LC-2 · Software Danger Reports

LrrK Def Cuts

# LrrK Def Cuts

**LRRK Watch / Conference Record** — Public DEF CON / Black Hat signals on software, firmware, and hardware that move physical systems.

| Field | Value |
| --- | --- |
| Collection cutoff | 4 August 2013 |
| Platform | Quiet Systems |
| Series | DC-Y-2013 |
| Status | short |
| Data label | Open-source intelligence // LRRK analytic product |
| Handling | Public-source material. Image rights require separate verification before publication. |

## Executive read

### BLUF

The first named DJI Phantom on a DEF CON stage is still a perch-and-stare wireless-survey airframe — GPS return-to-home and payload integration as a collector, not a disclosed Phantom command-link failure.

### Key judgments

1. **[Assessment — High confidence]** Ricky Hill’s DEF CON 21 talk is the only verified in-scope kinematic briefing. Black Hat USA 2013 and Black Hat Europe 2013 are NIL. Black Hat Asia has not started.
2. **[Assessment — High confidence]** No CVE, advisory, Exploit-DB ID, or talk-tied GitHub repo attaches. The Phantom is the sensor truck, not the victim.
3. **[Inference — Moderate confidence]** SkyJack (Parrot AR.Drone Wi-Fi takeover) is a 2 December 2013 blog / GitHub after-record with no DEF CON or Black Hat talk, and it falls after this cutoff. It stays out. Consumer airframes as victims are a Watch item for later venue years.

## 01. Hill: DJI Phantom as a perch-and-stare wireless-survey airframe

*Event / publication dates: presented 3 August 2013 (Saturday 14:00 PT), DEF CON 21, Las Vegas.*

| Field | Value |
| --- | --- |
| Venue | DEF CON |
| Component | hardware |
| Product | DJI Phantom (early); GPS return-to-home / payload integration for network surveillance |
| CVE / advisory | none found |
| Patch | none |
| Exploit status | none public |

**Verified record — [Fact — A1]** Ricky Hill presented “Phantom Network Surveillance UAV / Drone” at DEF CON 21. The DC21 schedule, DC21 archive, media.defcon.org slides (original and updated), media.defcon.org video, and InfoconDB are the primary record. Failure class: an early DJI Phantom used as a perch-and-stare wireless-survey airframe (GPS RTH / payload integration), not a disclosed Phantom command-link vulnerability.

**Exposure.** Sense: elevated wireless survey from a consumer GPS airframe. Move is GPS RTH as a convenience of the collector, not a disclosed hijack. Act is the survey payload.

**Intelligence assessment.** [Assessment — High confidence] This is the first leftover-inventory talk that names DJI Phantom on a DEF CON or Black Hat stage. [Assessment — High confidence] Exploit status is none public; no CVE or advisory was found. [Inference — Moderate confidence] A consumer GPS RTH airframe on stage as a collector is a Watch precursor to later Phantom victim talks (2015–2016), not evidence those failures were public here.

**Opportunity.** Passport early Phantom GPS RTH and payload integration as collector features. Kestrel this airframe against 2015 Unicorn Team / Robinson and 2016 Luo, when the same product family is the victim. Do not back-date SkyJack or later Phantom CVEs onto this talk.

**LRRK relevance.** Watch, Lab, Campaign “UAV-as-collector” vs “UAV-as-victim.” Sense-Move-Act on a named consumer airframe used as a perch. Control Fabric is not the disclosed object.

**Confidence.** High on the talk, slides, and video. High that this is not a command-link disclosure. Low on a firmware version pin — none is in the inventory.

## Forward indicators

1. A venue talk that treats DJI Phantom, Parrot, or a GCS datalink as the victim.
2. Any CVE or vendor advisory on Phantom command, Wi-Fi, or GPS trust.
3. Whether SkyJack-class Parrot work ever appears as a DEF CON or Black Hat talk (it does not in this series window).
4. Black Hat USA / Europe kinematic briefings (NIL in 2013). Black Hat Asia first edition is 2014.

> **Collection integrity.** Searched media.defcon.org DEF CON 21 presentations and video-and-slides; defcon.org DC21 schedule and archive; Black Hat USA 2013 briefings (blackhat.com/us-13/briefings.html); Black Hat Europe 2013 archives; InfoconDB. One counted talk. Black Hat USA / Europe 2013 are NIL. Black Hat Asia had not yet started. Samy Kamkar SkyJack (2 December 2013 blog + GitHub, Ars Technica after-record) is not a DEF CON or Black Hat talk and is after this cutoff — excluded. Todd Humphreys / UT Austin civil-GPS UAV capture, HOPE 2012 “Pwn the Drones,” ADS-B / ATC, and car CAN talks stayed out. No invented talks. No exploit steps. CVE / Exploit-DB / GitHub research repo: none found.

*LRRK — security assurance for systems that sense, move, and act.*

<p align="right"><span style="opacity:0.35;letter-spacing:0.18em;font-size:0.8em">L-C2</span></p>