dji4321234's comments

dji4321234 | 9 months ago | on: US-backed Israeli company's spyware used to target European journalists

Western state agencies and mid-tier bootleg spyware vendors are neutral at best and antagonists overall. At best, bootleg spyware vendors drop exploits which agencies can reverse and use for their own purposes. But in general, these vendors bring unwanted attention and burn exploits which the state agencies would like to use. These are not part of a global conspiracy, they are competing groups with the same goals.

dji4321234 | 9 months ago | on: Autonomous drone defeats human champions in racing first

> My point was that so far, these things are just curiosities with very limited usage and there's no mass adoption.

Make that point, then! Nothing in your original comment suggested this, just hostile dismissal.

Now that you’ve written a more substantive comment I think we actually agree overall. Most operations in the Ukraine-Russia war are manual piloting. Autonomy is over-hyped overall so far. However! A large number of autonomous systems have still been deployed and interest in autonomy is only growing. Both things can be true at the same time.

> Oh gosh.

Come on, read the whole sentence please. Lock on targeting modules are absolutely being superseded by fiber optic as it becomes “easier” to acquire than it used to be.

https://understandingwar.org/backgrounder/battlefield-ai-rev... was posted by a sibling commenter and is a fairly accurate summary to my knowledge, including a substantiation of the notion that depending on how you look at it, lock on modules were a stop-gap before fiber became available or fiber is a stop-gap before good autonomy becomes widespread.

dji4321234 | 9 months ago | on: Autonomous drone defeats human champions in racing first

https://x.com/sternenko/status/1770348417102819563

Rather, it is you who does not know what you are talking about. Here is a real frontline video characterizing these systems. Yes, it is all still analog FPV. The lock-on system selects a target and overlays the reticle on the analog video. As the FPV flies closer and encounters the jamming from the target, the lock-on unit ensures it is still a hit.

These have fallen out of favor as fiber optic is a little easier to get than it used to be but they are still in wide use.

dji4321234 | 9 months ago | on: Autonomous drone defeats human champions in racing first

There's enormous adoption of autonomous drones.

A large number of front-line FPV drones are equipped with automated last-second targeting systems like https://www.youtube.com/watch?v=coUwYOyIoAU , based on Chinese NPU IP / CCTV systems and readily available as full solutions on Aliexpress. The basic idea is that if the drone loses control or video link due to EW countermeasures, it can continue to the last target.

Loitering and long-range fixed wing reconnaissance drones have been fully autonomous since the beginning. One common recent technique taken from traditional "big" militaries is the use of loitering autonomous high altitude base stations with Starlink or LTE on them providing coverage to the battlefield below, since it's much harder to jam things when they are flying high above the ground.

dji4321234 | 9 months ago | on: How Ukraine’s killer drones are beating Russian jamming

These generally just use RTK and a base station; nothing interesting and extremely easily rejected by EW (since they need both accurate global positioning signal _and_ RTK signal).

Inside-out SLAM strategies and on-device ML are much more interesting and are starting to trickle into COTS drones. For example, the latest DJI drones all use SLAM for return-to-home even when GPS denied: https://www.facebook.com/reel/440875398703491 , and the latest Matrice 4 enterprise drones also have end-user ML model runtimes that can fine-tune flight plans using user-provided logic.

Inside-out last-second targeting is also very popular in Ukraine, with off-the-shelf "find the nearest car/person in analog video, lock to it on signal lost, and send Betaflight MSP stick commands to hit it" modules readily accessible on Aliexpress.

dji4321234 | 1 year ago | on: Show HN: ESP32 RC Cars

Walksnail is not 802.11 based. If anything it is loosely 802.16 based. Likewise DJI OcuSync is more like LTE than anything else.

802.11 is not a good fit for FPV video and trying to use it has held non-proprietary-Chinese video systems back quite a lot.

dji4321234 | 1 year ago | on: Review of Linux on Minisforum V3 AMD Ryzen Tablet

The IOMMU on Apple Silicon only supports 16K pages. The page allocator on Linux only supports unified page sizes. Ergo, to make both IOMMU mappings and userland software work, everything needs to have 16K pages (on OSX, this isn't an issue, because XNU supports mapping both 4k and 16k pages).

It's not really non-standard so much as it is new-standard or different-standard. Aarch64 officially supports 4K, 16K, and 64K pages. This flexibility in the aarch64 ABI means that most compilers already produce 64K aligned load segments for aarch64, so it's not a huge deal except for software that works at a low level and makes assumptions about mmap (for example).

