A message from a pal who, effectively, er um did one thing huge.
One thing we’ve wished to do for years is share the censored ID’s and Passport images (leaked from clients, and workers alike) that got here off DJI AWS leak, however it’s SOOO exhausting to do manually, and I’m simply now getting sufficient compute energy to censor massive chunks, it’s simply so time consuming. As soon as achieved all of them should be spot checked once more anyway. Additionally AI is terrible with brown of us faces… simply gonna put that on the market.
Um… additionally I simply ran throughout somebody I personally know, that I missed earlier than!
This story from final evening is wild! I made a decision to let NVIDIA AI course of a number of the ID’s and Passports collected in the course of the 2017 DJI AWS dump. Day-after-day of us ask me for “proof”, or “proof” of fallacious doing, or “privateness”, and “safety” points. I assumed I’d take one final stab at proliferating data by sharing censored ID’s and Passports because it was U.S. Home of Representatives CCP Drone Act / NDAA eve, and all.
I used to be NOT ready to seek out David Kovar‘s younger face staring again at me as I checked an error in my code. (The crimson is what my code missed in censoring). There was a bit of “C Kovar” peeking out between black field redactions. I used to be like “HOLY CRAP! There’s solely ONE C Kovar on this earth that might be on this”.
Shortly checking the uncooked picture revealed a pal smiling again at me. I instantly picked up the telephone.
Me: <texts David> (no reply)
Me: <calls David>
Me: “uhh sorry that is actually necessary”… “the place did you reside from 2009 – 2013” (actually hoping you’d say ‘small city USA’)
David: “small city USA”
Me: “Are you able to inform me the precise avenue you lived on” (actually hoping you’d say ‘<course><avenue identify>’
David: “<course><avenue identify>”
Me: Jaw hits flooring
Proper now we are attempting to find out if David Kovar ever obtained the breach notification in any respect. I’ve emailed assist.privateness@dji.com to ask tips on how to verify, and Jason Cao has graciously provided to do his finest to place us (actually David!) in contact with the correct folks.
For David particularly, this will likely additionally require contacting Illinois Legal professional Basic’s Workplace to see if they’ve document of DJI informing them of a seashore to their residents information. https://lnkd.in/gvTTBsVQ
Likewise When you have any suspicion of being compromised within the 2017 leak, however by no means received a letter, I recommend you instantly attain out to DJI assist workers, or your native Legal professional Basic’s workplace.
Be secure on the market!