FutureFive New Zealand logo
Consumer technology news from the future
Story image

Police drone data risks ending up on servers Chinese government can access - reports

FYI, this story is more than a year old

Police drones are at risk of the data they gather ending up in cloud servers the Chinese government can access, but this can be managed, and the benefits outweigh the risks.

That is the conclusion in reports on police trials of drones released under the Official Information Act (OIA).

"An internet-connected [drone] could send data to a server located in China, and firmware updates could compromise the integrity of the [drone] and any police systems to which it is connected," said the main 96-page report on the trial.

An internet-connect drone of the type police use would, by default stores information on a server hosted by Chinese web giant Alibaba, the consultant who advised police, Dr. Andrew Shelley, told RNZ.

Read Security Concerns with DJI Products by Andrew Shelley (PDF, 198KB)

  • Police triple their fleet of Chinese-made drones from 26 to 72
  • Buy a couple of much more expensive - and much more data-secure - drones approved by the US military
  • Consider putting a small, cheap drone "in every [patrol] car"

A West Coast policeman with a drone in his car took high-resolution photos of a big slip on a state highway in major floods in late 2019.

Getting a handle on emergencies like this, and on crime scenes and road crashes, are among the drone pluses the reports outline.

A significant hurdle is that there are a "wide range of circumstances" where police could be guilty of "trespass surveillance" in the air above private property (although fewer than one in 10 flights in the six-month trial in 2019-20 was for surveillance, and this was targeted, not general surveillance).

The main report also highlighted the hotchpotch nature of police digital systems, that it said must improve to store drone data that might be used in court.

How drones were used in the 2019-20 trial.

How police drones were used in the 2019-20 trial. Graphic: Screenshot / Police Proof of Concept report

'Obvious risks'

The police districts already had a small fleet of drones before the alarm went up in the US in 2017 about a technical backdoor that might allow Da-Jiang Innovations (DJI) drone data to be hijacked.

After that the Australian and New Zealand militaries, which also use DJI drones, forbade connecting their drones to the internet or their own networks.

But police were not aware of this.

They had already approved the trial, when drone expert Dr Andrew Shelley told them by email in August 2019 there were "obvious risks".

It "arguably could be the case" the Chinese government could access the drone data, he told RNZ.

"It's hard to tell whether this is intentional, or whether it's just an unintentional by-product of how the software has been developed."

Police pilots had been loading apps to help fly the drones on their personal devices because the apps were not allowed on police devices.

"So it might be appropriate to provide stand-alone police devices specifically for using these apps," Shelley told police.

Overseas, security sleuths had found backdoor access to unencrypted flight logs, photos and live video, and user profile information including drivers licenses and passports, the reports say.

They found when DJI's GO 4 application was launched, a file was sent from the user's phone to an Alibaba server.

DJI rejected the criticisms and patched problems.

Shelley recommended police at very least only use drones with one of these patches - Local Data Mode. But he warned in an August 2019 report even then "there is some risk that a future firmware update could re-enable data sharing".

It had to be assumed "the craft are not secure if connected to the internet"; not being connected at all was "foolproof", Shelley said.

Police were not naive, and took notice of his warnings, he said.

Limits - but useful

Police say they do not connect the drones, even though this limits how useful they can be.

Limited, too, for surveillance: Police have some leeway under the Civil Aviation Authority rule 102 but flights would still need a warrant to observe private activity on private premises, the reports say.

A graph showing the numbers of flights in the 2019-20 trial.

A graph showing the numbers of flights in the 2019-20 trial. Graphic: Screenshot / Police Proof of Concept report

So-called "trespass surveillance" by drone was only allowed when investigating serious offences or some arms or drug offences.

A fifth of the 120 flights during the trial needed a warrant. It appeared warrant requirements "are being considered".

Despite the limitations, the main report said it was worth the time and money for each of the 12 districts to get hold of six DJI drones.

They should use $3500 Mavic 2 Enterprise drones that have better security (and can track a target automatically) [rather] than $900 Mavic Minis, it said.

Small micro-drones could be deployed by Armed Offenders Squads, and police should consider buying one or two much more expensive - and secure - Aeryon SkyRangers or fixed-wing Aerovironment Pumas. The Defence Force has several SkyRangers.

These did not connect to the Internet at all, Shelley said.

"If the risks are controlled, certainly those benefits outweigh the risks."