The main software that's truly affected beyond just needing recompilation or tweaks is x86/x86-64 emulation software, since x86 is pretty tightly coupled to 4k pages.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

> arranging it so that DJI "just seems to never be able to" hire any security experts

They're foot-nuking themselves this way, as well. Due to their poor security, DJI are also easily compromised by Western interests and collect a ton of data about Chinese drone operations. I suppose someone could argue they decided that this is worth the cost of the operation, etc., but it seems... odd.

> hire product managers from a pool trained on CCP-sponsored university programs and industry media sources, that have those product managers parroting "useful" beliefs like "more analytics is always better."

The CCP don't need to do any work to make this happen. I totally agree that they benefit, thus my "indistinguishable from malware" comment. But this is how product management works worldwide. Maybe the modern obsession with product telemetry has been a years-long deep intelligence op, but I think it's easier to attribute to standard corporate behavior.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

I wasn't exactly going for "DJI is great" - it's kind of funny that's how it came off.

My points were:

* DJI's use of Secneo on Android isn't hiding a "sendAllYourPhotosToTheCCPServerNow" function. This seems obvious but I've seen this take everywhere.

* However, DJI's apps are loaded with telemetry that's indistinguishable from malware. They ARE full of shady things.

* I wouldn't run a DJI app on my own phone.

* I would use a standalone DJI remote for most low to medium assurance applications, because while the shadiness remains in many ways, the threat model is easy to understand and boundaries are pretty easy to draw.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

Overall what I'd say about DJI is that they seem to be earnestly trying to make their features work at face value.

That is, if you opt out of data collection, they seem to be earnestly _trying_ to disable data collection. Unfortunately their apps are a spaghetti monster disaster and it's very difficult for them to get things right, so DJI frequently introduce new features or libraries which contain telemetry they've forgotten to disable. In my experience they do this more often in consumer apps than enterprise apps. I think they might actually have some kind of automated testing or audit applied to their enterprise apps.

Whether this is a conspiracy to introduce subtle surveillance bugs or simple hardware-company-making-software incompetence is of course an exercise left to the reader's paranoia level.

Anyway, I just use DJI RCs and forget network credentials. This limits the DJI bug/malice blast radius surface area to an acceptable range to me, and that's the advice I'd give others, too.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

No; this functionality is actually accomplished in a reasonable way, with a local database stored on the drone and checked by the drone's flight control software, and exemptions granted by uploading a signed payload to the drone detailing an unlock region and timeframe.

It's also worth noting that these restrictions aren't government imposed in countries besides China, and aren't government-linked besides a request-based "please make this location a no fly zone" process - DJI basically just exported a Chinese concept with hope of building goodwill internationally, and the no-fly zones were invented by DJI from public land use data. That's why other drones don't have no-fly zones but are still allowed for sale, there are frequent mismatches between DJI no-fly zones and real no-fly zones (both false positive and false negative), and why DJI disabled their own no-fly zone feature in much of Europe earlier this year (European mandated no-fly rules passed the responsibility to the consumer instead).

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

There's nothing.

Skydio exited the consumer market. Their drones had good autonomy and flight characteristics. However, they struggled with wireless link quality due to the use of consumer WiFi, and had much older, inferior camera sensors compared to even contemporary DJI drones. They were also ridiculously loud and inefficient. Their enterprise drones are comically expensive and loaded with nickel-and-dime cloud features.

Parrot drones struggle with the same issues as Skydio (Skydio actually used a Parrot remote controller for their consumer drones), plus their autonomy isn't nearly as good as even Skydio's, the overall drone behavior is "clunky" (slow boot times, slow connection times, non-responsive flight controls), and even basic flight is more challenging.

The main issues plaguing US consumer drones are imaging sensors and wireless link. LTE and other well-suited long range wireless technologies capable of handling speed differential between the station and access point are locked in a vault of patents. Imaging sensors are legendarily impossible to acquire in low to moderate quantities and image sensor parameters are carefully locked behind a billion levels of NDA (thus why even the Raspberry Pi camera is full of DRM).

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

Anti-reversing. Obfuscation and packers are dominant in Chinese applications. If something isn't obfuscated, it's free reign for competitors.

> Leaving the door propped open for everyone is also plausible deniability for doing bad things.

We completely agree here, see "sufficient product telemetry is indistinguishable from surveillance malware." I personally don't think this justifies a blanket ban on a technology; if it did, the world would need to be a very different place.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

> It can only be side-loaded on Android, because their app breaks a number of policies on privacy and data gathering.

