Drone maker DJI left its private SSL, firmware keys open to world+dog on GitHub FOR YEARS
Plus AWS creds, public-facing S3 buckets packed with info Chinese drone maker DJI left the private key for its dot-com's HTTPS certificate exposed on GitHub for up to four years, according to a researcher who gave up with the biz's bug bounty process."