skips" of non-activation.


==Incidents==
==Incidents==
{{Placeholder box|Add one-paragraph summaries of incidents below in sub-sections, which link to each incident's main article while linking to the main article and including a short summary. It is acceptable to create an incident summary before the main page for an incident has been created. To link to the page use the "Hatnote" or "Main" templates.
This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
 
===Forced activation and login requirements===
 
DJI drones enforce strict authentication requirements. The official DJI Mavic 3 user manual states that "flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight."<ref name="mavic3-manual" /> DJI cameras extend this pattern: the [[DJI Osmo Action 5 Pro]] and [[DJI Osmo Pocket 3]] require activation through a DJI app, with the device locking core functions after 5 skips of the activation prompt.<ref name="dji-activation" />
 
===DJI Fly app removal from Google Play===
 
In early 2021, the DJI Fly app became unavailable on the Google Play Store.<ref name="dronedj-fly-removal" /> DJI cited a vague "compatibility strategy" change; the app hasn't returned to Google Play since. Android users must sideload the APK directly from DJI's website to operate their drones. The absence of DJI's apps from Google Play created an opening for fraudulent apps; in August 2023, DJI warned that all DJI-branded apps on the Play Store were scams stealing users' money.<ref name="petapixel-fraud">{{Cite web |url=https://petapixel.com/2023/08/10/all-dji-apps-on-google-play-are-frauds-and-are-stealing-users-money/ |title=All DJI Apps on Google Play Are Frauds and Are Stealing Users' Money |date=2023-08-10 |website=PetaPixel |access-date=2026-03-29}}</ref>
 
===Unencrypted AeroScope tracking===
 
DJI marketed its AeroScope counter-drone tracking system to law enforcement & aviation authorities starting in 2017, insisting the DroneID telemetry was encrypted. In April 2022, security researchers demonstrated that DroneID packets containing the drone's serial number, GPS coordinates, altitude, heading, & pilot location were broadcast in plaintext, readable by anyone with a software-defined radio.<ref name="verge-aeroscope" />


If the company has numerous incidents then format them in a table (see [[Amazon]] for an example). }}
DJI acknowledged the finding. In an August 2022 blog post on DJI Viewpoints, the company stated the signal was unencrypted by design, describing it as a proprietary protocol rather than a cryptographically secured transmission.<ref name="dji-viewpoints-aeroscope">{{Cite web |url=https://viewpoints.dji.com/blog/how-djis-aeroscope-system-protects-the-public-interest |title=How DJI's AeroScope System Protects the Public Interest |date=2022-08-03 |website=DJI Viewpoints |access-date=2026-03-29}}</ref> DJI discontinued the AeroScope hardware line in March 2023 as the FAA's standardized Remote ID requirement took effect.<ref>{{Cite web |url=https://dronelife.com/2023/03/06/as-remote-id-approaches-dji-discontinues-aeroscope/ |title=As Remote ID Approaches, DJI Discontinues AeroScope |date=2023-03-06 |website=Dronelife |access-date=2026-03-29}}</ref>


This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
===DJI Romo vacuum security vulnerability===
===Data and camera feeds of vaccuum robots publicly accessible (''2026-02'')===
 
Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.
{{Main|DJI Robot Vacuum Hack}}
 
In February 2026, security researcher Sammy Azdoufal discovered a critical API vulnerability in DJI's Romo robot vacuum that granted him access to the data streams of approximately 7,000 Romo vacuums operating in 24 countries. The flaw exposed live camera feeds, microphone audio, floor plans, & IP addresses from inside users' homes.<ref name="verge-romo">{{Cite web |last=Hollister |first=Sean |date=2026-02-14 |title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them |url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt |archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt |archive-date=2026-02-22 |access-date=2026-02-14 |website=The Verge}}</ref> DJI deployed automatic over-the-air patches & awarded Azdoufal a $30,000 bug bounty.<ref name="dronedj-bounty">{{Cite web |url=https://dronedj.com/2026/03/10/dji-romo-security-bug-bounty/ |title=The discovery that triggered a $30,000 DJI reward |date=2026-03-10 |website=DroneDJ |access-date=2026-03-29}}</ref>
 
