DJI - Revision history

Sojourna at 22:41, 17 March 2026

2026-03-17T22:41:45Z

← Older revision		Revision as of 22:41, 17 March 2026
Line 5:		Line 5:
	\|Founded=2006		\|Founded=2006
	\|Industry=Cameras, Drones, Electronics		\|Industry=Cameras, Drones, Electronics
	\|Logo=DJ logo.svg		\|Logo=DJI logo.svg
	\|ParentCompany=		\|ParentCompany=
	\|Type=Private		\|Type=Private
	\|Website=https://www.dji.com/		\|Website=https://www.dji.com/
	}}		}}
	~~[[wikipedia:DJI\|~~'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
			'''{{Wplink\|DJI}}''' is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.

	==Consumer impact summary==		==Consumer impact summary==
Line 17:		Line 18:
	In particular, DJI drones have the following limits and caveats on their operation:		In particular, DJI drones have the following limits and caveats on their operation:

	*They require persistent online ~~reauthentication~~ with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".		*They require persistent online re-authentication with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
	*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".		*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
	*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.		*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
Line 31:		Line 32:

	==Incidents==		==Incidents==
	{{~~Placeholder box\|Add one~~-~~paragraph summaries of incidents below in sub~~-sections, which link to each incident's main article while linking to the main article and including a short summary. It is acceptable to create an incident summary before the main page for an incident has been created. To link to the page use the "Hatnote" or "Main" templates.		{{Ph-C-Inc}}

	~~If the~~ company ~~has numerous~~ incidents ~~then format them~~ in ~~a table (see~~ [[~~Amazon~~]] ~~for an example)~~. }}		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].

	~~This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].~~		===Data and camera feeds of vacuum robots publicly accessible (''2026'')===
	===Data and camera feeds of ~~vaccuum~~ robots publicly accessible (''2026~~-02~~'')===
	Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.

	When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>		When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>
	~~===Example incident two (''date'')===~~
	~~...~~
	==Products==		==Products==
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
Line 48:		Line 47:

	==See also==		==See also==

	*[[GoPro]]		*[[GoPro]]
	*[[Insta360]]		*[[Insta360]]

	==References==		==References==
	{{~~reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.~~}}		{{Reflist}}

	[[Category:DJI]]		[[Category:DJI]]
			[[Category:Companies]]
	[[Category:Devices requiring account for initial setup]]		[[Category:Devices requiring account for initial setup]]

178.218.167.215: Add link to Osmo Pocket 3 in /* Products */

2026-03-17T10:51:29Z

Add link to Osmo Pocket 3 in Products

← Older revision		Revision as of 10:51, 17 March 2026
Line 45:		Line 45:
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
	*[[DJI Ronin RS4 Pro]]		*[[DJI Ronin RS4 Pro]]
			*[[DJI Osmo Pocket 3]]

	==See also==		==See also==

Rudxain: link "Forced account" and "Forced app download"; add to corresponding device category

2026-03-16T09:52:20Z

link "Forced account" and "Forced app download"; add to corresponding device category

← Older revision		Revision as of 09:52, 16 March 2026
Line 13:		Line 13:

	==Consumer impact summary==		==Consumer impact summary==
	Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.		Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates (see [[Forced app download]]). This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.

	In particular, DJI drones have the following limits and caveats on their operation:		In particular, DJI drones have the following limits and caveats on their operation:

	*They require persistent online reauthentication with a DJI account. Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".		*They require persistent online reauthentication with a DJI account (see [[Forced account]]). Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
	*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".		*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
	*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.		*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
Line 54:		Line 54:
	{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}		{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}
	[[Category:DJI]]		[[Category:DJI]]
			[[Category:Devices requiring account for initial setup]]

Bananabot: Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

2026-02-22T21:53:19Z

Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

← Older revision		Revision as of 21:53, 22 February 2026
Line 39:		Line 39:
	Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.

