DJI Osmo Pocket 3: Difference between revisions
Moved some parts around to create somewhat of a consumer impact summary |
Tag: Undo |
||
| Line 10: | Line 10: | ||
}} | }} | ||
The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in 2023. | The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in 2023 that locks after five uses unless the owner installs the [[Forced app download|DJI Mimo smartphone app]] & completes a mandatory [[Activation|activation]] process.<ref name="dji-beginners-guide">{{Cite web |title=A Beginner's Guide to Osmo Pocket 3 |url=https://support.dji.com/help/content?customId=en-us03400009024&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref><ref name="dji-specs">{{Cite web |title=Osmo Pocket 3 - Specs |url=https://www.dji.com/osmo-pocket-3/specs |access-date=2026-03-29 |website=DJI}}</ref><ref name="amateur-photographer">{{Cite web |last=Mold |first=Dan |date=2025-07-06 |title=The DJI Osmo Pocket 3 may be the world's favourite vlogging camera, but for me it has one HUGE drawback |url=https://amateurphotographer.com/latest/opinion/the-dji-osmo-pocket-3-may-be-the-worlds-favourite-vlogging-camera-but-for-me-it-has-one-huge-drawback/ |access-date=2026-03-29 |website=Amateur Photographer}}</ref> That activation forces acceptance of [[DJI]]'s terms of use, which include binding arbitration & a class action waiver.<ref name="dji-terms">{{Cite web |date=2025-12-22 |title=DJI Products Terms of Use |url=https://www.dji.com/terms |access-date=2026-03-29 |website=DJI}}</ref> The Mimo app collects location data, device identifiers, & user content;<ref name="dji-mimo-appstore">{{Cite web |title=DJI Mimo on the App Store |url=https://apps.apple.com/us/app/dji-mimo/id1431720653 |access-date=2026-03-29 |website=Apple App Store}}</ref> on Android, DJI's support site provides APK sideload instructions for users who encounter installation problems.<ref name="dji-sideload">{{Cite web |title=Failure to Download and Install the App |url=https://support.dji.com/help/content?customId=en-us03400006802&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref> | ||
== | == Incidents == | ||
=== | === Forced app activation === | ||
== | Despite having its own 2-inch touchscreen, 1-inch CMOS sensor, microSD storage, & 1,300 mAh battery, the Osmo Pocket 3 ships as a locked device.<ref name="dji-specs" /> DJI's official documentation states that the camera "requires activation through the DJI Mimo App" before first use.<ref name="dji-beginners-guide" /> DJI's activation instructions require a smartphone with Bluetooth & Wi-Fi enabled to connect to the camera through the Mimo app.<ref name="dji-activation">{{Cite web |title=Activating Your Handheld Products |url=https://support.dji.com/help/content?spaceId=34&customId=en-us03400006759&re=NO&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref> | ||
The camera allows the owner to skip the activation prompt five times. After the fifth skip, the device locks & requires activation before any further use.<ref name="amateur-photographer" /> DJI's "Activating Your Handheld Products" support page documents the same 5-trial mechanism for the Osmo Action series.<ref name="dji-activation" /> | |||
The camera allows the owner to skip the activation prompt five times. After the fifth skip, the device locks & requires activation before any further use.<ref name="amateur-photographer" | |||
This is not unique to the Pocket 3. DJI's activation page lists the Osmo Action series, Osmo Mobile series, Osmo Nano, & Osmo 360 as also requiring Mimo-based activation.<ref name="dji-activation" /> By contrast, the competing FeiyuTech Pocket 3 is "ready to go straight out of the box without the need for an app."<ref name="amateur-photographer" /> | This is not unique to the Pocket 3. DJI's activation page lists the Osmo Action series, Osmo Mobile series, Osmo Nano, & Osmo 360 as also requiring Mimo-based activation.<ref name="dji-activation" /> By contrast, the competing FeiyuTech Pocket 3 is "ready to go straight out of the box without the need for an app."<ref name="amateur-photographer" /> | ||
===DJI Mimo app data collection=== | === DJI Mimo app data collection === | ||
The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as "Data Used to Track You": contact info & identifiers.<ref name="dji-mimo-appstore" | The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as "Data Used to Track You": contact info & identifiers.<ref name="dji-mimo-appstore" /> The app also collects coarse location data, user-generated content (photos, videos, audio), usage data, & diagnostics.<ref name="dji-mimo-appstore" /> Apple's listing notes the app "may use your location even when it isn't open."<ref name="dji-mimo-appstore" /> | ||
A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-12 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, meaning that "even seemingly encrypted data sent from a user's device could be recovered from a moderately talented attacker, let alone a Nation State."<ref name="riverloop" /> | A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-12 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, meaning that "even seemingly encrypted data sent from a user's device could be recovered from a moderately talented attacker, let alone a Nation State."<ref name="riverloop" /> | ||
On Android, DJI's support site instructs users who have trouble installing the app to download the Mimo APK directly from DJI's website.<ref name="dji-sideload" | On Android, DJI's support site instructs users who have trouble installing the app to download the Mimo APK directly from DJI's website.<ref name="dji-sideload" /> | ||
===Binding arbitration & class action waiver=== | === Binding arbitration & class action waiver === | ||
Activating the camera through DJI Mimo requires agreeing to DJI's Product Terms of Use (last updated December 22, 2025), which state in their preamble that "all disputes between you and DJI Entities will be resolved by binding arbitration."<ref name="dji-terms" | Activating the camera through DJI Mimo requires agreeing to DJI's Product Terms of Use (last updated December 22, 2025), which state in their preamble that "all disputes between you and DJI Entities will be resolved by binding arbitration."<ref name="dji-terms" /> Section 11 contains the full arbitration framework, administered under the Federal Arbitration Act & governed by American Arbitration Association (AAA) rules.<ref name="dji-terms" /> | ||
Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY-GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" /> | Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY-GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" /> | ||
| Line 49: | Line 38: | ||
DJI's terms do not offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> The camera requires activation through a DJI account,<ref name="dji-terms" /> so account termination raises the question of whether the owner can continue using already-activated hardware or must reaccept the current terms. | DJI's terms do not offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> The camera requires activation through a DJI account,<ref name="dji-terms" /> so account termination raises the question of whether the owner can continue using already-activated hardware or must reaccept the current terms. | ||
==See also== | == See also == | ||
*[[DJI Osmo Action 5 Pro]] | * [[DJI Osmo Action 5 Pro]] | ||
*[[Forced app download]] | * [[Forced app download]] | ||
*[[Forced account]] | * [[Forced account]] | ||
*[[Activation]] | * [[Activation]] | ||
==References== | == References == | ||
{{reflist}} | {{reflist}} | ||
[[Category:Devices requiring account for initial setup]] | [[Category:Devices requiring account for initial setup]] | ||
[[Category:DJI]] | [[Category:DJI]] | ||
[[Category:Cameras]] | [[Category:Cameras]] | ||