expired
DJI Mini SE Drone + Outdoor Accessory Combo Kit $355 + Free Shipping
$359
$505
28% off
B&H Photo Video
Missed This Deal? Get alerts when similar deals are posted.
B&H Photo VideoDeal Details
deal [bhphotovideo.com]
$355 + free s/h
The Mini SE with Outdoor Accessory Combo Kit from B&H includes a DJI Mini SE drone, an extra flight battery, a hard-shell case, a landing pad, landing gear extensions, a 128GB microSD card, and a propeller holder.
$355 + free s/h
The Mini SE with Outdoor Accessory Combo Kit from B&H includes a DJI Mini SE drone, an extra flight battery, a hard-shell case, a landing pad, landing gear extensions, a 128GB microSD card, and a propeller holder.
Community Notes
About the Poster
Deal Details
Community Notes
About the Poster
deal [bhphotovideo.com]
$355 + free s/h
The Mini SE with Outdoor Accessory Combo Kit from B&H includes a DJI Mini SE drone, an extra flight battery, a hard-shell case, a landing pad, landing gear extensions, a 128GB microSD card, and a propeller holder.
$355 + free s/h
The Mini SE with Outdoor Accessory Combo Kit from B&H includes a DJI Mini SE drone, an extra flight battery, a hard-shell case, a landing pad, landing gear extensions, a 128GB microSD card, and a propeller holder.
Community Voting
Deal
Score
+17
Good Deal
Bad Deal
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!
16 Comments
Sign up for a Slickdeals account to remove this ad.
Our community has rated this post as helpful. If you agree, why not thank
https://www.ebay.com/itm/DJI-Mini...632-2357-0
https://www.ebay.com/itm/DJI-Mini...632-2357-0
https://www.ebay.com/itm/DJI-Mini...632-2357-0
https://www.ebay.com/itm/DJI-Mini...632-2357-0
Sign up for a Slickdeals account to remove this ad.
https://www.theverge.co
Our community has rated this post as helpful. If you agree, why not thank
Despite being under scrutiny, DJI did not improve the transparency surrounding the potential abuse of its Android mobile application: DJI GO 4 application makes use of the similar anti-analysis techniques as malware, such as anti-debug, obfuscation, packing and dynamic encryption. After de-obfuscation, our research located two features of the software that call home and wait for a file that orders the user's phone to install a forced update or install a new software. This mechanism is very similar to command and control servers encountered with malwares. Given the wide permissions required by DJI GO 4 5 (access contacts, microphone, camera, location, storage, change network connectivity, etc.), the DJI or Weibo Chinese servers have almost full control over the user's phone. This way of updating an Android App or pushing a new app completely circumvents Google feature module delivery 6 or in-app updates 7. Google is not able then to do any verification on update and modifications pushed by DJI. According to Google Play, the application has been installed on more than a million personal devices, suggesting any security risks are widespread. The MobTech component embedded in recent versions of DJI Android GO 4 application collects personal data such as IMSI, IMEI, the serial number of the SIM card, etc. This data is not relevant or necessary for drone flights and go beyond DJI privacy policy 8. For example, IMSI is used by cellular network operators. These sensitive, unique, persistent data identifiers can be used by intelligence agencies or malicious people to later track individuals or eavesdrop communications. The DJI GO 4 application on the Android platform does not close when the user closes the app with a swipe right. The app continues to run in the background and makes network requests. Whereas our findings affect the Android version of DJI GO 4, the iOS version of the application is not obfuscated and doesn't have the hidden update mechanisms.
Thus, users of the DJI drone are advised to use caution, due to the risks of leakage or misuse of sensitive data elements, and hidden command and control features, seemingly not needed for safe or secure use of the product."
-FYI
Despite being under scrutiny, DJI did not improve the transparency surrounding the potential abuse of its Android mobile application: DJI GO 4 application makes use of the similar anti-analysis techniques as malware, such as anti-debug, obfuscation, packing and dynamic encryption. After de-obfuscation, our research located two features of the software that call home and wait for a file that orders the user's phone to install a forced update or install a new software. This mechanism is very similar to command and control servers encountered with malwares. Given the wide permissions required by DJI GO 4 5 (access contacts, microphone, camera, location, storage, change network connectivity, etc.), the DJI or Weibo Chinese servers have almost full control over the user's phone. This way of updating an Android App or pushing a new app completely circumvents Google feature module delivery 6 or in-app updates 7. Google is not able then to do any verification on update and modifications pushed by DJI. According to Google Play, the application has been installed on more than a million personal devices, suggesting any security risks are widespread. The MobTech component embedded in recent versions of DJI Android GO 4 application collects personal data such as IMSI, IMEI, the serial number of the SIM card, etc. This data is not relevant or necessary for drone flights and go beyond DJI privacy policy 8. For example, IMSI is used by cellular network operators. These sensitive, unique, persistent data identifiers can be used by intelligence agencies or malicious people to later track individuals or eavesdrop communications. The DJI GO 4 application on the Android platform does not close when the user closes the app with a swipe right. The app continues to run in the background and makes network requests. Whereas our findings affect the Android version of DJI GO 4, the iOS version of the application is not obfuscated and doesn't have the hidden update mechanisms.
Thus, users of the DJI drone are advised to use caution, due to the risks of leakage or misuse of sensitive data elements, and hidden command and control features, seemingly not needed for safe or secure use of the product."
-FYI
Sign up for a Slickdeals account to remove this ad.
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!