	When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://archive.ph/~~fyKWW~~ \|archive-date=2026~~-02-14~~ \|access-date=2026-02-14 \|website=The Verge}}</ref>		When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-date=22 Feb 2026\|access-date=2026-02-14 \|website=The Verge}}</ref>
	===Example incident two (''date'')===		===Example incident two (''date'')===
	...		...

MrTuttle: Change heading to lower case to be consistent with other articles

2026-02-14T13:08:54Z

Change heading to lower case to be consistent with other articles

← Older revision		Revision as of 13:08, 14 February 2026
Line 36:		Line 36:

	This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].
	===Data and ~~Camera Feeds~~ of ~~Vaccuum Robots~~ publicly accessible (''2026-02'')===		===Data and camera feeds of vaccuum robots publicly accessible (''2026-02'')===
	Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.

MrTuttle: /* Incidents */ Add DJI vacuum robots being controllable by anyone due to negligent security measures (The Verge article)

2026-02-14T13:07:57Z

Incidents: Add DJI vacuum robots being controllable by anyone due to negligent security measures (The Verge article)

← Older revision		Revision as of 13:07, 14 February 2026
Line 36:		Line 36:

	This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].		This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}\|{{PAGENAME}} category]].
	===~~Example incident one~~ (''~~date~~'')===		===Data and Camera Feeds of Vaccuum Robots publicly accessible (''2026-02'')===
	~~{{Main\|link~~ to the ~~main article}}~~		Due to insufficient security measures, DJI vacuum robots across the world could be controlled remotely by anyone in the world by simply extracting an authentication token from the control app and communicating with DJI's servers. This also caused floor maps and camera feeds to be publicly accessible, even before a robot is paired with the DJI app for the first time.
	~~Short summary~~ of the ~~incident~~ (~~could be the same~~ as ~~the summary preceding the article~~).
			When confronted with the security researcher's results, DJI claimed they had already discovered and fixed the issue internally the previous month, temporarily disabled access to video feeds, and rolled out updates. However, at the time of writing, still not all issues were fixed. The company also did not respond to any of the security researcher's emails and only communicated in DMs described as ''robotic'' on X (formerly known as Twitter).<ref>{{Cite web \|last=Hollister \|first=Sean \|date=2026-02-14 \|title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them \|url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt \|archive-url=https://archive.ph/fyKWW \|archive-date=2026-02-14 \|access-date=2026-02-14 \|website=The Verge}}</ref>
	===Example incident two (''date'')===		===Example incident two (''date'')===
	...		...
Line 47:		Line 48:
	==See also==		==See also==

	* [[GoPro]]		*[[GoPro]]
	* [[Insta360]]		*[[Insta360]]

	==References==		==References==
	{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}		{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}
	[[Category:DJI]]		[[Category:DJI]]

SinexTitan: See Also cultivated

2026-01-24T12:20:18Z

SinexTitan: scrub scrub

2026-01-24T12:19:17Z

scrub scrub

← Older revision		Revision as of 12:19, 24 January 2026
Line 1:		Line 1:
	{{StubNotice}}		{{StubNotice}}
			{{Cleanup}}
	{{CompanyCargo		{{CompanyCargo
	\|Description=Chinese tech company producing drones and camera accessories for use in drone flying and surveying.		\|Description=Chinese tech company producing drones and camera accessories for use in drone flying and surveying.
Line 44:		Line 45:
	===Incident (''date'')===		===Incident (''date'')===

	== Products ==		==Products==
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
	*[[DJI Ronin RS4 Pro]]		*[[DJI Ronin RS4 Pro]]

SinexTitan: needs to be restructured and refs added

2026-01-24T11:39:26Z

needs to be restructured and refs added

@@ Line 10: / Line 10: @@
 }}
 [[wikipedia:DJI|'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
 ==Consumer impact summary==
 Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.
@@ Line 28: / Line 29: @@
 *The DJI RS 3 Mini requires the DJI Ronin app, downloaded directly from the DJI website for Android users, in order for the product to function after five "skips" of non-activation.
-==Products==
+==Incidents==
 *[[DJI Osmo Action 5 Pro]]
 *[[DJI Ronin RS4 Pro]]

