Researchers gets threatened rather than paid.

[Steve Carr]

I'm not sure how I missed DJI's Bug Bounty Program. It supposedly was to encourage security experts to look for flaws in DJI's servers and to pay for those efforts if they found and reported flaws.

Man gets threats—not bug bounty—after finding DJI customer data in public view

Researcher: DJI RCE-holes offered me $500 after I found Heartbleed etc on its servers

Keep your money, says chap (tho Chinese drone firm did patch 'em right quick)

www.theregister.co.uk

How DJI fumbled its bug bounty program and created a PR nightmare

Popular drone maker DJI has bungled its bug bounty program — and a very public spat could have repercussions for the growing freelance industry.

www.cyberscoop.com

 

[PatR]

That brought about a pretty lively discussion on another forum about a year or so ago.

 

[claudius62]

Yes, this dates from 2017. Do not worry, DJI has done worse since ..............

 

[traceyjedison]

Yes, this dates from 2017. Do not worry, DJI has done worse since ..............View attachment 16901

Hahaha sound very disappointed