DJI offering up to $30,000 'bounty' to anyone who finds a critical software vulnerability
DJI is offering cash rewards to anyone who finds a significant bug in its software. The new bug bounty program offers financial incentives ranging from $100 to $30,000 in the hopes that researchers and users alike may find problems related to software security, flight safety, and app stability. This, following a leaked military memo that ordered the US Army to cease their use of DJI products over unspecified 'cyber vulnerabilities.'
The alleged vulnerabilities cited by the military memo were found by the U.S. Army Research Lab and U.S. Navy, which ordered the U.S. Army to stop using 'all DJI products,' and news of the order stirred concerns in the private sector over whether DJI's software was adequately protecting customers' data. Around the same time, DJI introduced an offline mode that allows operators to limit a drone's communications to just its controller.
DJI will soon launch a dedicated bug bounty website with a standardized form through which bug discoveries can be submitted. Until that time, the company advises individuals who have found a bug to report it to the 'firstname.lastname@example.org' email address. Only qualified bugs will result in rewards, and specific terms will be detailed on the upcoming bug bounty website.
DJI To Offer ‘Bug Bounty’ Rewards For Reporting Software Issues
Threat Identification Reward Program Will Address Software Concerns
August 28, 2017 – DJI, the world’s leader in civilian drones and aerial imaging technology, is establishing a “bug bounty” program to reward people who discover security issues with DJI software. The DJI Threat Identification Reward Program is part of an expanded commitment to work with researchers and others to responsibly discover, disclose and remediate issues that could affect the security of DJI’s software.
“Security researchers, academic scholars and independent experts often provide a valuable service by analyzing the code in DJI’s apps and other software products and bringing concerns to public attention,” said DJI Director of Technical Standards Walter Stockwell. “DJI wants to learn from their experiences as we constantly strive to improve our products, and we are willing to pay rewards for the discoveries they make.”
The DJI Threat Identification Reward Program aims to gather insights from researchers and others who discover issues that may create threats to the integrity of our users’ private data, such as their personal information or details of the photos, videos and flight logs they create. The program is also seeking issues that may cause app crashes or affect flight safety, such as DJI’s geofencing restrictions, flight altitude limits and power warnings.
Rewards for qualifying bugs will range from $100 to $30,000, depending on the potential impact of the threat. DJI is developing a website with full program terms and a standardized form for reporting potential threats related to DJI’s servers, apps or hardware. Starting today, bug reports can be sent to email@example.com for review by technical experts.
The DJI Threat Identification Reward Program is part of a renewed focus on addressing concerns about DJI product security, including new efforts to partner with security researchers and academics who have a common goal of trying to improve the security and stability of DJI products. DJI is also implementing a new multi-step internal approval process to review and evaluate new app software before it is released to ensure its security, reliability and stability.
DJI has not previously offered formal lines of communication about software issues to security researchers, many of whom have raised their concerns on social media or other forums when they could not determine how best to bring these issues to DJI’s attention.
“We want to engage with the research community and respond to their reasonable concerns with a common goal of cooperation and improvement,” Stockwell said. “We value input from researchers into our products who believe in our mission to enable customers to use DJI products that are stable, reliable and trustworthy.”
TIME Magazine has named the Sony a7R III one of its top 10 gadgets of 2017. It was the only camera that made the illustrious list this year, receiving high praise from TIME, who dubbed it "one of the best mirrorless cameras ever made."
Thanks to Google Assistant integration, the Pixel 2's AI-powered 'Google Lens' camera feature will soon be easier and quicker to use.
Photographer Jenna Martin and her model friend Rachelle Kathleen set themselves a challenge: could they create beautiful portraits in an 'ugly' location? So they went to a local Lowe's hardware store and gave it a go!
The LG V30 differentiates itself from the competition with an expansive video feature set and a secondary wide angle camera, making it something of a Swiss Army knife for content creators.
We're counting down our top 10 most popular sample galleries of 2017. Holding down the top position is none other than the Nikon D850 – by a landslide.