===Firmware restrictions & anti-rollback fuses===
 
The DJI Mini 2 SE uses the same 1/2.3-inch CMOS camera sensor as the standard DJI Mini 2, but DJI limits the Mini 2 SE to 2.7K resolution through firmware while the identical hardware in the Mini 2 records 4K.<ref name="firmware-tools">{{Cite web |url=https://github.com/o-gs/dji-firmware-tools/issues/356 |title=Mini 2 SE 4K limitation |website=GitHub (dji-firmware-tools) |access-date=2026-03-29}}</ref> Users initially bypassed this by cross-flashing Mini 2 firmware onto the SE model. DJI responded by deploying anti-rollback mechanisms. Hardware analysis shows DJI uses eFuses (one-time programmable hardware fuses) to record a firmware version index; once the fuse is blown by a firmware update, the standard downgrade path is blocked.<ref name="mavicpilots-fuse" />
 
===Mobile SDK discontinuation===
 
DJI's Mobile Software Development Kit (MSDK) allowed third-party apps like Litchi and DroneDeploy to build custom flight-planning and photogrammetry tools for DJI hardware. Starting with MSDK V5 in 2022, DJI dropped SDK support for all new consumer-grade drones.<ref name="sdk-forum" /> DJI Developer Support confirmed that the company no longer plans to provide SDK access for new consumer models, restricting third-party development to enterprise drones only.<ref name="sdk-github">{{Cite web |url=https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 |title=DJI Support comment on consumer SDK discontinuation |website=GitHub |access-date=2026-03-29}}</ref>
 
===Geofencing controversies===
 
DJI operated a proprietary geofencing system called "Fly Safe" that imposed hard flight restrictions based on DJI's own airspace database.<ref name="flysafe">{{Cite web |url=https://www.dji.com/flysafe/introduction |title=Fly Safe Introduction |website=DJI |access-date=2026-03-29}}</ref> Drones inside DJI-designated restricted zones could not take off until the user submitted an unlock request through DJI's portal.
 
In 2025, DJI removed geofencing hard-stops, transitioning to an advisory-only model that allows takeoff after acknowledging an in-app warning. The change rolled out globally by November 2025.<ref name="dronedj-geofencing">{{Cite web |url=https://dronedj.com/2025/11/17/dji-drone-geo-geofencing-unlock/ |title=DJI drops old drone geofencing rules: What pilots need to know |date=2025-11-17 |website=DroneDJ |access-date=2026-03-29}}</ref>
 
===Device permanent binding and e-waste===
 
DJI's "Account Binding" feature ties a drone's serial number to the owner's cloud account & remote controller. If a drone is sold, returned, or gifted without the original owner unbinding it through the DJI app, the new owner cannot pair the drone with a controller or fly it.<ref>{{Cite web |last=Singh |first=Ishveena |date=2026-06-14 |title=How to rebind a used DJI drone: Step-by-step guide |url=https://dronedj.com/2025/06/14/how-to-rebind-dji-drone/ |url-status=live}}</ref>
 
===Product end-of-life===
 
DJI's official end-of-life support page lists over 111 discontinued products, including the Mavic Air, Spark, Phantom 4 Pro, & original Osmo Pocket.<ref name="gizmochina-eol" /> Once a product reaches end-of-life status, DJI ceases repairs, spare part manufacturing, & firmware updates.<ref name="dronedj-eol">{{Cite web |url=https://dronedj.com/2026/01/05/dji-mavic-mini-service-support/ |title=DJI ending support for iconic Mavic Mini drone, OG Pocket camera |date=2026-01-05 |website=DroneDJ |access-date=2026-03-29}}</ref> When DJI discontinues app support for legacy hardware while mobile operating systems continue to update, devices that still function mechanically lose their software interface.{{Citation needed}}
 
==US government restrictions==
 
DJI faces a layered set of US government restrictions spanning 4 federal agencies:
 
