AI Helps Hacker Uncover mates Identification in Leaked DJI Buyer Information Privateness Nightmare – sUAS Information – The Enterprise of Drones


A message from a pal who, properly, er um did one thing massive.

One thing we’ve wished to do for years is share the censored ID’s and Passport photographs (leaked from prospects, and employees alike) that got here off DJI AWS leak, however it’s SOOO exhausting to do manually, and I’m simply now getting sufficient compute energy to censor giant chunks, it’s simply so time consuming. As soon as carried out all of them need to be spot checked once more anyway. Additionally AI is terrible with brown of us faces… simply gonna put that on the market.

Um… additionally I simply ran throughout somebody I personally know, that I missed earlier than!

This story from final night time is wild! I made a decision to let NVIDIA AI course of among the ID’s and Passports collected through the 2017 DJI AWS dump. Each day of us ask me for “proof”, or “proof” of improper doing, or “privateness”, and “safety” points. I believed I’d take one final stab at proliferating info by sharing censored ID’s and Passports because it was U.S. Home of Representatives CCP Drone Act / NDAA eve, and all.

I used to be NOT ready to seek out David Kovar‘s younger face staring again at me as I checked an error in my code. (The purple is what my code missed in censoring). There was slightly “C Kovar” peeking out between black field redactions. I used to be like “HOLY CRAP! There’s solely ONE C Kovar on this earth that might be on this”.
Shortly checking the uncooked picture revealed a pal smiling again at me. I instantly picked up the cellphone.

Me: <texts David> (no reply)
Me: <calls David>
Me: “uhh sorry that is actually vital”… “the place did you reside from 2009 – 2013” (actually hoping you’d say ‘small city USA’)
David: “small city USA”
Me: “Are you able to inform me the precise road you lived on” (actually hoping you’d say ‘<route><road title>’
David: “<route><road title>”
Me: Jaw hits flooring

Proper now we are attempting to find out if David Kovar ever acquired the breach notification in any respect. I’ve emailed assist.privateness@dji.com to ask learn how to verify, and Jason Cao has graciously supplied to do his greatest to place us (actually David!) in contact with the suitable individuals.

For David particularly, this will likely additionally require contacting Illinois Lawyer Common’s Workplace to see if they’ve document of DJI informing them of a seaside to their residents information. https://lnkd.in/gvTTBsVQ

Likewise When you’ve got any suspicion of being compromised within the 2017 leak, however by no means bought a letter, I recommend you instantly attain out to DJI assist employees, or your native Lawyer Common’s workplace.

Be protected on the market!

Leave a Reply

Your email address will not be published. Required fields are marked *