Yaros: Added fact about hardware fuses on DJI devices

2026-01-24T11:25:42Z

Added fact about hardware fuses on DJI devices

← Older revision		Revision as of 11:25, 24 January 2026
Line 22:		Line 22:
	*While many drones support the [https://developer.dji.com/mobile-sdk/ DJI Mobile SDK], drones released from late 2021/2022 onwards have not yet received support. This significantly inhibits the consumer's ability to use their drone how they desire as it prevents the use of third party applications that often provide improved functionality and additional features. [https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 DJI Support has stated] that the company intends to no longer make SDK support available for new consumer models (such as the Air 3+ family) and only for enterprise series drones. For mapping use cases, users can now only rely on [https://www.youtube.com/watch?v=QpIej0Ai3VE a tedious manual workaround] rather than use dedicated applications.		*While many drones support the [https://developer.dji.com/mobile-sdk/ DJI Mobile SDK], drones released from late 2021/2022 onwards have not yet received support. This significantly inhibits the consumer's ability to use their drone how they desire as it prevents the use of third party applications that often provide improved functionality and additional features. [https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 DJI Support has stated] that the company intends to no longer make SDK support available for new consumer models (such as the Air 3+ family) and only for enterprise series drones. For mapping use cases, users can now only rely on [https://www.youtube.com/watch?v=QpIej0Ai3VE a tedious manual workaround] rather than use dedicated applications.
	*DJI Drones can be permanently linked to users which turns them into e-waste if carelessly returned to online shops.		*DJI Drones can be permanently linked to users which turns them into e-waste if carelessly returned to online shops.
			*DJI devices have hardware fuses that can be blown using software to [https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 prevent firmware downgrade] to earlier versions.
	*DJI Action and Pocket cameras require activation with the DJI Mimo app after a few uses or would fail to function.		*DJI Action and Pocket cameras require activation with the DJI Mimo app after a few uses or would fail to function.
	*The Android version of the DJI Mimo application requests full filesystem access to the user's device each time a connection to a DJl camera is initiated. If a user denies this permission, the application will refuse to connect to the camera. If a user grants permission for access to only a specific folder or selection of media, the app will connect. However, on every subsequent connection, the app will again prompt for full filesystem access with the message: "DJI Mimo would like to access mobile device's storage, so that you can use features, including editing and downloading photos and videos from camera. Otherwise, related services will be restricted. Go to settings to grant permissions". To prevent the app from gaining access to all files on the device, the user must repeatedly select the "Don't select more" option in the Android permission prompt. This option is positioned directly below the "Allow all" selection, which necessitates user attention during each connection to maintain a restricted level of access.		*The Android version of the DJI Mimo application requests full filesystem access to the user's device each time a connection to a DJl camera is initiated. If a user denies this permission, the application will refuse to connect to the camera. If a user grants permission for access to only a specific folder or selection of media, the app will connect. However, on every subsequent connection, the app will again prompt for full filesystem access with the message: "DJI Mimo would like to access mobile device's storage, so that you can use features, including editing and downloading photos and videos from camera. Otherwise, related services will be restricted. Go to settings to grant permissions". To prevent the app from gaining access to all files on the device, the user must repeatedly select the "Don't select more" option in the Android permission prompt. This option is positioned directly below the "Allow all" selection, which necessitates user attention during each connection to maintain a restricted level of access.

← Older revision		Revision as of 12:20, 24 January 2026
Line 41:		Line 41:
	===Example incident two (''date'')===		===Example incident two (''date'')===
	...		...


	~~===Incident (''date'')===~~

	==Products==		==Products==
	*[[DJI Osmo Action 5 Pro]]		*[[DJI Osmo Action 5 Pro]]
Line 50:		Line 46:

	==See also==		==See also==

			* [[GoPro]]
			* [[Insta360]]

	==References==		==References==
	{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}		{{reflist}}{{Placeholder box\|Link to relevant theme articles or companies with similar incidents.}}
	[[Category:DJI]]		[[Category:DJI]]