RSS
 

Posts Tagged ‘spying’

US government warns of potential spying by Chinese drone companies

23 May

On Monday, the U.S. Department of Homeland Security (USDHS) sent out an alert that was first obtained by CNN. It states that drones manufactured in China are a ‘potential risk to an organization’s information.’ The products ‘contain components that can compromise your data and share your information on a server accessed beyond the company itself.’

‘The United States government has strong concerns about any technology product that takes American data into the territory of an authoritarian state that permits its intelligence services to have unfettered access to that data or otherwise abuses that access,’ the alert continues.

‘Those concerns apply with equal force to certain Chinese-made (unmanned aircraft systems)-connected devices capable of collecting and transferring potentially revealing data about their operations and the individuals and entities operating them, as China imposes unusually stringent obligations on its citizens to support national intelligence activities,’ the alert adds.

While the report doesn’t name a specific company, Shenzen-based DJI, which dominates the U.S. and Canadian drone markets with close to an 80% share, according to a market sector report from Skylogic Research, is of utmost interest.

While the report doesn’t name a specific company, Shenzen-based DJI, which dominates the U.S. and Canadian drone markets with close to an 80% share, according to a market sector report from Skylogic Research, is of utmost interest. The manufacturer’s drones were recently banned in the US Army several years back, despite no clear evidence of spying or data transfer from the aircraft being presented.

Still, concerns about hacking or the siphoning of data remain at the forefront. The USDHS alert follows an executive order, signed by President Donald Trump, prohibiting U.S. companies from using any telecommunications equipment from Chinese company Huawei. An escalating trade war between the two countries doesn’t help matters and also raises suspicion on the timing of this latest USDHS alert on drones.

The United States leads the world in the number of drone platforms being developed. China comes in a close second place. If the trade war continues to escalate, many upstarts and manufacturers in the U.S. are going to face unexpected challenges with their supply chain if they built their platforms around any Chinese components, as sUAS News points out.

DJI responded to the USDHS’ alert, the full statement is below:

‘At DJI, safety is at the core of everything we do, and the security of our technology has been independently verified by the U.S. government and leading U.S. businesses. DJI is leading the industry on this topic and our technology platform has enabled businesses and government agencies to establish best practices for managing their drone data. We give all customers full and complete control over how their data is collected, stored, and transmitted. For government and critical infrastructure customers that require additional assurances, we provide drones that do not transfer data to DJI or via the internet, and our customers can enable all the precautions DHS recommends. Every day, American businesses, first responders, and U.S. government agencies trust DJI drones to help save lives, promote worker safety, and support vital operations, and we take that responsibility very seriously. We are committed to continuously working with our customers and industry and government stakeholders to ensure our technology adheres to all of their requirements.’

Articles: Digital Photography Review (dpreview.com)

 
Comments Off on US government warns of potential spying by Chinese drone companies

Posted in Uncategorized

 

Leaked government memo claims DJI is spying on the US for China

01 Dec

Drone maker DJI’s security troubles continue to grow, as a newly leaked U.S. Immigration and Customs Enforcement (ICE) memo claims the company may be spying on the US on behalf of the Chinese government. Per the memo, DJI drones and mobile apps are possibly being used to gather data on critical US infrastructure, law enforcement, and more.

The ICE memo was issued on August 9, 2017, and is unclassified. In it, the memo claims that DJI is “likely” providing the aforementioned data to the Chinese government, an assertion that is “based on information derived from open source reporting and a reliable source within the unmanned aerial systems (UAS) industry with first and secondhand access.”

The claims aren’t a certainty, according to ICE, which says in the memo that Special Agent in Charge Intelligence Program (SIP) Los Angeles has “moderate confidence” that DJI is providing law enforcement and critical infrastructure data to China. However, the memo claims that SIP LA has “high confidence” that DJI is “selectively targeting government and privately owned entities within these sectors to expand its ability to collect and exploit sensitive U.S. data.”

SIP Los Angeles makes some alarming claims about the DJI GO and SkyPixel mobile apps, saying in part that they grab facial recognition data even if the feature is disabled. The collected data, which is said to include sensitive personal info like full names, images and videos, phone numbers, and computer credentials, are automatically uploaded to unspecified “cloud storage systems” in Hong Kong and Taiwan “to which the Chinese government most likely has access.”

The memo goes on to state that SIP LA has “high confidence [that] a foreign government with access to this information could easily coordinate physical or cyber attacks against critical sites.”

Sources of information (SOI) have informed officials, according to the document, that:

The Chinese government is using DJI UAS as an inexpensive, hard-to-trace method to collect on U.S. critical assets … directorates most likely receiving the data from DJI’s cloud are the offices responsible for defense, critical infrastructure, traffic controlling, and cyber offense…

This isn’t the first time DJI has been the source of security concerns. Earlier this year, the U.S. Army issued a memo, as pointed out in this most recently leaked document, that ordered its units to immediately cease use of DJI products over security concerns. Additionally, security researcher Kevin Finisterre recently claimed that DJI threatened him after he submitted a bug bounty report highlighting serious security issues he had discovered with the company’s system.

For its part, DJI has released an official statement on the leaked ICE memo, saying:

The bulletin is based on clearly false and misleading claims from an unidentified source. Through the law firm of McDermott Will & Emery, DJI provided ICE a detailed rebuttal of the report, explaining why the data behind its conclusions is deeply flawed.

As DJI explained to ICE, the allegations in the bulletin are so profoundly wrong as a factual matter that ICE should consider withdrawing it, or at least correcting its unsupportable assertions. DJI further urged ICE to consider whether the source of the allegations may have had a competitive or improper motive to interfere with DJI’s legitimate business by making false allegations about DJI.

The company states that some of the claims in the ICE memo can be “easily disproven,” including with “a simple internet search,” while other claims are said to be “unsupported by facts or technical analysis.”

That said, the ICE memo claims, “Much of the information collected [by DJI products] includes proprietary and sensitive critical infrastructure data, such as detailed imagery of power control panels, security measures for critical infrastructure sites, or materials used in bridge construction.”

DJI is allegedly “focused on targeting” the utility companies that provide drinking water in four big locations: New York, Los Angeles, Chicago, and New Jersey. The memo claims the drone maker is also focused on railway companies located in Los Angeles, Dallas-Fort Worth, and Omaha, the Milan Army Ammunition Plant in Fort Riley, Kansas, and it is allegedly also providing the Chinese government with data to help it determine which assets to acquire in the U.S.

The complete ICE memo can be found here.

Articles: Digital Photography Review (dpreview.com)

 
Comments Off on Leaked government memo claims DJI is spying on the US for China

Posted in Uncategorized