LC-2 · Software Danger Reports

LrrK Kinematic Software Danger Report

# LrrK Kinematic Software Danger Report

**LRRK Watch / Software Assurance** — Monthly filing.

| Field | Value |
| --- | --- |
| Collection cutoff | 30 September 2017 |
| Platform | Quiet Systems |
| Series | DKSR-M-2017-09 |
| Status | short |
| Data label | Open-source intelligence // LRRK analytic product |
| Handling | Public-source material. Retrospective monthly. Image rights require separate verification before publication. |

## Executive read

### BLUF

Conference record of the July DJI jailbreak line, in the same month DJI was still standing up bounty scope.

### Key judgments

1. **[Assessment — High confidence]** DerbyCon 7.0 Legacy, Louisville, 22–24 September 2017. Finisterre: he spent “the weekend at Derbycon giving a talk about the state of the DJI jailbreaking scene.”
2. **[Assessment — High confidence]** Same public root / NFZ-bypass tooling RedHerring opened in July. No CVE.
3. **[Uncertainty]** Exact slot inside the weekend not independently pinned.

### Analytic labels

- **Fact** — verified reporting or primary record
- **Assessment** — analytic judgment
- **Inference** — reasoned but not directly observed
- **Uncertainty** — unresolved information gap

### Source grades

- **A1** — authoritative primary record / directly confirmed
- **B1–B2** — generally reliable and corroborated
- **C3** — useful but requires caution

## 01. Finisterre: How to KickStart a Drone Jailbreaking Scene

*Event / publication dates: DerbyCon 7.0 Legacy, 22–24 September 2017*

| Field | Value |
| --- | --- |
| Component | firmware |
| Product | DJI consumer line (jailbreak / root scene that RedHerring opened in July) |
| CVE / advisory | no CVE |
| Patch | partial — see 2017-07-A (Spark 01.00.0500 already out; Mavic 01.03.1000 dated 22 August) |
| Exploit status | public writeup |
| Taxonomy | CAPEC-186 · ATT&CK ICS T0839 · T0843 · OWASP IoT I4 · EMB3D TID-211 · TID-213 |

**Verified record — [Fact — B1] Irongeek DerbyCon 7 list https://www.irongeek.com/i.php?page=videos%2Fderbycon7%2Fmainlist · InfoconDB https://infocondb.org/con/derbycon/derbycon-70-legacy/ · Finisterre PDF https://regmedia.co.uk/2017/11/16/whyiwalkedfrom3k.pdf**

**Exposure.** Public root / NFZ-bypass tooling on fielded DJI airframes. Update path.

**Intelligence assessment.** [Assessment — High confidence] Talk happened at DerbyCon 7. [Uncertainty] Exact clock time.

**Opportunity.** Same DUML class as July. Watch November cloud-key writeup.

**LRRK relevance.** Control Fabric. Campaign (NFZ).

**Confidence.** High on weekend. Medium on clock time.

## Forward indicators

1. Finisterre cloud-key PDF (16 November 2017).
2. Melia Heartbleed / SQLi / RCE dispute (27–28 November 2017).

> **Collection integrity.** One talk in the July jailbreak line. Not a new CVE. Not padded. No exploit steps.

*LRRK — security assurance for systems that sense, move, and act.*

<p align="right"><span style="opacity:0.35;letter-spacing:0.18em;font-size:0.8em">L-C2</span></p>