 

RNZ logo
This story was originally published on RNZ.co.nz and is republished with permission.
Related stories
Top stories
Story image
Commerce Commission
ComCom puts electronics sector on notice over resale price maintenance
The Commerce Commission has concluded an investigation into allegations that television manufacturers were engaging in illegal resale price maintenance.
Story image
Review
Hands-on review: Philips Hue White and Color Ambiance Starter Kit A60
Philips’ range of Hue smart lighting promises to make any home a smart home. Techday’s Darren Price checks out the Philips Hue White and Color Ambiance Starter Kit A60.
Story image
N4L
N4L, Spark, Chorus partner for Hyperfibre school upgrade
Networks for Learning (N4L) has partnered with Spark and Chorus to upgrade Wellington College to Hyperfibre, fostering stronger outcomes for students and teachers.
Story image
Electricity
Canstar finds Flick Electric NZ’s favourite provider
Canstar’s annual research to find New Zealand’s favourite electricity provider reveals Flick Electric has come out on top.
Story image
Film review
Film review: Jurassic World Dominion
This movie is what happens when you cross a lot of hungry dinos with humanity trying desperately to redeem itself for a mistake, and boy does it try.
Story image
Cloud
Google announces new version of Chromecast with remote features
Google has announced its newest version of Chromecast, featuring a variety of new features and a new look.
Story image
Cloud
Apple announces new developer tools and APIs for better app experiences
The new announcement encompasses new tools, technologies and APIs that the company says are designed to help developers create better and more involved experiences for their users.
Story image
InternetNZ
Govt must step up to police social media - InternetNZ boss
A technology industry leader is urging the government not to shy away from policing social media platforms in New Zealand.
Story image
Cloud
Apple unveils M2 with 50% more memory bandwidth than M1
Compared to M1, M2 has an 18% faster CPU, a 35% more powerful GPU, a 40% faster Neural Engine, and delivers 50% more memory bandwidth and up to 24GB of fast unified memory.
Story image
Gaming
Game preview: The Quarry (PC)
On playing a bit of The Quarry, I began to understand why the game has got its own release rather than just being part of The Dark Pictures Anthology.
Story image
Dark web
Cybercrime in Aotearoa: How does New Zealand law define it?
‘Cybercrime’ is a term we hear all the time, but what exactly is it, and how does New Zealand define it in legal terms?
Story image
Cloud
Apple brings redesigned MacBook Air and updated MacBook Pro to market
Apple has introduced a redesigned MacBook Air and an updated 13-inch MacBook Pro, both powered by the new M2 chip.
Story image
Design
Hands-on review: Samsung S22 Ultra
I have been impressed by the functions Samsung packed into this phone. I did actually make one phone call on this phone, in between trying out as many of its other uses that I could pack in.
Story image
Gaming
Game review: The Quarry (PC)
Supermassive Games channel 1980s teen horror movies with their latest suspense-filled cinematic adventure, The Quarry.
Story image
Cloud
Microsoft NZ and TupuToa to boost diversity in cybersecurity sector
Microsoft NZ has teamed up with TupuToa to co-develop a cyber security employment programme specifically aimed at creating more diversity in Aotearoa's cybersecurity sector.
Story image
Cloud
Hisense launches in New Zealand with new product range
Consumer electronics and home entertainment brand Hisense has launched in New Zealand, bringing its range of TVs, refrigeration, and laundry products to Kiwi customers.
Story image
Skills shortage
Tech salaries increase as skills shortage inflates expectations
More technology professionals will receive a pay rise this coming financial year than last, with skills shortages creating a once-in-a-career market.
Story image
Digital Transformation
Publicis Sapient and The Man Cave drive digital transformation for mental health
Publicis Sapient and The Man Cave are joining forces to help support the mental health and wellbeing of young men around the world.
Story image
Review
Hands-on review: Morphée
Life in the twenty-first century has become a 24-hour affair. Morphée promises to help restore some balance to your life.
Story image
Cloud
Chorus and Nokia launches first trial of 25G PON broadband
Chorus and Nokia have announced the successful demonstration of 25 gigabit per second fibre (Gbps) broadband technology at the Chorus Fibre Lab in Auckland. 
Story image
Artificial Intelligence
Adobe launches AI-powered updates to Photoshop and Lightroom
Adobe says the updates use Adobe Sensei AI and machine learning to simplify complex workflows and streamline cross-device collaboration.
Story image
Wireless
WolfVision releases new Cynap Pure Mini screen sharing solution