It's been twenty years since Jeff Keller founded the Digital Camera Resource Page, one of the first websites dedicated to digital photography. Jeff, who has been at DPReview for nearly five years, looks back at the rise and fall of consumer digital cameras and his website.
We're counting down our top 10 most popular sample galleries of 2017. At #2 we have another staff favorite – the Sony Alpha a9.
Rotolight has released the Anova Pro 2 circular LED for stills and video, boasting a 70% increase in brightness and what the company describes as "unrivaled battery performance."
Designer Vinicius Araújo has imagined what he believes the perfect Adobe software keyboard might look like. From customizable touch pads, to a scroll wheel, to a little display that shows the tool in use, his design is pretty compelling.
Peak Design has teamed up with Leica to release a limited-edition backpack made special for fans of the Red Dot.
A portrait of an android woman has beaten over 5,700 pictures of humans to take third place in this year’s prestigious Taylor Wessing Portrait Prize. The judges were not told the subject was an 'android' until after the winning images were chosen.
Hauling around C-Stands just got a whole lot less annoying thanks to these new Matthews shoulder and roller bags, which can hold two or three C-stand (respectively) plus accessories.
Neal Preston has shot timeless photos of everyone from Led Zeppelin, to Whitney Houston, to Michael Jackson. In this interview, he offers insights into his craft to up-and-comer Elijah Dominique.
Future prosumer Canon DSLRs might feature light-up buttons, if this newly published patent is any indication of the camera company's plans.
Sony's a7R Mark III shoots 42.4MP files at 10fps and incorporates a robust video feature set, large battery, refined ergonomics and more. It certainly looks impressive, but what is it like to use, and how does it stack up against the rest of the market? Find out in our full review.
We're counting down our top 10 most popular sample galleries of 2017 – the Fujifilm X100F takes the bronze and the #3 spot.
There's never been a better time to shop for a new camera, but the number of options available can be overwhelming. In this series of buying guides we've provided customized recommendations for several use cases, from shooting landscapes to buying a first camera for a student photographer.
Shopping for a camera with a set budget? No problem! We've rounded up our favorite cameras, broken them into price brackets and picked the best of the bunch.
Looking for a lightweight compact camera that's easy to bring with you anywhere? Or maybe you're smartphone-shopping and want the one that takes the best picture. And what if you want to shoot from above? In these buyers guides we have recommendations for the best compact cameras, smartphones and drones.
Despite reports to the contrary, analysis of DPReview images by our friend Jim Kasson confirms a disappointing fact: Sony a7R III is still a Star Eater. But there may be some improvements.
As the saying goes: A photo is worth a thousand words. And if you're sending that photo through Facebook Messenger, your thousand words now look twice as nice after today's update to 4K resolution.
Get to know the new Leica CL in short order by giving our 90 second 'First look' video a watch.
Leica has just released the CL, the forth in its series of APS-C L-mount cameras. Despite sharing a name with a camera released in the mid-70s, the new CL is a thoroughly modern ILC, with a 24MP sensor and built-in electronic viewfinder.
The Leica CL is a 24MP rangefinder-style mirrorless camera, which sits alongside the TL2 in the company's APS-C lineup. We've been using one for a few days – check out our gallery of images.
While it shares a name with one of Leica's most popular and affordable cameras of the 1970s, the new CL is separated from its namesake by more than just years. We've been using one for a few days - click through for a detailed first-impressions report.
We're counting down our top 10 most popular sample galleries of 2017, and the #4 ranking goes to the Leica M10.
Sigma is discounting 13 different high-performance 'Art' series lenses from today until November 30th. The company is calling it an 'unprecedented' sale.
See DJI's 'AeroScope' drone-tracking technology in action. This is the system that DJI says can help law enforcement and airport (among others) track and identify rogue drones.
iPhone X owners can already accessorize their new phone with high-quality smartphone photography lenses courtesy of Moment's new lineup.
Considering buying Sigma's exciting new 16mm F1.4 DC DN Contemporary lens for crop-sensor E-Mount and M43? Check out these official full-res samples first!