*'''Commerce Department Entity List:''' In December 2020, the Bureau of Industry and Security added DJI to the Entity List, restricting the company's access to US-origin technologies.<ref name="uhrp" />
*'''Treasury NS-CMIC List:''' In December 2021, the Treasury Department added DJI to the Non-SDN Chinese Military-Industrial Complex Companies list, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang. This designation prohibits US persons from purchasing or selling publicly traded securities connected with DJI.<ref name="treasury" />
*'''DoD Section 1260H:''' The Department of Defense classified DJI as a "Chinese Military Company" under Section 1260H of the National Defense Authorization Act. A federal judge upheld DJI's placement on this list in September 2025 after DJI challenged it in court.<ref name="dronelife-pentagon">{{Cite web |url=https://dronelife.com/2025/09/29/dji-to-remain-on-pentagon-list-after-u-s-court-ruling/ |title=DJI to Remain on Pentagon List After U.S. Court Ruling |date=2025-09-29 |website=Dronelife |access-date=2026-03-29}}</ref>
*'''FCC Covered List:''' The Countering CCP Drones Act (H.R. 2864) passed the US House of Representatives in September 2024.<ref name="congress-hr2864">{{Cite web |url=https://www.congress.gov/bill/118th-congress/house-bill/2864 |title=H.R.2864 - Countering CCP Drones Act |website=Congress.gov |access-date=2026-03-29}}</ref> Its provisions were absorbed into the 2025 NDAA, which required a federal security review of DJI's equipment within one year. No agency completed the review by the December 23, 2025 deadline, & DJI was added to the FCC's Covered List.<ref name="fcc-order" /> This bars the import & sale of new DJI drone models; existing models with prior FCC authorization remain exempt.<ref name="dronedj-fcc">{{Cite web |url=https://dronedj.com/2025/12/22/dji-drone-us-fcc-ban/ |title=DJI drone ban has started in the US, but it won't happen overnight |date=2025-12-22 |website=DroneDJ |access-date=2026-03-29}}</ref><ref name="cnn-ban">{{Cite web |url=https://www.cnn.com/2025/12/23/business/us-ban-foreign-drones-dji-intl-hnk |title=US bans new foreign drone models in a blow to Chinese giant DJI |date=2025-12-23 |website=CNN |access-date=2026-03-29}}</ref>
 
==Litigation==
 
===''Bishop v. SZ DJI Technology Co.''===
 
In ''Bishop v. SZ DJI Technology Co., Ltd.'' (E.D. Tex., No. 4:24-CV-268-SDJ), the Bishop family sued DJI after a Mavic Air 2 drone malfunctioned & flew into their son's face. The son has had 7 surgeries on his right eye since the incident & is now legally blind in that eye.<ref name="bishop-doc68">{{Cite web |url=https://law.justia.com/cases/federal/district-courts/texas/txedce/4:2024cv00268/228932/68/ |title=Bishop v. SZ DJI Technology Co., Document 68 |date=2025-03-06 |website=Justia |access-date=2026-03-29}}</ref>
 
DJI moved to dismiss for lack of personal jurisdiction, arguing it designed & manufactured drones solely in China with no physical presence in Texas. On March 6, 2025, Judge Sean D. Jordan denied the motion. The court applied the stream-of-commerce test, finding that DJI's website advertised availability at approximately 580 retail locations in Texas & that DJI had hosted drone industry events in the state.<ref name="bishop-doc68" />
 
DJI then moved to compel arbitration based on an arbitration clause in the DJI Fly app's Terms of Use. On September 30, 2025, Judge Jordan denied this motion as well. The court found that the only person who agreed to the Terms of Use was the plaintiffs' son, who was a minor at the time; under Texas law, a minor's contract is voidable, and the son had disaffirmed the agreement both during his minority and after turning 18.<ref name="bishop-doc83">{{Cite web |url=https://law.justia.com/cases/federal/district-courts/texas/txedce/4:2024cv00268/228932/83/ |title=Bishop v. SZ DJI Technology Co., Document 83 |date=2025-09-30 |website=Justia |access-date=2026-03-29}}</ref>


When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web |last=Hollister |first=Sean |date=2026-02-14 |title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them |url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt |archive-url=https://archive.ph/fyKWW |archive-date=2026-02-14 |access-date=2026-02-14 |website=The Verge}}</ref>
===Example incident two (''date'')===
...
==Products==
==Products==
*[[DJI Osmo Action 5 Pro]]
*[[DJI Osmo Action 5 Pro]]
*[[DJI Osmo Pocket 3]]
*[[DJI Ronin RS4 Pro]]
*[[DJI Ronin RS4 Pro]]


Line 50: Line 104:
*[[GoPro]]
*[[GoPro]]
*[[Insta360]]
*[[Insta360]]
*[[Forced app download]]
*[[Forced account]]


==References==
==References==
{{reflist}}{{Placeholder box|Link to relevant theme articles or companies with similar incidents.}}
 
{{reflist}}
 
[[Category:DJI]]
[[Category:DJI]]
[[Category:Companies]]
[[Category:Devices requiring account for initial setup]]
[[Category:Drones]]
Retrieved from "https://consumerrights.wiki/w/DJI"