Back

The absence of official statements from #DJI and Google is suspicious, and news outlets support the trade-war theory:

barrons.com: "DJI was previously blacklisted by the US Department of the Treasury in 2021 for allegedly supporting the surveillance of the Uyghur minority in China's Xinjiang region."

wsvn.com: US customs officials have also blocked some DJI shipments over concerns that the products might have been made with forced labor. DJI has called it “a customs-related misunderstanding.”

But there are also less conspiratory explanations:

It's in the apple app store. [...] And while the spyware angle is 'fun,' it's a pretty goofy logical jump. The real reason appears to be a compatibility issue, "Google announced a while back that app developers will have to ensure their apps are packaged as bundles (AAB) rather than the standard APK. According to a DroneDJ reader, DJI’s SDK has a bug that prevents it from compiling in this new AAB standard."

https://www.reddit.com/r/dji/comments/144x6c9/comment/kqj75cb/
#DJI

Just a bug then... seems plausible.

But the #DJI apps have been unavailable from the Play Store since early 2021. Which SDK bug couldn't be fixed in almost 4 years?

On the other hand, if Google had genuine security concerns with DJI's apps, why would Apple allow them?

I worked on #AOSP for 3 years. It's enough to know that there are millions of devices in the wild running ancient kernels with unpatched security holes.

Android system permissions add a second line of defense, but stores also use a combination of security reviews, developer reputation, user reports and static analysis tools to catch malicious apps and actively kick them out.

Since I can't verify the stories against #DJI, I cautiously decided to keep their apps off my Pixel phone for now.

Instead, I'll put it on my #LineageOS hacking phone, an old but trusty OnePlus 7T, which shows the same scary message, but this time I take the time to read the small print:

"This app was built for an older version of Android and doesn't include the latest privacy protections."

So, was that a simple API level deprecation issue that DJI could have fixed by upgrading the SDK?

Anyway, the app works and requested access to location and media files, both of which seem plausible for a camera drone.

A more modern Android SDK would have allowed narrower access to videos, but anyway...

Upon connecting to my old Mini 2, the app wants to install a 60MB firmware update. Ugh.

Then comes a "FlySafe Database" update. Hmm, ok.

After a couple of reboots, we're finally ready to fly. But now it's night, so we'll have to wait until tomorrow