WolfVision has launched the WolfVision Cynap Pure Mini, a new wireless screen sharing solution that looks to enable easier and more effective presentations.
Story image
Gaming
Intel Arc A380 graphics units launched in China, global release imminent
New Intel Arc A380 graphics units are set to bring next-generation technologies to gamers and content creators in the coming months. 
Story image
Wireless
Hands-on review: HyperX Pulsefire Haste wireless mouse and HyperX Pulsefire XL Mat
With its lightweight Pulsefire Haste wireless mouse and RGB lit Pulsefire XL Mat, HyperX sets out to up your game and add a little colour to your desktop.
Story image
Cloud
Linktree Marketplace creates new commerce options for creators
Linktree has launched Linktree Marketplace, a new forum for users to discover all of Linktree's partners, Link Apps, and integrations in one place.
Story image
Cloud
Apple reveals new iOS 16 features set to enhance sharing and communication
Apple has unveiled an all-new Lock Screen experience and new ways to share and communicate in iOS 16.
Story image
Gaming
AMD introduces FSR 2.0 giving gaming GPUs a boost
Not only have AMD proudly announced their new line-up of Radeon RX 6000-series graphics cards, but the company has also unveiled the first games to support its FSR 2.0 technology.
Story image
Wireless
Hands-on review: JBL Quantum 610 Wireless
The new Quantum 610 gaming headset is the latest addition to JBL’s Quantum range and the successor to its popular Quantum 600 model.
Story image
Phishing
WhatsApp and QR codes the next scam threat - report
KnowBe4 has warned it expects to see an increase in QR Codes and the WhatsApp chat platform being used for phishing and other scams. 
Story image
Cloud
Sony expands X-Series portable speaker range with three new models
The company says the SRS-XG300, SRS-XE300 and SRS-XE200 all contain high-quality and powerful sound pressure due to X-Balanced Speaker Units.
Story image
Remote Working
Hands-on review: EcoFlow River Pro Portable Power station
We get hands-on with an extremely versatile device that every remote worker or outdoor enthusiast should consider.
Story image
Robotic Process Automation / RPA
Automated Guided Vehicles at seaports to grow 26% by 2027
ABI Research says the global use of Automated Guided Vehicles in seaports will exceed 150,000 deployments by 2027. Port authorities are also looking into 5G private networks.
Story image
Wireless
ComCom finds NZ broadband compares well with Australia
A new report published by the Commerce Commission has found New Zealand's Ultra-Fast Broadband (UFB) compares well to Australia's National Broadband Network.
Story image
Terramaster
TerraMaster launches its T6-423 Professional NAS with TOS 5 OS
Shenzhen-based data storage manufacturer, TerraMaster, has launched the T6-423 6-bay tower NAS.
Story image
Entelar
How TruSens air purifiers can create healthier workspaces
The pandemic has heightened our awareness of our own and others’ health, and made us all much more conscious of the environments we work in.
Story image
Cloud
Adobe Substance 3D updates, looks to the metaverse
A look at all of Adobe's major updates for Substance 3D and how its services are enabling businesses to get metaverse ready.
Story image
Cloud
Microsoft and Manaaki Whenua to map NZ's forest cover change
Microsoft and Manaaki Whenua Landcare Research, are teaming up to develop improved detection of land use and forest cover change in New Zealand.
Story image
Apple
Apple’s watchOS 9 and its new features, including a medications app
The new watch0S 9 gives users more watch faces, an updated workout and sleep app and a brand new medications app.
Story image
Digital Transformation
SAP partners with New Zealand Rugby for digital transformation
The multi-year partnership will see SAP advance NZR with its organisational operations, team performance, fan experience and sustainability goals.
Story image
Cloud
Apple improves Mac operating system with latest offering
Apple has unveiled the latest version of its desktop operating system, macOS Ventura, providing users with tools for greater productivity.
Story image
Cloud
Microsoft launches the Surface Laptop Go 2 with new features
Microsoft has introduced the new Surface Laptop Go 2, adding to the company’s growing portfolio of Surface Laptop devices.
Story image
Broadband
Mercury launches broadband and fibre packages for NZ customers
Mercury has officially launched Mercury Broadband, giving its electricity and gas customers the ability to add fibre to their existing Mercury account.
Story image
Cybersecurity
Why is NZ lagging behind the world in cybersecurity?
A recent report by TUANZ has revealed that we are ranked 56th in the world when it comes to cybersecurity - a look into why we're so behind and what needs to be done.
Story image
Cloud
Dynabook refreshes Portégé X30L series with the Portégé X30L-K
The new model contains hybrid-architecture Intel 12th Gen Core P-Series 28W processor options, Wi-Fi 6E, along with Intel Iris Xe graphics.