I don't think this is the reason, I think it's more that they're just too lazy to jump through the approval and maintenance hoops that come with an app store, especially because their home market (China) doesn't even use the Play Store.

The iOS version of their app is Apple-approved and present in the App Store.

I do research in this space.

Their consumer apps are loaded to the gills with product-manager telemetry (tap/action tracing, etc., think Firebase/Flurry/whatever), and until recently they had a "sync flight logs" feature that would do what it said: give your detailed flight logs to DJI. It was opt-in, but it was easy to do by accident and many years ago there were bugs in the opt-in toggle.

They just removed this feature from US apps this week (too little too late, and too attached to reality and not attached enough to political pandering).

DJI also have a terrible track record with data security, with their entire AWS account getting ripped in 2017.

I don't think they're explicitly a CCP data-collection front, but sufficient product telemetry is indistinguishable from surveillance malware (this applies to US-based companies and US intelligence, too, of course).

However, their apps run on their own controllers are generally alright, and their enterprise apps run on their enterprise controllers in Local Data Mode are legitimately clean, barring a few versions with small bugs.

I fly DJI drones all the time using DJI RCs with network credentials forgotten, and I wouldn't hesitate to use one of these for consumer use. For the truly paranoid, use a burner email and a VPN to activate the drone.

I also wouldn't worry about using DJI Enterprise drones with the pro controllers in Local Data Mode for even moderately sensitive applications (infrastructure, law enforcement, etc.).

Of course I wouldn't use one for US military applications, insofar as it would be foolish to use any non-allied electronic device in this way.

ps - note that the analysis in the sibling comments are of older apps, DJI Go 4 and Pilot 1, not the newer flagship apps DJI Fly and DJI Pilot 2. The general theme (tons of dirty analytics platforms) remains the same, but the newer apps use more American platforms (Firebase, AWS-hosted proprietary stuff) rather than Chinese, and the "disable telemetry" and "disable data sync" options generally have fewer bugs now.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

DJI's no-fly zone database is completely independent from the US government. DJI would have to be compelled to add the US as a no-fly zone, which, if their drones are banned already, seems like a rather difficult thing to compel as there's no carrot at the end of the stick.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

It's going to be a disaster for SAR, policing, firefighting, and all kinds of public good. The whole thing is an incredibly shortsighted move that will literally cost lives.

The goal, I think, is that these organizations will migrate to Skydio or BRINC (as they have the only reasonably viable drones for most of these use cases IMHO).

The reality is that they'll buy Autel (just as Chinese as DJI) or just keep using DJI and hoping the FCC Radio Police don't show up, which is probably a safe bet. Anduril don't really sell into this space.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

Sure, but DJI drones already weren't eligible for procurement in US defense anyway, so there's not a major net change there (barring weird edge case loopholes with third-party modifications). Skydio already got their protectionism in the federal space, this is a step beyond.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

HAHA. DJI drones are amongst the most popular tools of war in the Ukraine conflict. Sometimes they drop bombs directly, but more commonly they're used as long-ranged lookout stations and RF-repeater "hovering motherships" for bomb-equipped one-way FPV drone operators (as well as just general reconnaissance tasks).

That said, I don't think this law has anything to do with war, just simple economic protectionism driven by Skydio and other US drone lobbyists. Getting rid of DJI's excellent $7,000 enterprise drones lets Skydio sell their $15,000 + cloud-subscription enterprise drones instead.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

They shouldn't be; they use DJI basebands, so banning DJI and their affiliates using the FCC Covered List should also prevent Anzu from getting new FCC equipment approvals. It's unclear whether the FCC would revoke existing approvals, although it certainly seems like what Congress wants. And if they do, it's unclear if they'd go to the effort to hunt down Anzu and Cogito, but on paper, they certainly should.

By the way, there's no US-written software on Anzu drones. They're just green Mavic 3 Enterprises with a phone app that integrates the DJI SDK. Flying a DJI Mavic 3 Enterprise and an Anzu Raptor using Aloft Air Control will produce exactly identical results in terms of American-ness and data transfer.

dji4321234 | 1 year ago | on: DJI ban passes the House and moves on to the Senate

It adds DJI to the FCC Covered List, meaning they can't get new FCC approvals. The FCC could choose whether or not to revoke existing FCC Equipment Authorizations for existing DJI drones.

If they do revoke the existing Equipment Authorizations, then the drones become illegal RF transmitters and wouldn't be legal to fly, although enforcement would border on impossible.

page 1